> Then those devices aren't really a security issue and a danger to the rest of the Internet. They aren't connected regularly, but they are connected eventuall

> Then those devices aren't really a security issue and a danger to the rest of the Internet. They aren't connected regularly, but they are connected eventually. This distinction can be used to great advantage by attackers if the security side ignores it. Also, you are now forcing devices to be connected to the net eventually and call home or they brick themselves? This seems customer/user hostile to say the least. > Whoever is connecting the device to the internet is liable. Devices must have the capability to call home (manufacturers servers) and update if necessary. I was under the impression that the manufacturer was responsible in this scenario, not the user. At any rate, I was moreso interested in trying to get you to think through some of the implications, and see how well you had thought this out.