logoalt Hacker News

carefree-bobyesterday at 10:38 PM1 replyview on HN

This is SOP for IOT devices. I am beginning to think we need to regulate this stuff, because it is ubiquitous. The device manufacturers do not have a culture of security.


Replies

coldbrewedyesterday at 10:41 PM

There are much better ways of device enrollment; at a minimum they could require device activation that doesn't blindly use a token with no further checks.

show 1 reply