News for hackers. Stuff that matters.

A comment on Zero-days in Cisco Discovery Protocol. Parent comment

Re:Zero-days in Cisco Discovery Protocol by aidenn0 on Thursday February 06, 2020 @03:55PM (#22260180)
From my point of view, the proliferation of so many new classes of network connected devices has offset much of the gains in better practices. With enough systems being designed, the odds of a single system being both incompetently designed and widely deployed approaches unity.

I think I'll call this the "lightbulb effect" since in 1995 the lightbulbs in everyone's home were secure against all RCE vulnerabilities, while in 2020, this is no longer true.

[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by pixelpoet on Thursday February 06, 2020 @04:06PM (#22260300)
There was a related blog post from 2016 about a guy who managed to hack his hotel's "smart" lights/curtains/etc system. Unfortunately the images no longer work, but they're not essential anyway: https://mjg59.dreamwidth.org/40505.html
[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by tptacek on Thursday February 06, 2020 @04:11PM (#22260352)
This is a reason not to buy lightbulbs with Internet connections, but not a good reason to despair about the state of overall software and hardware security.
[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by pixelpoet on Thursday February 06, 2020 @04:18PM (#22260433)
How many people (even very computer savvy) expected their somewhat standard keyboard to contain firmware that can support keylogging? https://www.blackhat.com/presentations/bh-usa-09/CHEN/BHUSA0...

Do you know for sure your mouse is safe from this kind of thing? What about your monitor? Even things like sticks of memory and case fans have little controllers now to do some kind of programmable RGB lighting; everything is getting filled with relatively small amounts of computing power for no good reason, and it seems to be an accelerating trend.

[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by tedunangst on Thursday February 06, 2020 @06:42PM (#22261672)
This seems to be another example of something theoretically possible that an actuary would tell you to ignore.
[ Parent | on HN ]
Re:Zero-days in Cisco Discovery Protocol by nitrogen on Thursday February 06, 2020 @10:06PM (#22262885)
Maybe, but there are online storea full of the stuff.
[ Parent | on HN ]