Rush to implement Internet of Things ‘could undermine security’ by Jane McCallion.
From the post:
Internet of Things (IoT) companies risk undermining the security of their own sector in the race to deploy new solutions, it has been claimed.
Speaking at a panel discussion hosted by Rackspace, Yodit Stanton, CEO and founder of OpenSensors.io, said that compared to standard devices that transmit and receive data, building security into IoT devices is “different, but not hard”.
“You have these tiny processors with not much memory so you can’t use keys, for example, but there are very good security chips,” said Stanton.
However, she added: “People just don’t use them enough, which I despair about. I think there is an element of ‘oh we’ll just deploy this thing and it’ll be fine’, because they don’t really think about the implications. The technology is there, but in the enthusiasm and in the rush of this new thing we are possibly neglecting [it].”
…
Do you think?
Just earlier today we were talking about how developers can’t use encryption libraries correctly. Remember the being asked to fly an airplane while they only had a driver’s license?
The people speculating in Jane’s post about security not being hard for IoT devices and the “potential” that security may be neglected, only have driver licenses when it comes to cybersecurity.
As far as potential EU data protection regulations, you do realize that protection regulations are developed to define non-liability for the regulated conduct? If you conform to the regulation, you get a free pass no matter how bad the damages.
The better course would be to invalidate EULAs on a products liability theory and hold manufacturers and others liable in court. I need to go back and read Posner and others, plus the contemporary literature on the legality of EULAs.
What do you think the result of adding the insecure IoT on top of the present insecure worldwide IT infrastructure? More insecurity?
Right in one!