<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Carlos, All,<div class=""><div><br class=""><blockquote type="cite" class=""><div class="">Hi Wolfgang, All,</div><div class=""><div class=""><br class=""><blockquote type="cite" class="">Interesting read about bad actors of IoT vendors (well, one vendor):<br class=""><a href="https://krebsonsecurity.com/2018/10/naming-shaming-web-polluters-xiongmai/" class="">https://krebsonsecurity.com/2018/10/naming-shaming-web-polluters-xiongmai/</a><br class=""></blockquote><br class="">Naming & Shaming doesn't really work with spammers and the like, but could it really work with IoT vendors…?<br class=""></div></div></blockquote><div>Naming & Shaming can raise awareness but will unlikely help a lot solving the issue in general. I think we have to</div><div>live with the fact that there are many vendors that don’t care about security as long as it does not affect their revenue</div><div>stream.</div><div><br class=""></div><div>In my opinon a solution would be handling the IoT (and other devices) potential security threads at the home gateway</div><div>with a strict, user controlled access policy. That would at least reduce the possible effect. There are the SPIN project </div><div>and other initiatives that try to adress the issue although I haven’t seen something completely convincing, yet ;)</div><div><br class=""></div><div>Best,</div><div>(the other) Peter</div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">Regards,<br class="">Carlos<br class=""><br class=""><br class=""><blockquote type="cite" class=""><br class="">best regards<br class="">Wolfgang<br class="">-- <br class="">Wolfgang Tremmel<br class=""><br class="">Phone +49 69 1730902 26 | Fax +49 69 4056 2716 | Mobile +49 171 8600 816 | <a href="mailto:wolfgang.tremmel@de-cix.net" class="">wolfgang.tremmel@de-cix.net</a><br class="">Geschaeftsfuehrer Harald A. Summa | Registergericht AG Köln HRB 51135<br class="">DE-CIX Management GmbH | Lindleystrasse 12 | 60314 Frankfurt am Main | Germany | <a href="http://www.de-cix.net" class="">www.de-cix.net</a><br class=""><br class=""><br class="">_______________________________________________<br class="">iot-wg mailing list<br class=""><a href="mailto:iot-wg@ripe.net" class="">iot-wg@ripe.net</a><br class="">https://mailman.ripe.net/<br class=""></blockquote>_______________________________________________<br class="">iot-wg mailing list<br class=""><a href="mailto:iot-wg@ripe.net" class="">iot-wg@ripe.net</a><br class="">https://mailman.ripe.net/</div></div></blockquote></div><div class=""><div id="sig" style="border-top: dotted 1px #999999; padding-top: 10px; padding-botton: 10px; margin: 11px 0; font-family: 'Lucida Grande', Verdana, Arial, Sans-Serif; font-size: 11px;" class=""><img src="https://www.dropbox.com/s/tgpbappyzk8y5za/embeDD_mail_sig.png?raw=1" width="180" height="38" align="left" style="margin-right: 20px; padding-top: 2px;" class=""> <div style="color: #999999;" class="">
<strong style="color: #333333;" class="">Peter Steinhäuser, CEO</strong><br class=""> embeDD GmbH · Alter Postplatz 2 · 6370 Stans · Switzerland<br class=""> Phone: +41 (41) 784 95 85 · Fax: +41 (41) 784 95 64 </div> <div style="clear: both;" class=""></div> </div>
</div>
<br class=""></div></body></html>