Re: Spitballing IoT Security

2016-10-28 Thread Jim Hickstein

On 10/27/16 22:59, b...@theworld.com wrote:

What would the manufacturers' response be if this virus had instead
just shut down, possibly in some cases physically damaged the devices
or otherwise caused them to cease functioning ever again (wiped all
their software or broke their bootability), rather than just hijacked
them for a while?


A virus that kills its host (too much of the time) is not successful.


Re: Spitballing IoT Security

2016-10-30 Thread Jim Hickstein

On 10/30/16 06:35, Rich Kulawiec wrote:

On Fri, Oct 28, 2016 at 12:07:17AM -0500, Jim Hickstein wrote:

A virus that kills its host (too much of the time) is not successful.


True.  On the other hand:

"Some men aren't looking for anything logical, like money.
They can't be bought, bullied, reasoned, or negotiated with.
Some men just want to watch the world burn."

I have no doubt whatsoever that some of our adversaries fall squarely
into this category.


i.e. vandalism.

Agreed, and the respondent who brought up rational actors has pointed 
out where the computer "virus" analogy breaks down: biological viruses 
have no rational actor and no premeditated goal.  Their success, as 
usually defined (maximum incidence in a population), emerges from the 
mathematics of their operation.


DDoS attacks are ultimately caused by humans (so far) and while we may 
not know clearly their goals or the values that underlie them, they 
exist.  This would seem to call for a different response.  I wish I knew 
what.