Gun users and car users are already liable in these cases. In the case of IoT security, it's probably more realistic that we see manufacturers held liable. Bu

Gun users and car users are already liable in these cases. In the case of IoT security, it's probably more realistic that we see manufacturers held liable. But in my book owner liability would be fine exactly because it keeps ownership with the owner. If some DDOS victim can show your camera was pinging them, then he can sue you for 1 cent per ping or something. It's only $200 in total, no big deal. But it will make you ask for more security on your next IoT purchase.