71–80 of 325 posts
Why on earth are they using Modbus? Is there already some sort of industry standard (on Modbus) for remotely controlling hotel peripherals?
Earlier quoted context omitted.
Keep in-mind that we're talking about always connected devices. Firmware updates could be done remotely without the end user needed to do anything, except perhaps give his approval.
Which introduces a whole new set of security challenges to prevent attackers from getting write access to the devices.
I feel like I'm missing out on a huge bulk of money simply because when I have ideas of "Internet of Things", I cant get over the security obstacles and cancel the ideas. If only I just didn't care (or didnt know) and just implemented whatever the heck brought in money from oblivious customers.
Now get off my lawn!
This is the unfortunate outcome of a bunch of factors. OEMs moving to XXX over TCP protocols which have zero security by default and documenting this in the datasheets. VAR installers switching to the newer products because CAT5 cable is cheaper and easier to pull than what they used to use. The previous solution was just as insecure but harder to hack because you needed more specialised equipment. I'm not sure how w…
Also, for the particular case of MODBUS over TCP, MODBUS itself doesn't have any security aspect (by design) it is a very simple byte read/write protocol really. http://www.modbus.org/docs/Modbus_Application_Protocol_V1_1b...
Does anyone have a mirror? It looks like it's been taken down for me.
I'm amused by the use of Modbus. I worked on Modbus networking back in the 1980's at Modicon (a company that disappeared long ago that created the "standard"). Using a protocol invented before the internet to control devices on a semi-public network is insane. The original Modbus was designed to communicate with factory devices controlled by logic controllers over serial and eventually over a custom token ring networ…
Perhaps the hotel's HVAC is running Modbus?
I feel like I'm missing out on a huge bulk of money simply because when I have ideas of "Internet of Things", I cant get over the security obstacles and cancel the ideas. If only I just didn't care (or didnt know) and just implemented whatever the heck brought in money from oblivious customers.
Or you could just implement them as-is, earn a shitload of money and then enhance their security in the next version or with a firmware update once you'll have the luxury of investing in R&D. At least it's better if a security-wary entrepreneur implements them instead of someone who simply doesn't give a flying fuck.
I feel like I'm missing out on a huge bulk of money simply because when I have ideas of "Internet of Things", I cant get over the security obstacles and cancel the ideas. If only I just didn't care (or didnt know) and just implemented whatever the heck brought in money from oblivious customers.