I hear all the time about non-consumer devices being left exposed to the public Internet, most recently traffic cameras two days ago: https://news.ycombinator.

I hear all the time about non-consumer devices being left exposed to the public Internet, most recently traffic cameras two days ago: https://news.ycombinator.com/item?id=42624930 https://news.ycombinator.com/item?id=42624930 I do not know for sure whether these devices use UPnP or similar, but considering that they are not intended to be accessible from the Internet, probably not. The blame probably lies with (in this case) all the random government agencies deploying the devices in an insecure way. But assigning blame won’t fix the problem. Something needs to change, and it’s probably going to be the devices. Consumer devices are different. On one hand, they’re less likely to be exposed to the public Internet… at least proportionally. I think. But on the other hand, consumers expect to be able to access their devices from anywhere, and right now in practice that means going through a manufacturer-controlled proxy server. I would love if someone would come up with a standardized mechanism to make home devices securely remotely accessible, without a manufacturer-controlled proxy, but just as easy to use as the status quo. Until that happens, don’t expect anything to change.