Re:Pwn the LIFX Mini white
by stefan_ on Wednesday January 30, 2019 @09:47AM
(#19035385)
Provisioning each device with a unique certificate signed by a vendor CA is what I would call absolute best practice.
It's possible this certificate isn't that and is instead reused across all bulbs. We don't know that. And even if that is the case, there are no details on what this certificate is even used for that would allow us to determine if this is any sort of security problem.
It's possible this certificate isn't that and is instead reused across all bulbs. We don't know that. And even if that is the case, there are no details on what this certificate is even used for that would allow us to determine if this is any sort of security problem.