The IoT Security Trainwreck

[Jarrett]

@Shane

If I was doing it, I’d provide a mechanism for users to upload new firmware via my website, to their device alone. Every device would have a serial number that “proves” you have physical access to the device.

Sounds like a great vector for the NSA to have access to OTA updates