wrote:= >> On Mon, Aug 19, 2019, at 12:53 PM, Cyber Fonic wrote: >> >=20 >> > It has been said : "The 'S' in IoT stands for security". If Plan9 can a= ddress that deficiency of the current state of the art for IoT devices, then= it would be a worthwhile exercise. >>=20 >> Plan 9 may have a decent security model, but it's never been audited. Au= diting a codebase, even one as small as Plan 9's, is a lot of work. Are you= willing to make a start on it? >>=20 >> If you want something free and already audited, with more security featur= es, (but perhaps not quite the same convenience,) look into OpenBSD. >>=20 >> --=20 >> I love that *Open*BSD is so *security*-focused! >>=20 --Apple-Mail-A0D0F983-318F-449C-BC7B-889673196E1E Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Fwi= w Plan 9=E2=80=99s code vase has indeed been audited. By me. Several exploit= able bugs were found including a kernel exploit due to the env driver. I wro= te a working PoC for it which is somewhere on the internet, but it=E2=80=99s= quite old.

Much of the cod= e hasn=E2=80=99t changed, and, I would suspect, is largely secure.

But you=E2=80=99re talking implement= ation security versus architectural security. In the case of IoT, Plan 9 doe= s exceptional things to close the gaps that embedded systems supply its user= s, but it is nowhere near complete.

Notably, a trusted root environment needs to be added - which Plan 9= only slightly addresses.

Best,

On Aug 20, 2019= , at 9:13 AM, Cyber Fonic <cyberf= onic@gmail.com> wrote:

I don't think OpenBSD will run on an ESP-32. = ; That is part of the problem with IoT, the nodes are made on the cheap and t= hus use the cheapest viable network capable device.

On Tue, 20 Aug 2019 at 00:= 54, Ethan Gardener <eekee57@fastma= il.fm> wrote:
On Mon, Aug 19, 2019, at 12:53 PM, Cyber Fonic wrote:
>
> It has been said : "The 'S' in IoT stands for security". If Plan9 can a= ddress that deficiency of the current state of the art for IoT devices, then= it would be a worthwhile exercise.

Plan 9 may have a decent security model, but it's never been audited. A= uditing a codebase, even one as small as Plan 9's, is a lot of work. A= re you willing to make a start on it?

If you want something free and already audited, with more security features,= (but perhaps not quite the same convenience,) look into OpenBSD.

--
I love that *Open*BSD is so *security*-focused!

= --Apple-Mail-A0D0F983-318F-449C-BC7B-889673196E1E--