[192345] in North American Network Operators' Group
Re: Spitballing IoT Security
daemon@ATHENA.MIT.EDU (Mel Beckman)
Wed Oct 26 11:45:18 2016
X-Original-To: nanog@nanog.org
From: Mel Beckman <mel@beckman.org>
To: "esr@thyrsus.com" <esr@thyrsus.com>
Date: Wed, 26 Oct 2016 15:45:11 +0000
In-Reply-To: <20161026123043.GA10916@thyrsus.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>, Rich Kulawiec <rsk@gsp.org>
Errors-To: nanog-bounces@nanog.org
RXJpYywNCg0KSSBhZ3JlZSB0aGF0IHRoZSBob21lIHJvdXRlciBpcyBhIHZpYWJsZSBjaG9rZSBw
b2ludCwgYW5kIGV2ZW4gdGhvdWdoIHdlIGNhbuKAmXQgcXVpY2tseSByb2xsIG91dCBuZXcgZmly
bXdhcmUsIGlmIHdlIGhhZCBzdGFydGVkIHRoaXMgdGVuIHllYXJzIGFnbyB3ZeKAmWQgYmUgZG9u
ZSBieSBub3chIFNvIHRoaXMgaXMgdGhlIHRlbi15ZWFyIHBsYW4sIGJ1dCBzdGlsbCB3b3J0aCBk
b2luZy4NCg0KSSBhbHNvIHJlYWxseSBsaWtlIHRoZSBpZGVhIG9mIG9mZmVyaW5nIG9wZW4gc291
cmNlIG9wdGlvbnMgdG8gdmVuZG9ycywgbWFueSBvZiB3aG9tIHNlZW0gdG8gaWxsZWdhbGx5IHRh
a2UgdGhhdCBwcml2aWxlZ2UgYW55d2F5LiBBIGtleSBmYXN0LXBhdGggY29tcG9uZW50LCB0aG91
Z2gsIGlzIGluIG15IG9waW5pb24gYSBuZXcgUkZDIGZvciBJb1Qgc2VjdXJpdHkgYmVzdCBwcmFj
dGljZXMsIGFuZCBwcm9iYWJseSBzb21lIHJldmlzaW9ucyB0byBVUE5QLiANCg0KVGhlIElvVCBS
RkMgd291bGQgc3BlbGwgb3V0IGJhc2ljIHJ1bGVzIGZvciBzYWZlIGRldmljZXM6IG5vIGJhY2sg
ZG9vcnMsIG5vIGRlZmF1bHQgcGFzc3dvcmRzLCBubyBncmF0dWl0b3VzIGluYm91bmQgY29ubmVj
dGlvbnMsIGV0Yy4gSXQgd291bGQgYWxzbyBtYWtlIGVuY3J5cHRpb24gYSByZXF1aXJlbWVudCwg
YW5kIGxpbWl0IGhvdyBleGlzdGluZyBVUE5QIGlzIGRlcGxveWVkIHRvIHByZXZlbnQgdW5uZWNl
c3NhcmlseSBleHBvc2luZyB2dWxuZXJhYmxlIFRDUC9VRFAgcG9ydHMgdG8gdGhlIHdpbGQuIFdp
dGggdGhpcyBSRkMgaW4gaGFuZCwgYW5kIGFuIGFwcHJvcHJpYXRlIHNwbGFzaHkgaWNvbiBmb3Ig
dmVuZG9yIHBhY2thZ2luZyAo4oCcUkZDIDk5OTkgVGhpbmdTYWZlIeKAnSksIHZlbmRvcnMgd2ls
bCBoYXZlIGEgY29tcGV0aXRpdmUgcmVhc29uIGZvciBjb21wbGlhbmNlIGFzIGEgbWFya2V0IGRp
ZmZlcmVudGlhdG9yLCB3aGV0aGVyIHRoZXkgZGVwbG95IHdpdGggb3Blbi1zb3VyY2Ugb3IgcHJv
cHJpZXRhcnkgY29kZS4gDQoNClRoaXMgbmVlZCBub3QgYWRkIGEgbG90IHRvIFImRCBjb3N0cyBl
aXRoZXIsIGFzIGVudGVycHJpc2luZyBlbWJlZGRlZCBzeXN0ZW0gZGVzaWduZXJzIHdpbGwgbm93
IGJlIG1vdGl2YXRlZCB0byBkZWxpdmVyaW5nIHBhY2thZ2VkIFRoaW5nU2FmZSEgc29sdXRpb25z
LCBzdWNoIGFzIGVtYmVkZGVkIHdpcmVsZXNzIGNvbnRyb2xsZXJzLCBjZWxsdWxhciBtb2RlbXMs
IGV0Yy4gDQoNCllvdXIgb3Blbi1zb3VyY2UgYXBwcm9hY2ggc2VlbXMgdG8gbWUgc29tZXRoaW5n
IHRoYXQgY291bGQgYmUgc3RhcnRlZCB0b2RheSwgYW5kIHRoYXQgaGFzIG5vIGRvd25zaWRlLiBU
aGUgUkZDIGNvdWxkIGdpdmUgaXQgdGhlIGltcHJpbWF0dXIgb2YgYSBzdGFuZGFyZCwgd2hpY2gg
bWFrZXMgdGhlIHBsYW4gZWFzaWVyIGZvciB2ZW5kb3JzIHRvIHNlbGwgdG8gdGhlaXIgdGhyaWZ0
LW1pbmRlZCBtYW5hZ2VtZW50Lg0KIA0KIC1tZWwNCg0KDQo+IE9uIE9jdCAyNiwgMjAxNiwgYXQg
NTozMCBBTSwgRXJpYyBTLiBSYXltb25kIDxlc3JAdGh5cnN1cy5jb20+IHdyb3RlOg0KPiANCj4g
UmljaCBLdWxhd2llYyA8cnNrQGdzcC5vcmc+Og0KPj4gSSB0aGluayBvdXIgd29ya2luZyBhc3N1
bXB0aW9uIHNob3VsZCBiZSB0aGF0IHRoZXJlIHdpbGwgYmUgemVybyBjb29wZXJhdGlvbg0KPj4g
ZnJvbSB0aGUgSW9UIHZlbmRvcnMuICAoWWVhaCwgb25jZSBpbiBhIHdoaWxlIG9uZSBtaWdodCBh
Y3R1YWxseSBzdGVwIHVwLA0KPj4gYnV0IHRoYXQgd2lsbCBtZXJlbHkgYmUgYSBoYXBweSBhbm9t
YWx5LikNCj4gDQo+IEkgYWdyZWUuDQo+IA0KPiBUaGVyZSBpcywgaG93ZXZlciwgYSBjaG9rZXBv
aW50IHdlIGhhdmUgbW9yZSBob3BlIG9mIGdldHRpbmcgZGVjZW50IHNvZnR3YXJlDQo+IGRlcGxv
eWVkIHRvLiAgSSByZWZlciB0byBob21lIGFuZCBzbWFsbC1idXNpbmVzcyByb3V0ZXJzLiAgT3Bl
bldSVCBhbmQga2luDQo+IGFyZSBhbHJlYWR5IG1pbm9yIGJ1dCBzaWduaWZpY2FudCBwbGF5ZXJz
IGhlcmUuIEFuZCB0aGVyZSdzIGFuIE5SRS1taW5pbWl6YXRpb24NCj4gYXJlZ3VtZW50IHdlIGNh
biBtYWtlIGZvciByb3V0ZXIgbWFudWZhY3R1cmVycyB0byB1c2UgcmVicmFuZGVkIHZlcnNpb25z
DQo+IHJhdGhlciB0aGFuIHJvbGxpbmcgdGhlaXIgb3duIGNyYXBweSBmaXJtd2FyZS4NCj4gDQo+
IEkgdGhpbmsgdGhlIGFudGktSW9ULWZsb29kIHN0cmF0ZWd5IHRoYXQgbWFrZXMgdGhlIG1vc3Qg
c2Vuc2UgaXM6DQo+IA0KPiAxLiBQdXNoIG9wZW4tc291cmNlIGZpcm13YXJlIHRoYXQgZG9lc24n
dCBzdWNrIHRvIHRoZSB2ZW5kb3JzIHdpdGggYQ0KPiAgIGNvc3QtIGFuZCByaXNrLW1pbmltaXph
dGlvbiBwaXRjaC4NCj4gDQo+IDIuIFNoaXAgaXQgd2l0aCBlZ3Jlc3MgZmlsdGVycy4gIChBbmQg
dGVsbmV0IGJsb2NrZWQuKQ0KPiANCj4gSXQgd291bGRuJ3QgYmUgdGVjaG5pY2FsbHkgdmVyeSBk
aWZmaWN1bHQgdG8gbWFrZSB0aGUgZmlybXdhcmUNCj4gcmF0ZS1saW1pdCBvdXRib3VuZCBjb25u
ZWN0aW9ucy4gIEN1dGUgdHJpY2s6IGlmIHdlIHVubGltaXQgYW55IA0KPiBsb2NhbCBJUCBhZGRy
ZXNzIHRoYXQgaXMgYSBwb3J0LWZvcndhcmRpbmcgdGFyZ2V0LCBtb3N0IHVzZXJzDQo+IHdpbGwg
bmV2ZXIgbm90aWNlIGJlY2F1c2UgdGhlaXIgYnJvd3NlciBzZXNzaW9ucyB3b24ndCBiZSBlZmZl
Y3RlZC4NCj4gLS0gDQo+IAkJPGEgaHJlZj0iaHR0cDovL3d3dy5jYXRiLm9yZy9+ZXNyLyI+RXJp
YyBTLiBSYXltb25kPC9hPg0KDQo=