Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Signed URLs on ESP32 (golioth.io)
2 points by hasheddan 3 months ago | hide | past | favorite | 1 comment


Their example is using signed URLs for OTA firmware updates - that is, ensuring only the authentic devices can download firmware files, and not security researchers or device owners.

I see no good use for that feature. I should be able to at least know what every device I own runs, and ideally be able to upload arbitrary firmware too (with the understanding that this can brick the device if done wrong)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: