DEV Community

Discussion on: An Overview of MicroPython

Collapse
 
georgeoffley profile image
George Offley

Vague question: Do you have insights about building security into your IoT devices through MicroPython? Would it all be handled in the Python code? Is this a consideration given that most people (myself included) reading this would only use it in a hobbyist capacity?

Collapse
 
kenwalger profile image
Ken W Alger

George, that is a great question. I think I would need additional information about what type of security you are thinking about specifically. Network security? Trying to secure the application itself? Data security?

This is a great topic, I'd enjoy continuing the conversation...

Collapse
 
georgeoffley profile image
George Offley

As would I, especially considering the issues surrounding IoT attacks these days. I suppose from a networking standpoint it's about how you setup your network, firewalls and closing ports and what have you. I'm curious if your IoT device that you build using MicroPython would be able to incorporate networking security. If it's all through Python, I suppose you would do it like you normally would. What do you think of some of the hardware security issues surrounding the homebrew IoT devices?

Thread Thread
 
kenwalger profile image
Ken W Alger

Here's a talk by Adam Englander on IoT Lock Down

youtube.com/watch?v=NajRdsNqtMw&in...

It is from the end of 2015 which is a life time ago in the IoT world, but still has some good points. I will do some additional research as well as to where the current state of IoT security sits.

Thread Thread
 
georgeoffley profile image
George Offley

I will as well since I'm pretty curious. Only way IoT has any staying power is if security standards and practices are advanced. At least in my view. I can't see customers wanting something that they're positive can be hijacked and used against them. Unless the government is doing it, then no one cares for some reason.

Thread Thread
 
kenwalger profile image
Ken W Alger

That is certainly a big part of it, yes. I was talking with some folks at a university engineering department and they have the same concerns about standardization in IoT before they start producing courses of any depth on the subject.

Thread Thread
 
georgeoffley profile image
George Offley

At least some people are talking about it. The way these devices are being churned out with little to no security; No wonder we keep seeing stories about IoT botnets, huge hacks and camera wielding sex toys that anyone can get on. The last thing we need is another IoT botnet some vindictive teenager with $50 can buy and cause havoc with.