2 ms·
>we may need legal remedies to solve the problem I doubt we can solve this problem legal way because all economic forces are against us. Making a product secu
by ComodoHacker 10y ago
>we may need legal remedies to solve the problem
I doubt we can solve this problem legal way because all economic forces are against us.
Making a product secure costs many times more than making a product itself. "Regular security updates" is a nightmare to vendors. Nobody actually does it, especially on consumer market. Vendors react to massively exploited vulnerabilities at best. Any long-term maintenance, including security, simply don't fit into current business models.
And people want cheap products, they don't want secure products. Government contractors want super cheap products (with support but this doesn't change much). And education/propaganda won't change that until some big disaster happen.
- mgbmtl 10y agoI think there's an analogy to be made with the FCC (and non-US equivalents). IoT consumer devices are not general purpose devices. They are mass-produced and serve a specific purpose. They should be certified and accountable in a way. If not, they should get fined for being irresponsible.
- ubernostrum 10y agoIf we can't force manufacturers and carriers to ship security updates to Android phones, there's zero chance of forcing it for light bulbs.
- bloaf 10y agoGet insurance companies interested. Force IoT vendors to buy insurance against potential damages caused by vulnerabilities in their devices.