On: FBI tells router users to reboot now to kill malwa...

[WalterBright]

It's really too bad that nobody makes hardware with the obvious solution - put the firmware in ROM. Then it cannot be altered by malware.

If the vendor really, really wants to update the firmware, have the write-enable switch be a physical one, not a software switch.

[8bitsrule → WalterBright]

Heh. I'm so old, I can remember that only time, ever, that a vendor sent me an upgrade hardware and a box to return the old one in. (Don't remember which vendor, only that it wasn't a rich one.)

[ryanmarsh → WalterBright]

Mind boggling this isn’t the default.

[ComodoHacker → WalterBright]

You really want vendor to patch vulnerabilities in firmware without pushing any buttons.

[jake_the_third → ComodoHacker]

And you really don't want malicious actors to push malware to vulnerable firmware without pushing any buttons.

When firmware can't fully trust itself (and it cant), the correct option is to deffer ultimate judgement and control to the physical owner.

[ComodoHacker → jake_the_third]

This wouldn't work with consumer hardware.

[jake_the_third → ComodoHacker]

Why?

[WalterBright → ComodoHacker]

So you want the ability to remotely update to protect against the malware being installed via remote update?