News for hackers. Stuff that matters.
Re:What If We Put Warnings on IoT Devices? by jstanley on Friday October 13, 2017 @10:24AM (#15465931)
> that is meaningless to most people.

Therefore no people should be allowed to know?

For what it's worth, I'm not in favour of California's labelling requirements either. But just because something is meaningless to the majority of the population doesn't mean it's meaningless to the entire population. And it is specifically the population that is interested in knowing it that finds it least meaningless!

Re:What If We Put Warnings on IoT Devices? by seanmcdirmid on Friday October 13, 2017 @10:44AM (#15466118)
I didn't say allowed or not. Sure, you should know that there are 15 ug of theomacrotasium among a hundred other things in your environment, but then what? Information overload means our decisions can get worse, not better, when presented with more of it.

What would be more meaningful: certifications that act as abstractions for complex problems. Organic kind of acts like this already, and of course there are multiple federal certs for electronics. Having a functioning regulatory system as well as a working civil law system also help.

Re:What If We Put Warnings on IoT Devices? by freehunter on Friday October 13, 2017 @10:53AM (#15466220)
How about a warning that says "The battery in this cell phone contains an amount of theomacrotasium known to cause cancer if ingested."

That's a completely actionable warning. Don't eat the contents of the battery of your cell phone.

Or how about "This carpet contains formeldahyde, which is known to cause birth defects in pregnant women. Limit exposure to this carpet for a few days after installation."

That's a good warning. That tells me what I need to know, what the risks are, and how to mitigate it.

Re:What If We Put Warnings on IoT Devices? by seanmcdirmid on Friday October 13, 2017 @11:05AM (#15466330)
Hey, if it's just one thing, great! Now, how do you do that for a hundred things? Again, warnings work great for very small numbers of N.

We have to find a middle ground between "has chemicals that may cause cancer" and "a hundred specific chemicals in X quantities that may cause cancer." Abstraction is very necessary as a pragmatic solution, even if full disclosure makes sense as an ideal.

Heck, most places are just doing CYA, they have no idea what specific lists of chemicals their contractors use. For the IoT case, no one has any idea how their devices can be exploited, and merely admit the possibility of exploitation. But that is another issue.

Re:What If We Put Warnings on IoT Devices? by kaybe on Friday October 13, 2017 @01:24PM (#15467578)
Well, information on how to migitate the cancer risk is already a step forward.

If it is only harmful if ingested you know not to give it to your toddler. If it gives off toxic fumes while burning, well, stay away if you made a fire mistake. etc. The warning itself is pretty useless as it is.

Re:What If We Put Warnings on IoT Devices? by albertop on Friday October 13, 2017 @11:23AM (#15466482)
If it is meaningful to only a small portion of the population then that portion should pay for obtaining this information and not force the rest to pay. If you add legal costs these warning like most of regulations are really expensive.