3 ms·

Correct me if I'm wrong, but I believe he's calling for a specific organ of government to take on regulation of the internet and connected devices in a general

Correct me if I'm wrong, but I believe he's calling for a specific organ of government to take on regulation of the internet and connected devices in a general sense, not calling for some specific regulation or law. I suspect what he's getting at is having some set of "safety standards" to be put in place, especially for IoT tech. The whole quote of >Our computers are secure for a bunch of reasons. The engineers at Google, Apple, Microsoft spent a lot of time on this. But that doesn’t happen for these cheaper devices. … These devices are a lower price margin, they’re offshore, there’s no teams. And a lot of them cannot be patched. sums up that point pretty well. I honestly don't know how you would really enforce something like this, but the proposal seems to be less about the specifics of regulation and more about the need for new regulation. The FCC really isn't equipped to handle this kind of thing.

MichaelMoser123 10y ago
% honestly don't know how you would really enforce something like this Probably like with automotive code - they don't have code audits but have mandated test scenarios. The problem is that you need large organizations to work these out i guess Schneier has a point, if consumers do not demand secure systems then it can only be done through regulation. that would be a very German approach - they have strong consumer advocacy organisations like Stiftung Warentest and the Adac, these then push for more consumer protecting regulation. [1] Once upon a time these requirements were also used as protectionist barriers. In our days that would mean: you did not bother to update your toolchain and have no firmware updates for this smart light bulb of yours? gone is your import license. [1] http://americastradepolicy.com/german-customer-protection-or-protectionism/#.WDaqd7J96M8 http://americastradepolicy.com/german-customer-protection-or...

MichaelMoser123 10y ago

% honestly don't know how you would really enforce something like this Probably like with automotive code - they don't have code audits but have mandated test scenarios. The problem is that you need large organizations to work these out i guess Schneier has a point, if consumers do not demand secure systems then it can only be done through regulation. that would be a very German approach - they have strong consumer advocacy organisations like Stiftung Warentest and the Adac, these then push for more consumer protecting regulation. [1] Once upon a time these requirements were also used as protectionist barriers. In our days that would mean: you did not bother to update your toolchain and have no firmware updates for this smart light bulb of yours? gone is your import license. [1] http://americastradepolicy.com/german-customer-protection-or-protectionism/#.WDaqd7J96M8 http://americastradepolicy.com/german-customer-protection-or...