4 ms·
This is not a good idea. Now every time a want to sell a minor piece of connected hardware not only will I need a security professional on my team, but I'll nee
by superbaconman 12y ago
This is not a good idea. Now every time a want to sell a minor piece of connected hardware not only will I need a security professional on my team, but I'll need to pay someone (government approved) to audit my work. I want nothing to do with such laws.
- pjc50 12y agoI'm hardly a massive exponent of this kind of thing, and I've complained about CE/WEEE/RoHS in the past; but I think the general idea of some minimum product standard is a good one (with a clear "hobbyist" exemption). If you don't have a security professional to hand, how do you or I know your IoT thingy isn't going to turn into a malware vector? But I agree that governments don't have a great track record on setting the correct standards. Cameron was only recently talking about a ban on non-backdoored communication. (Note that CE supports self-certification, it just has very unclear and lengthy rules)
- pdkl95 12y agoTo quote Dan Geer, "Yes, please! That was exactly the idea." There are many industries that require this kind of auditing or similar regulation. I would think that the technology-based industries are clever enough to find a way to accomplish these checks quickly and cheaply.
- NeutronBoy 12y ago> not only will I need a security professional on my team It's almost as if that's the entire point...