The Internet of Broken Things (hackaday.com)
szczys writes: The Internet of Things is all the hype these days. On one side we have companies clamoring to sell you Internet-Connected-everything to replace all of the stuff you already have that is now considered "dumb." On the other side are security researchers screaming that we're installing remote access with little thought about securing it properly. The truth is a little of both is happening, and that this isn't a new thing. It's been around for years in industry, the new part is that it's much wider spread and much closer to your life. Al Williams walks through some real examples of the unintended consequences of IoT, including his experiences building and deploying devices, and some recent IoT gaffs like the NEST firmware upgrade that had some users waking up to an icy-cold home.
Well, that and the weekly stories we see which demonstrates just how terrible the security of this crap really is. It's not like it's a hypothetical case researchers are warning us about.
Those of us who have been around long enough know damned well not to take a day-one update, because companies have become lazy and sloppy and don't find out what they've missed until some poor schmuck has it go wrong.
And now we're supposed to trust a vendor to push out an update to the things which run our homes and have them not screw it up?
You can keep your interweb of crap, and I'll keep assuming the people making it don't give a damn about security or testing their products.
The IoT is a model in which all of the consumers are the beta testers, and which security is a farce, if it exists at all. It's all gimmicks and toys, lacking either substance or quality.
Lost at C:>. Found at C.
Has the new formatting of HaD had such a bad impact on readership (I no longer go there because of it) that they are now harvesting views via /.?
It wouldn't be so bad if it wasn't such an obvious conflict gentlemen..
[Sorry, this signature is unavailable in your country/region]
The wider the deployment, the harder you have to think about all the cases, all the chances for exploits, and how to recover when it happens. The alternative is going to be government regulation like certain industries already have. The cost of getting things right will pale in comparison to complying with strict regulation from a government agency.
Geology - it's not rocket science; it's rock science
Here's a list of reasons why I don't like the Internet of Things:
1) Internet of Things devices could watch me while I sleep.
2) Internet of Things devices could watch me while I pee.
3) Internet of Things devices could watch me while I make kaka.
4) Internet of Things devices could watch me while I pleasure myself.
5) Internet of Things devices could watch me while I wash my body in the shower.
6) Internet of Things devices could watch me while I relax in the tub.
7) Internet of Things devices could watch me while I brush my teeth.
8) Internet of Things devices could watch me while I make passionate love to my wife.
9) Internet of Things devices could watch me while I brush my hair.
10) Internet of Things devices could watch me while I read a book.
11) Internet of Things devices could watch me while I read Slashdot.
12) Internet of Things devices could watch me while I bake cake.
13) Internet of Things devices could watch me while I put in my contact lenses.
14) Internet of Things devices could watch me while I get ready to play golf.
15) Internet of Things devices could watch me while I do my laundry.
16) Internet of Things devices could watch me while I think about rugby.
17) Internet of Things devices could watch me while I tie my shoes.
18) Internet of Things devices could watch me while I celebrate the 4th of July.
19) Internet of Things devices could watch me while I water my flowers.
20) Internet of Things devices could watch me while I eat ham.
21) Internet of Things devices could watch me while I use my stapler to staple documents.
22) Internet of Things devices could watch me while I chew bubble gum.
23) Internet of Things devices could watch me while I check the oil in my car.
24) Internet of Things devices could watch me while I look for my TV remote.
25) Internet of Things devices could watch me while I blow my nose.
26) Internet of Things devices could watch me while I rearrange my stamp collection.
27) Internet of Things devices could watch me while I listen to the Backstreet Boys.
28) Internet of Things devices could watch me while I do my calisthenics.
29) Internet of Things devices could watch me while I search for a paper clip.
30) Internet of Things devices could send information about me to advertisers.
31) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I sleep.
32) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I pee.
33) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I make kaka.
34) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I pleasure myself.
35) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I wash my body in the shower.
36) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I relax in the tub.
37) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I brush my teeth.
38) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I make passionate love to my wife.
39) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I brush my hair.
40) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I read a book.
41) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I read Slashdot.
42) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I bake cake.
43) Internet of Things devices could let advertisers use the data unsuspectingly coll
My mercury switch thermostat has been working reliably for decades. Decades. Never woke up to a cold house when the mercury needed an operating system update either....
...the IoT is a generally stupid idea, for all the hundreds of reasons that have been repeated here ad infinitum: additional points of failure in systems that benefit very little or not at all from the 'features' added by the new connectivity.
-Styopa
I don't want my fridge narcing on me to the cops.
LOL.
They spelled knights wrong.
Wow!
I don't like it because it's just going to make things more expensive. Companies are lemmings and when one does puts this crap into their products, everyone else will do the same and of course, charge more.
It's just another way of getting us to part with out money: it's just a gimmick - for personal use.
The industrial internet, OTOH, is making industrial processes MUCH more efficient and safer.
...The Internet of Things is creepy to the max and it sounds like it could be very invasive.
You misspelled profitable.
And the scariest part about IoT is not how creepy it is.
It's the fact that not enough humans on this planet give a shit about privacy anymore to stop such an industry.
Even Edward Snowden is sitting around these days asking himself "Why did I even fucking bother"...
I think what will kill iot is that it's just frankly too expensive. A perfect example is the Belkin WeMo line of iot enabled products.
* 150 dollars for a slow cooker
* 150 dollars for a coffee maker
* 200 dollars for a humidifier
* 40 dollars for a plugin relay switch
And the list goes on. The nest costs 5x-10x more than a low end digital thermostat. I have a sneaking suspicion as with almost all other home automation, upper class people will buy it for the novelty but the rest of the world will keep to their "dumb" devices.
You always have China. They will continue to produce bottom of the barrel simple items. You just have to get better at electronics and repair them when you buy them so they're safe, usable, and longer lasting. Other than power supplies, it's rare I have occasion to just outright throw away cheap Chinese "junk". It does, however, often require repairs right out of the box.
It'll be worth it to get a thermostat that's idiot simple, cheap, and dead reliable in 20 years, though.
You attribute to malice what can be simple ignorance. It's not that people don't give a shit about privacy; it's that normal non-technical people don't realize just how invasive things have become. Despite all of the news items, the little old lady next door keeps needing her computer virus-scanned because she keeps giving out her email address, and was too confused with ad-blocking so turned it off, and forwards on the chain emails that friends forwarded to her. She thinks she's being sensible because she only uses her credit card on Amazon, without comprehending (despite repeated attempts on my part) that if her computer has a virus then it can be copying everything she types on ANY page to anywhere in the world. I just thank the gods that she never got a webcam.
I've had to throw away two expensive Corsair power supplies last year. Two. So it's not just limited to "cheap chinese power supplies". (Corsair is supposed to be US/Taiwan manufacture). I'm cured, anyway. Won't be buying more of their stuff.
As with all technology. Just because it exists doesn't always mean that it needs to be implemented.
For example the eject button on the remote control for your VCR/DVD/Blueray player. Sure it is technically possible, but what is the point. After from your chair you eject the disk, you will still need to get off your butt, to take the media out, and replace it with something else.
Some devices don't need internet connectivity. Just because when they are soo far away from you they are no longer useful.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
For most consumers, IoT seems to be 99% rebranded home automation, which has always fallen flat on its face. It reminds me of 3D movies. We see it every few years then people realize it's a gimmick and we go back to business as usual.
All up in the cloud so high
...
27) Internet of Things devices could watch me while I listen to the Backstreet Boys.
57) Internet of Things devices could let advertisers use the data unsuspectingly collected about me while I listen to the Backstreet Boys.
You've got bigger problems than IoT spying.
First off, don't directly connect any primary appliances control systems (Fridge, Furnace, AC, etc) to the internet, if internet based control is seen as a necessity have a easy to enable backup and have hardware set limits to the values the internet control can exert. Second all video/audio input devices should have a hardware controlled light showing when the video/audio recording device is being powered, and of course as part of that these devices only power said inputs when in actual use. With those two procedures you've eliminated virtually all of the nastier stuff that could happen with IoT items.
Most of this stuff isn't going to be useful for most people, but I am sure there are people that it will be actually helpful. For example, if you are in a wheel chair, I could see how wanting a remote control built into the wheel chair that controls lighting, heating, air conditioning, locks and unlocks your door, shows you what's in the fridge, etc. etc. etc.
And yes, it should control your TV/Cable/Netflix as well.
excitingthingstodo.blogspot.com
The pricing is market based, not cost based. All this wi-fi controlled junk is priced higher because it's a premium. Years ago the programmable thermostats were significantly more expensive than the non-programmable ones. Now they're largely the same.
If Wi-Fi everything catches on, plan on the costs going down quickly. Also plan on nothing ever being updated for security vulnerabilities.
"How many times has a Windows update broken something on your computer?"
I'm pleasantly surprised every time it boots up.
"Linux used to be better, but lately, I dread updates, especially major ones because they sometimes will stop my machine from even booting, triggering a big debugging session" ref
You update a production machine with no known method of restoring to a working system?
Washer, dryer, dishwasher, refrigerator, thermostat, lightbulbs? Toasters, stove, oven, even? Toilets, for fucks' sake? There isn't a single valid reason so far as it concerns me specifically for them to be connected to the gods-be-damned Internet. It's just more expense, more complexity, more things that can go wrong or break. It's all solutions-in-search-of-a-problem; it's marketing people that overheard someone talking about connecting something novel to the Internet, and like retarded marketing people tend to do, they went nuts with it. Enough, already!
Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
You could see what happens on TV sets. Now almost all models are "smart". Finding a "dumb" TV is harder and harder, and normally the firmware and the SoC are using is the same of the smarter models, only the extra features aren't enabled when on the boot the harware is not found. Being normally the "dumb" TV with smaller panel they're considered low end models are priced less. but when the "smart" and "dumb" models with the same screen size are sold, the price difference is small.
I'll stick with my Dumb controllers simply because the designs are Proven - the KISS principle plays a very big role in this. Now if you can give me an AI that does what I want, when I want and how I want, I may consider adding connectivity to some of my controllers but until then, FOAD and KMA
I'm really confused why most commenters here have such a negative viewpoint on IoT.
Many comments about "security is terrible", "I don't need internet connected devices, my X device works just fine."
OK, then --don't-- buy it. But you have to realize that the market going through development of products to find consumer desire is a GOOD thing.
Maybe 97% of all the devices end up going away (by the way, without a dollar that I spent on them). But those 3% of devices might actually be helpful and worth the cost; maybe they save lives.
Trying new things and moving forward on an old concept (home automation) creates new options. I LIKE more options, it's the whole reason why I live longer. Please continue to innovate world.
Just as only wealthy ancient Romans could afford lead pipes, only wealthy individuals now can afford these silly expensive "connected/smart" appliances, so we're in an odd situation where being well off affords you much more risk of being hacked. Everyone else will be just fine with their hardwired home controls.
"I have never let my schooling interfere with my education." - Mark Twain
Full of useless stuff you dont need to have online.
I flat out refuse to have any of this IoT crap in my house. Time and time again it gets hacked, and its stuff I dont really need anyways. If I did, I'd make it manageable via a jump host on my network that I know will be somewhat secured and up-to-date e.g. *BSD, Linux or even OS X.
Heck my new geospring hybrid (heatpump/electric) water heater has an RJ45 socket where an add-on module will connect to your wifi and make it "manageable" via phone app. Seems like an neat idea, as in oh I forgot to put it into vacation mode and somehow remembered this while on vacation, let me do that remotely to save my self all of about 10 cents in saved energy while its sitting idle for a few days. But its not worth the risk in that someone might take control of it and f*ckup my hotwater or use it to gain access to my home network.
I hadn't even thought of *that*. Let's ignore the blue screen of house death in the middle of winter, let's consider that your wifi and tv all have static, because those idiot things that were supposed to clean your ducts broke down in there, with so much dust, and two years later, they're still online complaining. And they've been hacked by the 16 on the other side of the block....
mark
I'm reminded of Jeff Goldblum in Jurrasic Park. "Ok, just because you've figured out how to do this, did you stop and ask yourself *why* you're doing this?"
Frankly, I'd be happier if the internet could work as expected, *before* they start adding more crap.
How many times have I clicked on a headline at Google News, only to have the article never load at all (because it's waiting for some ad server to respond, which never does).
How many times have I tried to access something with my phone, only to have the result being an unreadable mess?
How many times have I had to lower the volume at work on my PC, because some stupid autoplay video ad starts screaming across the cubicles?
How many times have I searched for something technical on Google and had to ignore the first 3 pages of results because they are either scam sites, or advertisements for things?
Fix the internet of web pages before we add more broken, borked crap. Heck, as it stands, Netflix can barely stream to my TV, now you want to add more DDOS bots?
If telephones are outlawed, then only outlaws will have telephones.
You can thank smartphone technology for that - TVs need SoCs too and while they could get by with a low end SoC, a low end SoC doesn't cost all that much less than a higher end multi-core multi-GHz one used in a smartphone. (Even the low end ones are dual core 1GHz units0.
Manufacturers love having the extra power - it makes the UI more "snappy" and it can boot faster, and the video processing can be done on the GPU rather than specialized video processing hardware controlled by the CPU (with very little increase in lag - it's still roughly a frame or two).
And when you're at this point, "smart" features are really just a software thing manufacturers can do to add value to their products for basically free. After all, the processing power is there.
Using a lower end SoC with video processor on the side costs about the same price, and they lose out on the ability to run a standard high level OS like Android on their SoC.
Qualcomm was going to introduce a video chipset at one point with all the TV inputs and a low end processor - perfect for TVs, but abandoned the plans when there was little interest
As always there will be a big hue and cry against this technology. Similar thing happened with social media too. But now
everybody uses it. Normal people do not care about security and privacy. This will be successfull if it provides convenience,
else no. Period
Back in 2008 I worked in a small startup which worked in data collection. Their CEO was yelling mouth frothing how "Everyone should just stop worrying and trust the cloud! SSL certificates solve all the problems!" Sure the CEO was not a stupid man, but greedy and only wanted to pursue profit at all costs. Even their chief engineer had the behind-the-scenes opinion that "it's good for us, but I'm not going to use the cloud for critical information".
There are a few interesting and useful applications for IoT. Home security systems and remote medical devices, for example. But for the most part, it's just an excuse to charge you more for a product. Do I really need my lights, air conditioning, sprinklers, refrigerator, coffee maker connected to the Internet? Yeah, some of it's cool, but is it worth the added risk?
Here is some of the evidence: IP cam trolling!
https://www.youtube.com/watch?...
https://www.youtube.com/watch?...
https://www.youtube.com/watch?...
https://www.youtube.com/watch?...
There was an epic one from last week where 4 unwanted pizza deliveries showed up at this person's door before the pranker started shouting "GIMMEE MY PIZZA!" and obscenities at the family. But it got pulled.
You attribute to malice what can be simple ignorance. It's not that people don't give a shit about privacy; it's that normal non-technical people don't realize just how invasive things have become.
While this excuse might have served us well 30 years ago, it is quickly growing extinct with the blue-haired generation. And even that generation is educating themselves.
That said, it pretty much comes down to common fucking sense to understand that from a security perspective, a product like Amazon Echo is nothing more than a live microphone. This would be obvious to the average consumer if they actually gave a shit about privacy. They don't.
But everything wants to connect to a home server.
It's not just about them watching me, I don't want to buy an expensive piece of hardware that could be bricked if the company goes under, or if they decide not to support "older versions".
Signed, guy who bought an Apple PowerCD (good luck googling that), a Zip Drive, a few shitty little plastic boxes to store floppy drives in, etc. etc., and a thousand or so crappy pieces of software that no longer run on a modern computer.
I've had to throw away two expensive Corsair power supplies last year. Two. So it's not just limited to "cheap chinese power supplies". (Corsair is supposed to be US/Taiwan manufacture). I'm cured, anyway. Won't be buying more of their stuff.
That's because you bought a re-labeled Chinese Junk power supply from a MEMORY manufacturer.
Just because a company otherwise good with other products decides that they want to put their name on something they know NOTHING about doesn't transmogrify the re-labeled product into something "Good", too.
"It's not that people don't give a shit about privacy; it's that normal non-technical people don't realize just how invasive things have become."
Then how did "I don't care, I have nothing to hide!" become so prevalent?
... not really if it is only a machine using those observations. I d be glad to have options to supermonitor myself (at will). Like suggesting when to buy toilet paper because it has observed your usage. or suggesting one brand over another brand because given habits... given toilet paper capabilities... given income... the one that suits you best does not exist but observations say it is a good startup market for research and... you get the idea? Machines can do that and no one would know that would care about YOU. Your lost is annoying, actually.
Finding a "dumb" TV is harder and harder,
Too bad finding smart TV shows is all but impossible.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.