FBI tells router users to reboot now to kill malware infecting 500k devices

Re:FBI tells router users to reboot now to kill malware infe... by chasil on Saturday May 26, 2018 @01:55PM (#17163358)

I propose that hardware manufacturers be forced to divulge admin methods and encryption keys to their products 6 months after their software updates end.

At least users can apply workarounds in that condition. As it stands, there are no options for the owner of the device.

[ Parent | on HN ]

Re:FBI tells router users to reboot now to kill malware infe... by staticassertion on Saturday May 26, 2018 @01:58PM (#17163373)

This just shifts the burden to the users, I don't see this as a meaningful solution.

I think that there would probably need to be classifications of software.

Things like:

1) Is this infrastructure (routers, scada)

2) What level of user data is exposed to this software ? (unencrypted user data, credit card info, etc - we already do this to some extent)

3) What level of exposure exists? (NAT'd, routable, etc)

And then start imposing restrictions on software in those cases.

But this is very off-the-cuff, obviously it's far more complex than this. But someone needs to be responsible.

[ Parent | on HN ]