News for hackers. Stuff that matters.

A comment on Massachusetts Steamship Authority hit by ransomware attack; ferries delayed. Parent comment

Re:Massachusetts Steamship Authority hit by ransomware attac... by Grimm1 on Wednesday June 02, 2021 @06:15PM (#27374713)
IOT isn't datacenter server technology. IOT is basically in the state of software security from 20 years ago. Often running crappy proprietary stuff. Your average server running a recent Linux kernel is Fort Knox comparatively. There have been massive strides in many places in software security but IOT and embedded security in general is very lacking unless your talking things going into space or military.
[ Parent | on HN ]
Re:Massachusetts Steamship Authority hit by ransomware attac... by dopidopHN on Wednesday June 02, 2021 @11:17PM (#27376872)
The S in IOT stands for security, after all.
[ Parent | on HN ]
Re:Massachusetts Steamship Authority hit by ransomware attac... by rurban on Thursday June 03, 2021 @04:19PM (#27386759)
The S in Linux ditto.

Linux has a far wider attack surface than my baremetal embedded firmware. Like 10^6 wider. There's a single mqtts service mostly, or just passive senders (sensors, controllers). Zero attack surface.

Linux is way too big, with thousands of drivers, services and patches.

[ Parent | on HN ]