Path: ...!3.eu.feeder.erje.net!feeder.erje.net!news.szaf.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "Carlos E.R." <robin_listas@es.invalid>
Newsgroups: sci.electronics.design
Subject: Re: Win11 explorer bug?
Date: Thu, 12 Dec 2024 23:15:00 +0100
Lines: 60
Message-ID: <4s3s2lx5mk.ln2@Telcontar.valinor>
References: <13vgljdqp79a2onuijph2om08fk99u2fdm@4ax.com>
 <vjablv$14se5$1@dont-email.me> <addhljp8i0d5t42lavnd37a8e883ijhsqt@4ax.com>
 <vjaeii$14se5$2@dont-email.me> <gquhljd83745shtckfjgtd5u6iphkprprc@4ax.com>
 <vjblle$1fd6a$1@dont-email.me> <gsnjljdvnhu7m25ops26ek9lvca5eqvk2n@4ax.com>
 <vjec62$22pn8$1@dont-email.me> <vjefoe$23fh4$1@dont-email.me>
 <uj2r2lxum3.ln2@Telcontar.valinor> <vjennd$24vi6$1@dont-email.me>
 <vjf008$2flf4$1@dont-email.me> <sbor2lxim3.ln2@Telcontar.valinor>
 <t2lmljp0l4krqj1gibee87jme141m0efmp@4ax.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net BkSRRvQD4GOhcCRXvXPjPQp5suj+gkVJZr8KPUzCjmxLjYba+P
X-Orig-Path: Telcontar.valinor!not-for-mail
Cancel-Lock: sha1:00XECeqrx2zBpXFVYPRy7OSMFKM= sha256:Y1z8bO/KkqyB3jg7bm4PEskdZLCexv79JNN/EEb7jX8=
User-Agent: Mozilla Thunderbird
Content-Language: es-ES, en-CA
In-Reply-To: <t2lmljp0l4krqj1gibee87jme141m0efmp@4ax.com>
Bytes: 3748

On 2024-12-12 22:31, Joe Gwinn wrote:
> On Thu, 12 Dec 2024 19:58:36 +0100, "Carlos E.R."
> <robin_listas@es.invalid> wrote:
> 
>> On 2024-12-12 16:41, Jeroen Belleman wrote:
>>> On 12/12/24 14:16, Don Y wrote:
>>>> On 12/12/2024 5:47 AM, Carlos E.R. wrote:
>>>>> On 2024-12-12 12:00, Don Y wrote:
>>>>>> Yeah, I'm REALLY eager to turn on the factory's WiFi interface
>>>>>> for the stove/oven... NOT!
>>>>>
>>>>> There are devices that put the actual interface on the phone,
>>>>> via WiFi. The physical interface has a reduced set of features.
>>>>
>>>> Yes.  Via a server located at the manufacturer's facility!
>>>>
>>>> So, you have the application layer in the appliance, the network
>>>> stack in the appliance, all of the network infrastructure from
>>>> your AP to the manufacturer's server, then, back through the phone
>>>> network, up through the stack in your phone and, finally, through
>>>> the app to the display.
>>>>
>>>> Nothing can go wrong, there, right?  <rolls eyes>
>>>
>>> Apart from the obvious security and reliability worries, there is
>>> the issue that the *manufacturer* gets to decide when *your* device
>>> is obsolete.
>>
>> The device has a limited life expectancy, anyway. About 10 years. The
>> boiler needs replacement of rubber gasket every year or two. There is a
>> mandatory yearly maintenance visit. With the remote controller,
>> maintenance visits are every two years, because the remote server
>> monitors the parameters and decides when a visit is needed.
>>
>> So, that convenience is decisive for me. Win win.
> 
> A dodge occurs to me:  Install a simple firewall between external
> Internet and internal network that hosts such things as cameras and
> furnaces.  Set the firewall to accept only one of a small set of white
> listed sources, and otherwise not to reply.

AFAIK, I have the ISP installed router that has a firewall, and 
everything incoming is closed.

And this thing is installed on the guest LAN.

> 
> White lists have the advantage of immunity to attempts from random
> places.  The lack of response if not white listed will defeat most
> port IP address and scanners, even though the firewall most likely can
> be hacked if known.
> 
> Upgrade the firewall from time to time, to sorta keep up with the
> threats.
> 
> Joe Gwinn


-- 
Cheers, Carlos.