Why the FCC as opposed to CISA?
White House unveils Cyber Trust Mark program for consumer devices
161–164 of 164 posts
Re: White House unveils Cyber Trust Mark program for consumer devices
#162Earlier quoted context omitted.
I note that none of these entities are the "customs" that I have heard about.
You just don't know, how work defense of internal market in typical country. 1. Organizations listed in subject (NIST, FCC, deputies from tech companies) constantly create or even invent methods to check products quality and to enforce penalties for offenders, and propose regulations to approve by parliament. 2. Parliament make juridical documents and approve budgets for 1 (and 3,4 when need). 3. Customs limit penetr…
[flagged]
Re: White House unveils Cyber Trust Mark program for consumer devices
#163Earlier quoted context omitted.
>If you manage to get a device in range you can... turn my lights on and off? Is that all it's capable of or all you use it for?
So the highest risk device on my RF network is my thermostat. But not only do I get alerts for out of range conditions, the beauty of the local attacker model is most types of attacks become silly: The thermostat has a predefined range of relatively normal temperatures, so the only way to really cause damage is turning it off. You could bring a custom-programmed RF transceiver and plant it on my property for the job,…
this is a great example of defense in depth. there are several factors limiting how vulnerable the device is and what can actually be done with it once exploited.
Re: White House unveils Cyber Trust Mark program for consumer devices
#164Earlier quoted context omitted.
So the highest risk device on my RF network is my thermostat. But not only do I get alerts for out of range conditions, the beauty of the local attacker model is most types of attacks become silly: The thermostat has a predefined range of relatively normal temperatures, so the only way to really cause damage is turning it off. You could bring a custom-programmed RF transceiver and plant it on my property for the job,…
this is a great example of defense in depth. there are several factors limiting how vulnerable the device is and what can actually be done with it once exploited.
Thanks! This is something every company producing smart-stuff should be thinking about, though unfortunately I think many do not. ;)