Which is the proper way to prevent users to read sensible information stored inside an IoT device (e.g. source code / private keys...)?

Fully disk encryption is of course an option, but is it possible to boot the device without asking the user for a password?

How do operating systems like Ubuntu Core handle these security aspects?

  • most iot devs don't have disks. they also don't have source code. – dandavis Apr 20 at 17:51
  • @dandavis I was probably not clear enough. I'm referring to a device with an operating system (e.g. a raspberry Pi with a sd card) and a source code that does something (e.g. turn on/off some lights in the house when some conditions are met) – Luca Apr 21 at 15:23
  • 1
    That's a very liberal use of the term "IoT". You're just talking about a headless, unattended computer ... – schroeder Apr 21 at 23:54

Take raspberry pi as an example. They are essentially small computers. And like computers they will have access to the O.S's security feature. For example, they will have access to Linux's security feature, like LSM, if you install Linux on them. IoT devices are not less secure if you take care of them. They don't require some sort of very special or advanced measure to secure them.

| improve this answer | |
  • I can add more information if required. Please give me a reason for downvoting me so I can improve. Thanks. – Aviv Lo Apr 25 at 18:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.