On: Say Cheese: a snapshot of the massive DDoS attacks...

[ceejayoz]

So allow the device vendor a way to push a configuration change?

[jrockway → ceejayoz]

Then the attacker would push that configuration change before DDoSing someone.

[hathawsh → jrockway]

Well, I would hope that any IoT device that accepts remote configuration or software updates also checks digital signatures before applying changes. If it doesn't, then I would want the automatic firewall on the router to block all updates.

[striking → jrockway]

Your router would notify you of the change and ask if it was intended before applying it, maybe?

I realize how close to Vista's UAC this is getting.

[ceejayoz → jrockway]

Make the configuration change come from the approved endpoints.