Re:IOT Developer Security Checklist
by ngneer on Thursday May 25, 2017 @05:41PM
(#14420334)
The guidelines appear rather rudimentary. It is a sad state of affairs that IoT developers need these.
[ Parent
| on HN ]
Re:IOT Developer Security Checklist
by aeronautic on Thursday May 25, 2017 @05:46PM
(#14420377)
I know, it is a very sad state of affairs.
In doing IOT for 2 decades, this is probably one of the biggest issues. At best, most devices have a "download firmware" option that 99% of users can't operate.
I could go on about dozens of other issues, like back-door field-service passwords, http not https, passwords in the clear, endless XSS vulnerabilities, but this is one of the biggest.