A little more than a year ago, I urged manufacturing companies testing the IoT waters to leave the work of bringing Internet connectivity to their traditionally unconnected products to those who understand what’s at stake. I’m not alone in my concerns that the IoT brigade will bring with it an avalanche of staggeringly insecure products that will find their way into our daily lives.
What we’re seeing right now is a hopefully imperfect storm of security challenges that, with any luck, will not result in global security and privacy breaches. In one corner, we have companies like Dell and Lenovo distributing computers with wide-open root CAs, allowing anyone with a small amount of skill to crib a certificate and spoof SSL websites, run man-in-the-middle attacks, and install malicious software on those Windows systems with nary a whimper from the “protections” in place to prevent such issues.
To read this article in full or to leave a comment, please click here