News for hackers. Stuff that matters.

A comment on FBI tells router users to reboot now to kill malware infecting 500k devices. Parent comment

Re:FBI tells router users to reboot now to kill malware infe... by bradknowles on Saturday May 26, 2018 @04:49PM (#17164181)
Perhaps a “UL Labs” type of solution for software, so that if your software and organization are certified according to the current standard, then your liabilities would be reduced?

And yes, organizations and versions of software would have to be recertified on a regular basis.

You would want software versions to be able to be certified quickly and through an automated process, but there is already some best practice in this space — it’s just unevenly distributed.

[ Parent | on HN ]
Re:FBI tells router users to reboot now to kill malware infe... by v_lisivka on Monday May 28, 2018 @06:07AM (#17171604)
If certification authority said that software is secure and then security flaws are found, then who is liable?

IMHO, we should have optimistic check: any public network device must have guarantee from the vendor to fix any remote vulnerability in 30 days after discovery by independent security organization(s), otherwise vendor liable for the damage done by his device.

[ Parent | on HN ]
Re:FBI tells router users to reboot now to kill malware infe... by jsoc815 on Saturday May 26, 2018 @07:01PM (#17164647)
Ask and you shall receive, something...

Past event: https://www.aei.org/events/securing-the-internet-of-things-a...

Partial event video: https://www.youtube.com/watch?v=DrnFcLuqzd4

[ Parent | on HN ]