News for hackers. Stuff that matters.

A comment on Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?. Parent comment

Re:Why Do Keynote Speakers Keep Suggesting That Improving Se... by roywiggins on Friday August 17, 2018 @07:11PM (#17786016)
Customers can't evaluate security of IoT devices and, furthermore, they can't even evaluate what the downside of an insecure device is. So my printer is insecure- what does that mean for me? How much should I care?

At least with cars, you know what an unsafe car can do (kill you) and it still took Ralph Nader's book and citizen pressure to set up a federal agency to oversee car safety. Also, even when most people know that seatbelts are a good idea, we still have seatbelt laws because they mean fewer people die.

https://en.m.wikipedia.org/wiki/Unsafe_at_Any_Speed?wprov=sf...

[ Parent | on HN ]
Re:Why Do Keynote Speakers Keep Suggesting That Improving Se... by nickpsecurity on Friday August 17, 2018 @10:04PM (#17786520)
They can for some of them if you give them this pic from Brian Krebs:

https://krebsonsecurity.com/2012/10/the-scrap-value-of-a-hac...

Got through to a lot of them that way. They were more likely to practice better computer security or buy less "smart" products that don't need to be smart.

[ Parent | on HN ]
Re:Why Do Keynote Speakers Keep Suggesting That Improving Se... by fjsolwmv on Friday August 17, 2018 @11:15PM (#17786665)
That pic made my eyes glaze over. It's a good concept, poor execution.
[ Parent | on HN ]
Re:Why Do Keynote Speakers Keep Suggesting That Improving Se... by angersock on Friday August 17, 2018 @07:14PM (#17786032)
Maybe they shouldn't have those devices then.
[ Parent | on HN ]
Re:Why Do Keynote Speakers Keep Suggesting That Improving Se... by throwaway2048 on Friday August 17, 2018 @09:12PM (#17786386)
Lets evaluate what makes more sense, OEMs and programmers that have an understanding of the software and hardware and the programming they undertake being responsible for for their own work.

Or blaming the users for not understanding what is essentially an black box that is basically an entirely unknown quantity before (and after) you buy it, often even with when the user has very high technical skill.

I know a lot of programmers are allergic to taking responsibility for their products, maybe its time that changed.

[ Parent | on HN ]