Comment by __MatrixMan__
11 hours ago
Devices that are smart enough to talk to the internet but not smart enough to let the user install their own certs should not exist.
11 hours ago
Devices that are smart enough to talk to the internet but not smart enough to let the user install their own certs should not exist.
"let the user install their own certs should not exist"
are you sure that this is not opening to more attack vector ?????
Yes. We're giving the user the ability to protect themselves from the vendor.
Your logic only makes sense if the user is your enemy.
I am the vendor and the user is my enemy. Fortunately I get to decide his capabilities and not the other way around, so I win.
2 replies →
You can even install your own certs into the golden cage (also known as iPhones).
Users aren't supposed to be considered an attack vector. I don't care what the advertisers think.
The infected devices on the LAN are an attack vector, though.
3 replies →
Users are attack vectors in one of the more commonly successful attacks: social engineering.
7 replies →
Which is better - two attack vectors that can be mitigated by an expert, or one attack vector that can't be mitigated by anyone?