Re:Hacked from a lightbulb
by mook on Saturday February 08, 2020 @04:47PM
(#22278632)
The IoT stuff also needs to communicate with other trusted machines (so that they can be controlled, e.g. turning on/off the lights or watching the videos from the cameras); putting them all on a vLAN would prevent that from working, too.
[ Parent
| on HN ]
Just set firewall policy to allow new / existing connections from your trusted machine to your untrusted ones and only existing connections from your untrusted machines to your trusted one.
Granted, an average user will not be able to figure out how to do this and a standard private VLAN guest network is going to prevent this from working.
You setup port forwarding in your router to allow that.
yes, and it's a pain because the protocols and ports required are usually undocumented. so it's a lot of trial and error (like getting an appleTV talking to a tradfri gateway across the vlan boundary).