Ask HN: I’m an FCC Commissioner proposing regulation of IoT security updates

Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by coldpie on Tuesday September 05, 2023 @12:40PM (#37394314)

Scroll down: https://arstechnica.com/author/dan-goodin/ This is just a teeny tiny sampling of the security vulnerabilities disclosed every day. Our industry is just not built with security as a goal, and even if we started caring about it today, we have 50 years of not caring to patch up. Caring about security in a meaningful way (i.e. formal verification, engineer licensing & liability) is really, really expensive. No one is going to carry that burden when their competitors don't have to.

[ Parent | on HN ]

Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by NegativeK on Tuesday September 05, 2023 @01:35PM (#37395124)

I'm sorry, I can't really debate with a reductionist claim that everything is 100% fucked when it's readily apparent that some threat actors are still being stopped.

For what it's worth, I'm not disagreeing with your points about needing drastic, systemic improvements in how we handle security.

[ Parent | on HN ]

Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by nier on Wednesday September 06, 2023 @06:39AM (#37403366)

Quote from one [0] of the articles at the linked Ars Technica index page:

«A ragtag bunch of amateur hackers, many of them teenagers with little technical training, have been so adept at breaching large targets, including Microsoft, Okta, Nvidia, and Globant, that the federal government is studying their methods to get a better grounding in cybersecurity.»

My opinion is that we fail completely to build secure systems in a forward thinking way and the fact that we manage to stop threat actors that exploit holes that are already known to us is insignificant.

[0]: https://arstechnica.com/security/2023/08/homeland-security-d...

[ Parent | on HN ]