---
id: 4256
title: "How to Engineer Secure Things: Past Mistakes and Future Advice"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/engineer-secure-connected-things"
published_at: "2016-06-15T00:00:00Z"
tags: ["firmware", "iot", "embedded-security", "code-signing", "secure-design"]
phying_url: "https://phying.com/item/4256"
lang: en
---

# How to Engineer Secure Things: Past Mistakes and Future Advice

## Summary

The recurring engineering mistakes behind insecure IoT products, starting with unvalidated firmware updates (see the TrackingPoint rifle), plus advice like root of trust and code signing.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2016-06-15T00:00:00Z
- **Original:** https://bishopfox.com/blog/engineer-secure-connected-things
- **Phying News:** https://phying.com/item/4256