[AusNOG] What are we going to do about IoT (in)security?

[Mark Delany]

On 12Jun17, Ross Marston allegedly wrote:

> The only way this is going to change is by push back from those knowledgeable
> enough to have a say.

Yeah. We tried the "push-back" approach with HTML over email. We
lost. Now we have spear-phishing and all sorts of HTML rendering
tricks that fool the average Joe and costs bazallions in lossage per
annum.

Oh wait. I see you've sent HTML over email to this list, so even the
pros get complacent over time.


We technicians might wish for push back but too many manufacturers see
too much money in adding connectivity to their widget to ever imagine
they will stop and consider what they're doing.

As someone in the business you will know that security is an
externality. We have to deal with that reality - particularly as we
are a tiny market in an out-of-the-way spot on the planet.


Mark.