by kleinbl00

goobster innocently sent me a whitepaper last week about IoT and security. I bit his head off because it was yet another tired, tawdry "users should be more careful" scold about all those horrible things that can happen to you if you aren't careful" from yet another publicly-traded internet infrastructure company.

The computer and the car have become utilities where the manufacturers are given great value by society. Cars have roads, and computers have access to the Internet. Both have utilitarian necessity. But cars are expected to maintain certain safety features. It would seem reasonable that an industry whose failures can wreak havoc globally should be expected to build security into its own systems.

I've got cameras on the Internet now. They're talking to an NAS that's on the Internet. And they're from the most esteemed company in security. And you can type "axis root password" into Google and get into a million of them.

And you can't disable the root user.

And I'm fucking sick of the automobile industry telling people that if they don't want their Pintos to explode they should stop getting run into.