[iot-wg] Bad actors

Hi Carlos, All,

> Hi Wolfgang, All,
> 
>> Interesting read about bad actors of IoT vendors (well, one vendor):
>> https://krebsonsecurity.com/2018/10/naming-shaming-web-polluters-xiongmai/
> 
> Naming & Shaming doesn't really work with spammers and the like, but could it really work with IoT vendors…?
Naming & Shaming can raise awareness but will unlikely help a lot solving the issue in general. I think we have to
live with the fact that there are many vendors that don’t care about security as long as it does not affect their revenue
stream.

In my opinon a solution would be handling the IoT (and other devices) potential security threads at the home gateway
with a strict, user controlled access policy. That would at least reduce the possible effect. There are the SPIN project 
and other initiatives that try to adress the issue although I haven’t seen something completely convincing, yet ;)

Best,
(the other) Peter

> 
> Regards,
> Carlos
> 
> 
>> 
>> best regards
>> Wolfgang
>> -- 
>> Wolfgang Tremmel
>> 
>> Phone +49 69 1730902 26 | Fax +49 69 4056 2716 | Mobile +49 171 8600 816 | wolfgang.tremmel at de-cix.net
>> Geschaeftsfuehrer Harald A. Summa | Registergericht AG Köln HRB 51135
>> DE-CIX Management GmbH | Lindleystrasse 12 | 60314 Frankfurt am Main | Germany | www.de-cix.net
>> 
>> 
>> _______________________________________________
>> iot-wg mailing list
>> iot-wg at ripe.net
>> https://mailman.ripe.net/
> _______________________________________________
> iot-wg mailing list
> iot-wg at ripe.net
> https://mailman.ripe.net/


Peter Steinhäuser, CEO
embeDD GmbH · Alter Postplatz 2 · 6370 Stans · Switzerland
Phone: +41 (41) 784 95 85 · Fax: +41 (41) 784 95 64
 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/iot-wg/attachments/20181010/714fed5f/attachment.html>