Comment Re:Typical Stupidity (Score 3, Informative) 40
Using IOT devices with kernel 2.6 in these days is just asking to be hacked.
Not really...
Almost all IoT devices work by phoning home. They call some remote server, and do some API stuff, send some message poll for new messages / instructions. They tend to have very little if anything listening.
If they do get onwd its because the infrastructure that supports them gets compromised, at which point its really the infrastructure that was hacked and not the device. The other thing that happens - all the gosh darn time - is what ever little web based interface they have for setting up wifi/IP settings/etc is some terrible CGI thing with some form of injection vulnerability. Again though if that gets pwnt, it is only after some ofther failure of your internal network security. That is a concern, I understand defense in depth, I get foothold and dwell time issues, However a newer kernel won't prevent that kind of compromise. Lack of shell escaping on calls to system() or bad choices around using eval() will get you popped on Linux 7.0 as easily as 2.0.