Slashdot Mirror
FTC Forces Asus To Improve Router Security (helpnetsecurity.com)
An anonymous reader writes: The FTC is actively trying to make sure that companies secure the software and devices that they provide to consumers, and a settlement with Taiwan-based hardware maker ASUSTeK Computer is one step towards that goal. The complaint was raised after well-meaning hackers exploited a weakness on Asus routers and left note on victims' drives notifying them of the matter. Later, a researcher discovered an exploit campaign that abused vulnerabilities to change vulnerable routers' DNS servers. According to the settlement, the company will have to establish and maintain a comprehensive security program subject to independent audits for the next 20 years.
We don't want caveat emptor for this shit, we want companies who are accountable for the security of the products they make.
Do you want to live in a world where security boils down to "too bad, suckers"?
This bullshit of caveat emptor is why we have such shit security on the web in the first place.
More companies need to get their knuckles rapped and have penalties when they do an incompetent job at securing such stuff.
Lost at C:>. Found at C.
Caveat Emptor is fine with things that a consumer should be reasonably expected to notice or be aware of, and/or that aren't inherently life threatening. If I buy used furniture on Ebay or Craigslist, I should know that I'm taking a risk. On the other hand, things like tainted food? Yes, I want the government regulating that. What about things like lead paint on Childrens' toys? I sure wouldn't be able to tell the difference at a glance, so yes, absolutely.
Things like computer security? I don't expect that the government is necessarily going to be the one testing everything, but I'm perfectly happy with the government instituting penalties for companies that sell a supposedly "secure" product that turns out to be complete bullsh*t full of more holes than swiss cheese, because penalties are pretty much the only thing that's going to really get companies to take things seriously, at least in the SOHO market.