Last Friday, October 21st, the company DYN was the recipient of a rather massive DDOS (Distributed Denial of Service) attack. Companies and tinkerers won't like this simple solution because it causes them to do a little extra work. If this potential solution doesn't solve the problem, it would certainly mitigate it.
It's simple. For those old enough to recall free AOL disks, remember how many included an account password printed on the CD/disk case? Well, the same thing could be done for IoT devices. Manufacturers of these things could simply print two random English words on a label and stick it on the IoT Device. This password is burnt into the device as its factory default. There is no standard factory default. Let's face it... The bulk of people using and installing IoT devices either don't know there is a password on their new-fangled refrigerator, or they just don't care to change it.
Seriously
water-wood
january-carolina
protien-curious
wrecked-quipped
These passwords would be so much better than admin or system or the ever-popular password.
No comments:
Post a Comment