IOT engineer here. As much as it hurts, I have to agree with the spirit of this article: we, as the industry, are simply not prepared. Your average embedded en

IOT engineer here. As much as it hurts, I have to agree with the spirit of this article: we, as the industry, are simply not prepared. Your average embedded engineer does not care much about security. When you launch a hardware product, the things you care about are stability, EMC compliance, extending battery life, getting the production chain right, packaging, cost optimization and squeezing every damn bug that causes random faults (remember, this is embedded, and pretty much any exception is equivalent to an instant device reboot). Security rarely gets mentioned simply because there are dozens of more pressing issues - the most important being getting that damn thing to work. This approach has worked fine for decades simply because there was no practical way of attacking a device - until now. Firmware has always been riddled with vulnerabilities. It's just the Internet connectivity that suddenly made them exposed.