Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 87

For questions relating to the security of IoT devices (especially those connected directly to the internet) and how to mitigate these issues or avoid them altogether. Do not confuse this with device safety (If it gets hacked it's a security question, if it explodes it's a safety question).

10 votes

Best practices for secure Over The Air updates

This is a false belief that people who don't really understand security sometimes have, but it's just not true. For some devices, it's fine to run any firmware if the owner so chooses. …
Gilles 'SO- stop being evil''s user avatar
6 votes
Accepted

Can I implement a (weak) entropy source in FPGA?

Do you need to? You can implement a cryptographically secure random generator if you have two things: some rewritable secure storage, and an initial seed. That is, it's enough to seed the RNG once, an …
Gilles 'SO- stop being evil''s user avatar
8 votes
Accepted

Is it a bad practice to keep certificates on external memory?

You do not need to sacrifice any security! …
Gilles 'SO- stop being evil''s user avatar
11 votes

Would using a Tor wifi router make IoT more secure?

No, not at all. Using Tor does not make your computer system more secure from attacks. What it does is to make your computer system more anonymous: it makes it hard for a remote computer that you comm …
Gilles 'SO- stop being evil''s user avatar
13 votes

How do I secure communication between app and IoT device?

That's a tricky one: on the one hand, there's no such thing as absolute security, so you will have security patches to apply now and then. … Relying purely on the security of the communication channel for upgrades is dodgy, because the trusted based for a secure channel is larger than for a static security verification, and sometimes you might …
Gilles 'SO- stop being evil''s user avatar
24 votes

Securing small home automation setup

The second generic security measure is to ensure that all your devices are behind a firewall or at least a NAT device. … You should also apply security updates on all the devices… if they exist at all, which can be a problem. …
Gilles 'SO- stop being evil''s user avatar