A quick look at the Ikea Trådfri lighting platform

Re:A quick look at the Ikea Trådfri lighting platform by peeters on Saturday April 08, 2017 @10:52PM (#14070194)

I mentioned this elsewhere, but signing can tell you whether it's an authentic object, but usually not whether it's THE authentic object you had requested. So you then need something extra to validate that what you got is what you wanted, for example check the version number in the signed image. But how do you know what version number you should be looking for without HTTPS?

In this case the article points out that the metadata itself is downloaded over HTTP.

[ Parent | on HN ]

Re:A quick look at the Ikea Trådfri lighting platform by hawski on Sunday April 09, 2017 @10:11AM (#14072364)

A silly solution:

Recreate a package every day, week or month and update package date to current time. A device will refuse to install an update that is older than factory specified interval. Of course the problem then is that your device now needs to have secure channel to NTP servers. Possibly they could use radio synchronization instead - same as used in radio controlled watches. It could be exploited, but it would be much harder to do remotely by network.

It needs a bit of gymnastics, but it may still be easier on the long run than HTTPS. Your mileage can vary.

Edit: Dear downvoter: Was I overly dumb or inaccurate with my proposition?

[ Parent | on HN ]

Re:A quick look at the Ikea Trådfri lighting platform by gcr on Sunday April 09, 2017 @12:10PM (#14072926)

Simpler solution: just refuse to install a firmware update that doesn't verify, or whose version number is less than the currently installed version.

[ Parent | on HN ]