GSD for vendors not making updates available

[Kurt Seifried]

So in the past this wasn't a problem but nowadays...

TLDR: device maker makes devices and firmware. They update firmware, and possibly update the firmware on devices before they ship it. Cool Cool Cool. 

But they won't make the updated firmware available to end-users "because it is proprietary", so you have purchased a device in the past and now you can't get updates for it. Unless you buy a newer device and somehow rip the firmware off of it and somehow then load it onto your older devices, in other words not a real solution.

Real-world example:

https://youtu.be/4RcJU7VB7VI?t=1004

Thoughts/comments? I sure as heck would want to know about this before I bought a device (no security updates, good luck have fun).

Kurt Seifried (He/Him) Chief Blockchain Officer and Director of Special Projects Cloud Security Alliance e: ksei...@cloudsecurityalliance.org