Right, thanks. But this can be easily resolved by:
Removing devices’ access to WAN, which also vastly reduces the external actor’s ability to compromise them in the first place.
Isolating devices from each other with internal firewall rules, allowing them to only interact with the hub host.
Is this correct, or am I missing something?
Good luck explaining how to do any of this to my parents, for example. For someone with a technical background that’s feasible, for someone with an it background it’s even easy. For the other 90 or 95% of people who are actually supposed to buy and use these things, it isn’t. They don’t even know something like this can be done, let alone that it should be done.
Let’s say your lightbulb(s) become comprised. A bad actor now has a toehold into your network.
Maybe they run a spam relay through the bulb. Maybe they attack your network by attacking the printer that hasn’t had a firmware update in years.
Point is, there’s someone with access to your network that isn’t you.
https://old.reddit.com/r/Ubiquiti/comments/1fjspoc/what_is_the_point_of_having_a_separate_devices/
Right, thanks. But this can be easily resolved by:
Good luck explaining how to do any of this to my parents, for example. For someone with a technical background that’s feasible, for someone with an it background it’s even easy. For the other 90 or 95% of people who are actually supposed to buy and use these things, it isn’t. They don’t even know something like this can be done, let alone that it should be done.