Security Overview about helium-guides HOT 8 CLOSED

Good first issue for @salmanfarisvp?

from helium-guides.

@ryanteck Do you have any bullet points of content you think we should cover here?

from helium-guides.

@ryanteck Do you have any bullet points of content you think we should cover here?

Yeah, that will be very useful.

from helium-guides.

I'm thinking maybe just a generic overview of what steps have been taken.

Maybe something like

• Uses a lightweight version of linux
• Frequent OTA updates to ensure software is up to date
• Code is split into parts to help keep the unit secure
• Only ports required are open on the unit
• No SSH

That type of thing, plus maybe a blurb of how it's relatively low risk having a Lora Gateway due to the nature of it?

from helium-guides.

I found this Helium Security docs, do we need to make a generic one like this or need to be specific for the nebra miner?

from helium-guides.

I think slightly more specific to ours @salmanfarisvp but some good points there which would be worth using as well.

Possibly also adding in content from https://www.balena.io/docs/learn/welcome/security/

We could have a port list a bit like the table at https://www.balena.io/docs/learn/welcome/security/#ports-used

Which would be the 3 ports used by balena, plus then add in the helium miner port.

from helium-guides.

Thanks for sharing the balena docs, it's looks good. for creating the device-specific thing, I think I should wait for the device to arrive. what do you think?

from helium-guides.

Hmm I'm not aware of anything in this document that requires an actual device to write it?

from helium-guides.