Re: [homenet] write up of time without clocks

2016-11-03 Thread Paul Duffy
On 11/3/2016 3:26 PM, Brian E Carpenter wrote: Yes, I agree it's possible to do better, but what's the incentive for a bottom-feeding vendor of cheap devices to bother? Lawsuits, regulation, well respected security branding (awarded after certification testing). Any or all of the above. It

Re: [homenet] write up of time without clocks

2016-11-03 Thread STARK, BARBARA H
> > Yes, I agree it's possible to do better, but what's the incentive for > > a bottom-feeding vendor of cheap devices to bother? > > I hate to say this, but how about legal solutions? My reading of the tea leaves: either the industry creates its own certification plan, or the regulators will d

Re: [homenet] write up of time without clocks

2016-11-03 Thread Markus Stenberg
On 3 Nov 2016, at 21.26, Brian E Carpenter wrote: > Yes, I agree it's possible to do better, but what's the incentive for a > bottom-feeding vendor > of cheap devices to bother? I hate to say this, but how about legal solutions? If you sell e.g. guns that explode if you use them, you are going

Re: [homenet] write up of time without clocks

2016-11-03 Thread Brian E Carpenter
Barbara, On 04/11/2016 04:00, STARK, BARBARA H wrote: >>> I could be wrong, but I believe that Dyn was DDoSed by the Mirai >>> botnet, which propagates by exploiting devices configured with default >> credentials. >>> This has nothing to do with outdated firmwares. >> >> The problem is that you ca

Re: [homenet] write up of time without clocks

2016-11-03 Thread Juliusz Chroboczek
ddos attack like against Dyn >> I could be wrong, but I believe that Dyn was DDoSed by the Mirai botnet, >> which propagates by exploiting devices configured with default credentials. >> This has nothing to do with outdated firmwares. > The problem is that you cannot realistically update tho

Re: [homenet] write up of time without clocks

2016-11-03 Thread STARK, BARBARA H
> >I could be wrong, but I believe that Dyn was DDoSed by the Mirai > >botnet, which propagates by exploiting devices configured with default > credentials. > >This has nothing to do with outdated firmwares. > > The problem is that you cannot realistically update those firmwares. Many companies p

Re: [homenet] write up of time without clocks

2016-11-03 Thread Philip Homburg
>>> ddos attack like against Dyn > >I could be wrong, but I believe that Dyn was DDoSed by the Mirai botnet, >which propagates by exploiting devices configured with default credentials. >This has nothing to do with outdated firmwares. The problem is that you cannot realistically update those firmw

Re: [homenet] write up of time without clocks

2016-11-03 Thread Philip Homburg
> This started with a need for somewhat accurate system time for > certificate validation, right? I have to deal with stuff lacking > a RTC battery. I save system time every now and then in flash. > During startup, clock jumps forward to RTC when warm start occurs > (main power was not interrupted)