[Battlemesh] [Office] FCC Firmware lockdown

[Jonathan Morton]

History is also repeating itself with IoT appliances, eg. refrigerators
that can be abused as MITM SSL attackers.

Then there's the high profile Android bugs which are proving hard to deploy
patches for, even though these ARE devices with a built in software update
mechanism.

Vendors simply don't get security right enough for a lockdown to be
effective or even safe.

The other angle I'd pursue is the lack of demonstrated harm to be corrected
by such a rule.  Leaving aside all the hardware that's accidentally
misconfigured for the wrong region (Japanese visitors can just plug in
their home equipment in the US without noticing anything wrong, even the
power socket is the same) but otherwise compliant, just how much
interference is caused by hacked devices - compared to stock devices
operating in an undesired way anyway?

- Jonathan Morton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://ml.ninux.org/pipermail/battlemesh/attachments/20150904/8393fc37/attachment.htm>