US Senators introduce bill to secure Internet of Things devices

[Brink]

The bill would also expand legal protections for security researchers who hunt for vulnerabilities.

A bipartisan group of senators have introduced legislation aimed at securing internet-connected smart devices, which were at the center of a massive cyberattack that brought down large swathes of the internet last year.

The distributed denial-of-service in October lasted for less than a day, but it further fueled concerns about threats posed by insecure and easily hijacked so-called Internet of Things (IoT) devices, thanks to an industry-wide apathy toward supplying devices with even the most basic security.

The new bill, introduced by Sens. Mark Warner (D-VA) and Cory Gardner (R-CO), will require suppliers of devices to the federal government to adhere to a level of industry-wide security practices, such as ensuring that devices, like wearables and smart sensors, can be patched with security fixes. The bill will prohibit devices from including hard-coded and unchangeable usernames and passwords, long seen as one of the primary ways malware can break in and hijack devices...

Read more: Senators introduce bill to secure Internet of Things devices | ZDNet

 

[Layback Bear]

It's about time someone is moving on security for IoT items.
I have been preaching for this for a long time. Anything that can and or does access the net needs security.

Jack

 

[lehnerus2000]

Amazing. :shock:

 

[Lady Fitzgerald]

About time? It's past time! The industry should have done this themselves without the Government having to step in.

 

[Brds7t7]

About time? It's past time! The industry should have done this themselves without the Government having to step in.

This is exactly the reason why I won't have any "Smart" devices in my home. Until these IOT devices are secured - I'm not interested. I can still do the same things I've been doing for the last 40 years I've been on this planet, without them.

 

[Lady Fitzgerald]

This is exactly the reason why I won't have any "Smart" devices in my home. Until these IOT devices are secured - I'm not interested. I can still do the same things I've been doing for the last 40 years I've been on this planet, without them.

I agree (although I can only wish I could still do the things I could do even 20 years ago, let alone 40). The idea behind IOT is great but the implementation stinks!

 

[Brds7t7]

I agree (although I can only wish I could still do the things I could do even 20 years ago, let alone 40). The idea behind IOT is great but the implementation stinks!

Completely agree. Any device I have which connects to the Internet l make sure is behind a firewall. Even my phones, tablets have firewalls installed on them. Not saying they're 100% secure. But I'd rather run them with than without.

And I don't need a fridge to connect to the Internet to order milk to my door. If I need milk, I do what humans have been doing since we learned to use our legs - I WALK (not drive) to my local shop which is 5 minutes away. Humans are just getting lazier (and more unsociable) and we're doing it at the expense of our own privacy unfortunately.

The only times I see these devices as helpful is if a person has problems with mobility. But they definitely need to be secured.

 

[lehnerus2000]

About time? It's past time! The industry should have done this themselves without the Government having to step in.

Spending money on security would eat into the CEO's bonuses.

 

[Lady Fitzgerald]

Spending money on security would eat into the CEO's bonuses.

Oh, the poor things!