So, I just searched for "security" in that page you linked to and... not a single mention. As I see it the problem with IoT isn't features, it's the absolutely

So, I just searched for "security" in that page you linked to and... not a single mention. As I see it the problem with IoT isn't features, it's the absolutely abysmal security record. I mean, it's abysmal in home ADSL routers, what are expecting of companies just churning out one-off IoT things? Maybe they should start out by mandating an update policy[1]? ... but then of course nobody would join, so what to do...? [1] I'm not talking about a concrete schedule, just a documented human-readable policy of what their usual schedule would be (if any), and how severity levels work (for them), etc. ------------------------------------- EDIT: HN won't let me post again "too soon", so here's my reply to "st3fan": > Ok, what does this actually mandate and how many actual devices adhere to this standard? What is the motivation for any particular device manufacturer to adhere to this "standard"? (etc. I'm sure you can come up with your own questions.) Also, shouldn't this other standard at least be mentioned in the IoT standard and match the key word "security"? This whole IoT thing is an omnishambles.