News for hackers. Stuff that matters.

A comment on Ask HN: I’m an FCC Commissioner proposing regulation of IoT security updates. Parent comment

Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by arp242 on Tuesday September 05, 2023 @04:01PM (#37396988)
> It's just a matter of implementing a signature verification of the firmware updates that are installed on the device.

In principle: yes. In practice: signing keys seem to get leaked all the time.

It's not a mechanism I would blindly trust in security sensitive domains.

[ Parent | on HN ]
Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by lnxg33k1 on Tuesday September 05, 2023 @04:16PM (#37397136)
We could start by asking iot companies to be ISO 27002, stop saving passwords in excel files or in s3 bucket publicly accessible could help

Security is not an update, security is a cultural trait of an entity or an individual

[ Parent | on HN ]