30 karma · joined February 27, 2016
By volume and impact, what devices have IoT vulnerabilities? If from large mfrs, you might expect some measure of support as that would be somewhat in their best interest, if only to preserve their brand image. My concern would be low quality, usually cheaper, whack-a-mole mfrs that come and go on Amazon, eBay, etc. Even if they release a product that would fall under these guidelines, how are you going to go after a ghost?
Also, what happens when an IoT mfr is acquired, does the acquirer assume all the IoT risks as well?
The choice of some site's 2FA implementations are known to be problematic, such as SMS only (easily hijacked), or supporting TOTP and/or HOTP, but also requiring you to allow SMS or "security questions", reducing the degree of security.
Lifetime cost of living increases, raises and medical coverage for you and your family for life, and that on top of any additional public safety job pension you get makes it really sad that police and fire who are supposed to be protecting and improving society are instead bankrupting it and making it worse by preventing funds from being used for much needed infrastructure improvements.