Highway to hack: why we're just at the beginning of the auto-hacking era This month at three separate security conferences, five sets of researchers presented proof-of-concept attacks on vehicles from multiple manufacturers plus an add-on device that spies on drivers for insurance companies, taking advantage of always-on cellular connectivity and other wireless vehicle communications to defeat security measures, gain access to vehicles, and—in three cases—gain access to the car's internal network in a way that could take remote control of the vehicle in frightening ways. … And all this has played out as the auto industry as a whole struggles to understand security researchers and their approach to disclosure—some automakers feel like they're the victim of a hit-and-run. The industry’s insular culture and traditional approach to safety have kept most from collaborating with outside researchers, and their default response to disclosures of security threats has been to make it harder for researchers to work with them. In some cases, car companies have even sued researchers to shut them up. This is just the beginning, over the next few years as cars increasingly add internet-connected features, there will be more security problems. Don’t trust a car company with computer security. We are going to see the same problems with the smart home. Connecting every device in your house to the network is going to result in wide-scale malware and hacking problems, especially with the cheap products on the market from small companies that don’t have the budget to make sure their products are secure. This is one of the reasons that the big guys like Google and Apple (and a few others) will probably dominate the future home. IE 6, Adobe Flash, and Java might still be a security punchlines, but they were originally developed by world class programmers at software companies. Who is working on the smart toaster and how do we trust them? Don’t trust a door lock company with computer security. Chrome is finally getting faster on Mac I didn't believe it would be possible at first, but after spending the better part of a week on Chrome 46 I'm blown away. Memory consumption seems to have halved, groggy slow tabs are snappier than ever and my battery life isn't shamefully bad anymore — also, my laptop's fans aren't constantly blowing. It’s about time that they worked on this. My MacBook Pro gets twice the battery life when I’m using Safari as when I’m using Chrome. And it’s not because of plugins because I have them all disabled in both browsers. And the only extension I use is 1Password in both browsers. It will be a while before these fixes make their way to the stable channel on OS X. It’s likely that some of the core performance enhancements will also make it over to the Windows version as well. Whatever happened to Microsoft’s Windows Update for Business? I’ve had more than a few IT pros ask me since July 29 how they could get Windows Update for Business. Was it a program for which they needed to apply? Or was it just an umbrella name for the Current Branch for Business and Long Term Servicing Branch servicing paths? The answer, like so many things pertaining to Microsoft’s Windows-as-a-Service strategy, is complicated. So not only is Microsoft refusing to provide detailed information about what new updates contain, they have also delayed the business features for dealing with updates properly in an enterprise environment. This seems like the wrong strategy to me, they should have kept their business customers happy first, like they always have in the past. That’s where all their money comes from. |
Tidak ada komentar:
Posting Komentar