[kbumsik]

I'm wondering, how many companies that use ESP32 actually use the firmware security feature?

[viraptor]

Almost everyone who's selling a real device, in my experience. It's pretty standard to disable firmware reads in embedded cpu products.

[baybal2]

And from my experience, it's virtually none.

Since I first started work in OEM electronics in 2007, I only saw that being requested 3 times.

[jdnenej]

It's used on most consumer devices simply to slow down clone devices being created.

[slumos]

Here's one that definitely did not:

> Vulnerability n*2: No security settings (at all)

https://limitedresults.com/2019/01/pwn-the-lifx-mini-white/

[kbumsik]

Yeah that's what I thought, like many of them don't really care about it...