iot - Build a "Smart Home" - lack of security -

i preparing make home smarter , reasons not happy.

i read several articles secure smart home, there no clear solution. don't know why, seems many products shit (security concerning). many products messaging outside , want know how controll that.

why not put box in front of go outside , watch traffic? leads me question: gateways have open?

there many questions in question, maybe more want, give try.

why there lack of security in many iots?

there 2 reasons:

1. new companies on market without know-how.

2. "each cent counts"

   1. there many new companies on market. developing toothbrushes, hairbrushes, bulbs , on target: internet of things , bring on consumer. let's have intelligent hairbrush l'oreal (yes, real shit). okay, lets make hairbrush , app because boys , girls should know hair (lol). hairbrush has cost @ least 15$. sorry bro, no money security. , furthermore these companies not microsoft, google, ... have years of security engineering , goo engineers.

   2. as said above, goes hand in hand. need sell hairbrush. apart that, don't need it, target people buy it. , main factor price. when company talking price, there no place security in hairbrushes. main fokus on production, marketing, ... others example, when lenovo producing notebook.

how secure "smart home"?

you need know: have many protocols, have many gateways , many products insecure. furthermore want access internet. of course there products on market, not need internet connection. recommend those, aware think of next step: how update? want, update it?

there many unsecure things in internet. few month ago wrote script 100 standard credentials , had 1 million iot in short time.

of course can put box in front , watch traffic. if have time, but cannot conclusion consumers. brings me next point.

for better security in smart home need things using. there products telnet access, standard passwords , on, hard say, how make right.

just don't message internet smart home?

sounds good, not possible. pretty simple: company want data sell or inform other companies. means need creat account new iot , without account , connection iot not working. "i don't care should data". heard, cases, missused increasing.

that can [future szenario]: example hospital knew drugs need. can bad: insurance ask you: why didn't take drugs on 7a.m.? pay nothing.

are consumer responsible anything?

back security. we? certifications, validations, encryption ... don't exist. ddosing, bad things of iot. consumer isn't interssted in security. buying hairbrush , checking app if clear. "my smarttv ddosing bank in mexico?" -> "i don't care, recorded football game last night."

conclusion:

you need regulations that, need state talk that. if have high regulations, hairbrush cost 40$ , not 15$. iot coming in big steps. e-sim, smart home -> smart cities, etc.

---

sorry hairbrush focused on. :d