Avoiding IoT

[mike acker]

as most of us here are well aware the "Internet of Things" (IoT) is a priority target for hackers.

and with considerable success

It is my view that there are four main factors at play here:

• Programs having excess capability -- e.g. a browser script should have never been able to access the Spectre/Meltdown issue;
• general lack of authenticaton for transactions -- x.509 is better than nothing but certificates need to be countersigned: there are way too many x.509 certs published; as a result we all need to digitaly sign just the few -- maybe a dozen -- certs. that we actually use;
• insecure operating software with 1 partucular type in mind, what i like to call the "Gaterbox";
• complete lack of product liability law;

perhaps i should add: generally poor security practice at the commercial level. You can read about ATM heists and Tax Refund problems at Krebs this morning

Krebs on tax fraud
Krebs on ATM Jackpotting

In the jackpotting the thugs just opened the ATM a changed out the hard drive. As Charlie Brown would say: "Good Grief".

When it comes to IoT: Just say no. a much deeper question should ask: is electronic commerce suitable to purpose for people today? should it be? if so what is required to achieve an acceptable level of fraud prevention? a dedicated ( single purpose ) authentication device? A KeK built into a watch perhaps ?

[Night Wing]

If I'm thinking about buying a product with IoT and it can't be turned off, then I won't buy that product. In my opinion, anything digital can be hacked and IoT is a hackers dream.

[Lucap]

https://www.theregister.co.uk/2017/03/0 ... or_claims/

Apparently It's not a IOT backdoor it's a feature.

[DAMIEN1307]

I for one refuse to have any device in my house that could be abused like this...so no alexa, nothing google slurping things up, no iot for door locks, thermostats refridgerators or anything of this ilk to make a "smart house"...ive had a "stupid house" all my life and it feels like home...i also have a "stupid phone" i refuse to have a "smart phone", i dont text, go on the web, etc...(i also do not use social media like FB, twitter instagram etc)....i just send and receive telephone calls only...its what i call putting the KISS on it all...Keep It Simple Stupid...when doing this, your problems will be few...why do people seem to like complicating their lives with all of this tech...i find computers, a simple cell phone, and my Roku box for tv with my amazon prime to be all the complications i really need, why beg for more issues then already exist just with computers alone, most of us use linux precisely because we had had enough of constant tech woe issues already? as for me? less complications means happier, less grumpy old man...lol...DAMIEN

[Moem]

All my hacker friends avoid the IoT like the plague... they know how vulnerable it is. If they do any home automation, they roll their own and generally do not connect it to the internet.

[DAMIEN1307]

ahhh now that was a good time in history...the plague..."bring out your dead, bring out your dead"...lol...yep im a hacker too and i lock down anything computerized and web/internet accessible...if it cant be reasonably locked down, it will not be given house room...it needs to be potty trained, and/or house trained, just like any other animal...lol...DAMIEN

[Portreve]

As I understand the (at least casual) definition of IoT, I'm doing an accidentally perfect job of avoiding it. I'm not precisely trying to avoid it; I just don't have a need for any of it, or the extra money to afford it.

It is exceedingly rare that I find any form of automation truly suitable to my needs. I would not describe myself at all as an egotistical know-it-all über-geek, though I am considerably knowledgeable in a wide variety of disciplines. It's simply that most of what exists runs the gamut of not suiting my needs, affording me automation I simply don't need, or not going about things in a way I think it should.

Beyond that, I don't watch TV, I'm not a gamer, and I don't stream anything.

Security concerns are valid, though in addition to that, I have to pose the question: what benefit(s) would I derive from, and what use would I have for, IoT hardware / services?

ahhh now that was a good time in history...the plague..."bring out your dead, bring out your dead"...lol...

[jimbobs]

Maybe it's my sense of independence, or dislike of being controlled, that makes me avoid any of these Internet connected devices. But truth be told, I haven't seen anything that's actually useful so far. Bulbs that can be controlled by a phone? Useless (for me). Smart thermostat? Useless! Smart fridge? Useless. Alexa? Useless. etc. I'm (always, I hope) open to ideas but when something does come along that seems useful, my ability to control it fully will be key.

[trapperjohn]

Once upon a time, asbestos was "the next new thing." When I was a kid, we used play with the stuff.

Humm... what are we playing with today? The user agreements tell us straight up.

For example, I randomly saw this one.
Ref: https://www.amazon.com/gp/help/customer ... =201809740

My hat comes off to the author of that tome. At least I got a warning this time.

1.3 Alexa Interactions. You control Alexa with your voice. Alexa streams audio to the cloud when you interact with Alexa. Amazon processes and retains your Alexa Interactions, such as your voice inputs, music playlists, and your Alexa to-do and shopping lists, in the cloud...

[Moem]

Well, here's an example of useful automation: my partner is working on automating the windows, which will open and close based on outdoor temperature, indoor temperature, wind speed and whether or not we are at home.
So far, we regulate indoor temperature in summer by having the windows open when it's cool out, and closed when it's hot out; of course, if there is a storm they need to be closed and we also don't want them open when we're away. That's potentially a lot of window opening and closing, and it's easy to forget and let the hot afternoon air in. Automating that seems quite useful to me. And no, it won't be connected to the internet!

[jimallyn]

But I just can't live without being able to open and close my garage door from anywhere in the world.

[Portreve]

Well, here's an example of useful automation: my partner is working on automating the windows, which will open and close based on outdoor temperature, indoor temperature, wind speed and whether or not we are at home.
So far, we regulate indoor temperature in summer by having the windows open when it's cool out, and closed when it's hot out; of course, if there is a storm they need to be closed and we also don't want them open when we're away. That's potentially a lot of window opening and closing, and it's easy to forget and let the hot afternoon air in. Automating that seems quite useful to me. And no, it won't be connected to the internet!

Obviously, I speak with the perspective of someone who lives in Florida (of all places!) but I can't imagine living without air conditioning during the summer. Opening the windows would be the very last thing you would want to do here because of the heat and humidity. If there were no longer air conditioning, I would utter some very well-chosen curse words, in particular the contraction of the ever-so-popular "Firetruck This!", and leave the state, never to return.

But I just can't live without being able to open and close my garage door from anywhere in the world.

'Zactly!

[Moem]

Obviously, I speak with the perspective of someone who lives in Florida (of all places!) but I can't imagine living without air conditioning during the summer.

You know that climate is a thing, right? And that it differs a lot, depending on where you are?

[thx-1138]

Well, here's an example of useful automation: my partner is working on automating the windows, which will open and close based on outdoor temperature, indoor temperature, wind speed and whether or not we are at home.

Moem, that reminded me of this...

[Pjotr]

The IoT will give future ransomware an entirely new scope.... Imagine your entire house, and much of what's in it, being ransomed. Including the car in your garage.

OK, it's funny, because it can be avoided on the scale of the individual. By being sensible and avoiding that horrible IoT crap wherever reasonably possible.

But imagine the chaos and havoc this'll create in society as a whole... It's a disaster waiting to happen. And the multitudes are walking into it with their eyes wide shut.

[thx-1138]

https://mjg59.dreamwidth.org/50229.html

[jimbobs]

Well, here's an example of useful automation: my partner is working on automating the windows, which will open and close based on outdoor temperature, indoor temperature, wind speed and whether or not we are at home.
So far, we regulate indoor temperature in summer by having the windows open when it's cool out, and closed when it's hot out; of course, if there is a storm they need to be closed and we also don't want them open when we're away. That's potentially a lot of window opening and closing, and it's easy to forget and let the hot afternoon air in. Automating that seems quite useful to me. And no, it won't be connected to the internet!

So nothing to do with IoT

[Lucap]

Florida

Isn't Florida regularly testing Autonomous vehicles and Driverless cars , have you seen any on your travels?

[Moem]

So nothing to do with IoT

Very true, but IoT and domotica (home automation) are mixed up in people's minds.

[mike acker]

But I just can't live without being able to open and close my garage door from anywhere in the world.

it's important to open the door. otherwise you'll have a crash when you start up your tractor and send it out to mow



seems i saw an add at CES for some pills you could swallow. these would send an alert to your smartphone if you're building up too much pressure


some of these clowns have got to be doing acid