Hacker News Reader

Comment by rbanffy | Hacker News Reader

It's a bit shocking that the people who develop the firmware for these embedded computers is not more concerned with their security. I understand you are not supposed to attach them to untrusted networks, but can we really call any network trusted these days?

Do people still teach about the Maginot Line in schools?

View on HN

>Do people still teach about the Maginot Line in schools?

No.

There are plenty of other opportunities to teach the value of making your adversary (be that adversary man made or natural) work every step of the way and they are missed too. Nobody (for large values of "nobody") gets taught about the value of layered or redundant systems until college and those that do get taught it in college usually only touch on it in their mandatory ethics elective.

FWIW I named the last firewall I configured "Little Maginot".

Another (perhaps more) common use of the term Maginot Line is as a metaphor for expensive efforts that offer a false sense of security.

It is even more shocking considering the fact that exposing the BMC directly to the internet is not only often recommended by vendor but in many cases (eg. collocation) actually only way to use it.

Jumpboxes? You need at least two for it to work though. Update A from B and then update B from A.

Do we know a one company that gone out of business due the security related problems with their products?

Cheap Chinese labor. Security costs time and time is money. So why bother if it isn't giving direct profits? Customers still buy them servers so, no problem in the revenue stream (yet)

Reply on news.ycombinator.com