3 ms·
> If there's anything we've learned on HN, IoT software is complete shit when it comes to security. Yes, but I think most people here will till you it's not be
by cderwin 10y ago
> If there's anything we've learned on HN, IoT software is complete shit when it comes to security.
Yes, but I think most people here will till you it's not because of a lack of engineering talent. Rather security takes time and a lot of money (in particular security engineers) and IoT companies would rather do without for the most part. And even if you do pay the price it doesn't always work out. It's not an engineering or talent problem, it's a management and P/L problem.
- diafygi 10y agoTrue, however since the distributed energy resource (DER) IoT (inverters, thermostats, etc.) is more critical to grid infrastructure than your WiFi router, there's a bit more incentive to start doing more security testing on these deployed devices. Consumers won't pay for the better security, but grids likely will. Maybe it will take a huge hack to push the industry into requiring better DER security, or maybe an ambitious security firm could hop on this early and control the market. Either way, eventually we're going to end up with a set of security requirements for DERs that need to be tested and certified. Seems like a good opportunity for some ambitious tech cybersecurity startups. DERs are a really new sector of the energy industry, so there aren't any entrenched security firms (like there are in the wholesale grid). It's an open field for ambitious entrepreneurs.