Jim Lawrence
accessd at shaw.ca
Fri Nov 29 15:57:46 CST 2013
Hi Shamil: The threat is probably as dangerous as access to the equipment, the capabilities of the router/switch/firewall, the software/hardware age and of course the capability of the embedded software to detect violations. Off the top, I would think this threat would be more of a threat to proprietary or older ROM devices. <quote> Out of date While not posing much of a real-world threat now, Darlloz demonstrates a major shortcoming with most Internet-of-things devices available today—they typically run Linux or other types of open source code that are woefully out of date. Making matters worse, many Internet-connected consumer devices can't be updated because their lightweight hardware can't handle the requirements of newer code versions. Hijacking one of these devices thus becomes much easier than exploiting, say, an up-to-date version of Windows, OS X, or Linux. </quote> Maybe it might be time to investigate some of the more advanced OS device software packages available or simply update all hardware's ROMs. Here is a one list, hardly definitive, to a number of the current(?) OS builds: http://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions. Of course this all means newer hardware and better software. Jim ----- Original Message ----- From: "Salakhetdinov Shamil" <mcp2004 at mail.ru> To: "Discussion of Hardware and Software issues" <dba-tech at databaseadvisors.com> Sent: Friday, November 29, 2013 2:21:58 AM Subject: [dba-Tech] New Linux worm targets routers, cameras, “Internet of things” devices Hi Linux Experts -- How *threatful* is the following issue for the mere mortals everyday users of the modern "Internet of things" devices? " New Linux worm targets routers, cameras, “Internet of things” devices" http://arstechnica.com/security/2013/11/new-linux-worm-targets-routers-cameras-internet-of-things-devices/ I'm planning to setup a mobile-accessible relatively low-end consumer security/"home automation" system for a village house - how can I check if it's vulnerable for the above worm? No "paranoia" here - just wondering... -- Салахетдинов Шамиль _______________________________________________ dba-Tech mailing list dba-Tech at databaseadvisors.com http://databaseadvisors.com/mailman/listinfo/dba-tech Website: http://www.databaseadvisors.com