Re: One lesson to be learnt frin this (was Wormable holes)
"We considered that putting a hardware firewall between it and the rest of the network with access to that sole port provided adequate security for the devices remaining lifetime."
What's a "hardware firewall"?
Presumably they are all full of firmware that could be buggy?
Perhaps there are some very simple, and therefore verifiable, hardware firewalls? I hope such things exists!