The Internet of Things Will Be the World's Biggest Robot
schneier.com
schneier.com
The only feature I want (or really need) in an "appliance" , of any sort, is easy access to diagnostics if it fails...
I'd prefer appliances with something like OBD (II, III), installed in automobiles...
It's not a substitute for picking up the phone, but it allows me to have more meaningful conversations when I do so.
When are we going to start demanding devices that are untethered from a mothership and run from home computers?
When "we" understand the value of Free and Open Source Software.
Some do, some don't, some don't yet, some never will.
There's the potential for DIY open source misuse, with negative consequences:
Here, a poster's bad experience with a properly-installed OEM product prompts a "warning", directed at the open-source DIY community...
https://community.particle.io/t/spark-powered-thermostats-bu...
The poster referenced this DIY...
http://blog.particle.io/2014/01/17/open-source-thermostat/?r...
I'm an open source fan, but realize it's not a panacea, in and of itself...great care and a full understanding of potential negative consequences is only prudent...
Personally, I'm content with nursing along older appliances that were made well...but, I'm a bit of a handyman, and hate to give up on any machine until I'm convinced it's totally worn out, so IoT is unlikely to invade my home on a large scale any time soon...
There's just no way that a home furnace can generate enough heat to do that. Sounds like scaremongering to me.
There are plenty of opportunities to fiddle around with sensors and other "smart home" gadgetry. But there are some areas where it makes sense to be very cautious.
(never)
Otherwise, the whole experience of the 20th century demonstrate that it's possible to build stand alone appliances that provide useful services to the paying customer while meeting the manufacturer's financial goals.
For instance, Google paid 10x revenue for NEST [0]. Profit is obviously much lower which means that's a very long term investment for the acquirer. But maybe not if the NEST product integrates with other Google products bringing more people into the Google ecosystem, incentivizing people to stay in the Google ecosystem, and providing data for Google to both improve it's ecosystem even for non Nest Users and to monetize with third parties.
Now if NEST stayed on it's own, it could integrate with other ecosystems or create it's own or just exist as a standalone product but NEST wouldn't have too much data to sell to increase profits, and wouldn't be able to draw as many conclusions as a company which could integrate their data with other data sources. It could create it's own ecosystem but comfortably living within another established ecosystem will probably bring more users to NEST as ecosystem creation is obviously very much outside the purview of a smart Thermostat.
So it sort of makes sense that these products "phone home" even if it's not exactly what we as computer software engineers and privacy advocates might look for in a product.
But literally everyone that could use a NEST product already uses google.
We're working on that.
Seriously though, what are you working on? Would you mind sharing?
That's not true. If you look at what most people consider necessary for utopia (food, shelter, medicine, architecture for fun activities) and do a first principles analysis of the labor inputs required, it comes in far lower than the comfortable output of the people being supported. Even if you use 100% manual labor and only use computers for information tech.
The only reason we seem so overworked is because ~70% of our labor goes into moat maintenance for our employer, profits for the capital class, and production of harmful products.
People used to sustain themselves quite comfortably all over the world. And they didn't even have the internet or electric motors.
I am hopeful that robots and the IoT could be that permanent slave underclass for us. But, for it to work, we must be the masters of our robot slaves and not some megacorporation. If we have robots not fully under our control/leased to us, or that are constantly watching and reporting on us, then we are the indentured servants/slaves rather than the robots.
The phoning home and rental model for IoT has intractable ethical and freedom problems IMHO.
Also note that truly smart IoT devices need to operate on a data feed from devices in the home, devices outside of the home, and third party services (utility rates fluctuate over time for instance). They need to take raw data from these sources, 'debounce' or filter them into actionable events and then go ahead and move an actuator or make an adjustment to something. This is really hard to do all within a local network unless you have an onsite server farm and even then, you need for this onsite server farm to be able to fetch the code to run each device's task.
On the surface, an intranet of things sounds great, but every company is going to be making every device connect to the internet - there will not just be one that makes everything and everybody is not going to converge on a distributed cluster that runs in the home. The only practical way for large numbers of devices to integrate, in particular, integrate with deeper intelligence, is through the cloud.
The IDIoT means appliance and car makers get to repeat this same slow learning curve, but on both client and server. In a decade or so, buyers will force them care about fixing their buggy, unsupported, insecure software (both client- and server-side this time). In another decade, they will be at around Windows 10 levels of support and security.
Oh, yeah, and a hacked car or HVAC system can kill you much deader than a hacked PC.
I can't say I'm optimistic about it.
The metals and plastics used in their manufacture is pretty minimal compared to cars or home appliances.
Their power consumption is low compared to heating or lighting (a macbook consumes power equivalent to about two lightbulbs, and most devices use less).
Earth metals represent probably the biggest environmental impact of consumer electronics. They're not actually rare, just expensive to mine, so there isn't an issue of sustainability. (As in, the earth metals aren't going to run out any time soon. There's some nasty environmental damage in the vicinity of the mines, but that's limited to a particular area).
I'm trying to fathom the reasoning behind this comment. Is it that because electronics are really useful and beneficial, they must have a proportional cost?
It seems to me that even at our current level of mass consumerism our lifestyles wouldn't be sustainable for more than a few decades. I'll give it to you that it's more a hunch than a an opinion backed by facts.
You're talking about cars or home appliances but generally we have a few of them. Each one of us will probably have thousands of IOT "things".
Billions of humans having thousands of things that are discarded and replaced by new ones when they fail or are not modern enough is not, in my opinion, a recipe for sustainability.
For the record I counted 17 sensors just for my house alarm and I didn't go overboard, if I hadn't be budget constrained I would have put much more than that.
> earth metals aren't going to run out any time soon
The fact that they will ever run out is generally not sustainable. You really think our use of them is going to DECREASE? Unlikely, unless people take conservation of materials more seriously than the convenience of throwing away rare metals.
And then when I see hypothetical discussions about smart appliances ("a fridge that can automatically order food when you're low!", "a dishwasher that can tweet when the dishes are done"), the thing that I really want are open-source hackable everyday appliances, not feature-rich ones.
E.g., I want to be able to confidently replace a busted controller in my dishwasher without necessarily having to shell out $100 to maytag for one that was only produced for a single year.
Sadly, yes, this is a wish born out of experience.
Not that I see a need for something like this, but existence of such device could deter a bit companies from shoving such things to every appliance.
It is also a bit like uncanny valley. Because if we will at some point build general purpose robots they will have microphones and cameras. On path to this there is a point at which you must trust having microphone and cameras from less useful devices pointed at you. If not how can we have off-the-shelf general purpose robots at our disposal? It also creeps me out... How can we achieve this? Some can say we shouldn't.
Part of the problem with IoT, as others have pointed out, is lack of a compelling use case for most of the products. I don't think this is a fatal flaw unless all of the also-rans and wannabes and opportunists suck all the air out of the market before someone with a compelling application (and decent reliability!) can gain traction in a non-privacy-invasive way.
But the implications (especially for security) are huge. Not just because of new bugs or design flaws but also because the momentum (and media frenzy) it creates puts these old (buggy) technologies into the limelight of security researchers. E.g. stuff that was lurking in old protocols suddenly becomes relevant (want to stop a train? https://media.ccc.de/v/32c3-7490-the_great_train_cyber_robbe... ).
There are countless applications not just for BAC but also for logistics, power-grids, industrial automation, e-health, insurance, ... where the IoT is already actively pumping out use-cases, product ideas and actual products.
Try and turn it around.
Instead of calling it Internet of things which indicate it it's own thing, instead think of it as things connected to the internet.
Now you realize that this is already happening and it's a combination of our phones and our fridges, watering systems and load balancers all able to communicate.
So the user stories are already there we just don't think about them as that because of this claim of a separate internet. It's not. It's the same.
In a way, it's the problem of the current Internet, but exported to the hardware world. Just like NATs killed publishing, they also kill sanity in the design of connected things. I wish we could deploy IPv6 faster. Yes, I want my fridge to have its own IP - so that I won't have to proxy the communication through some random fly-by-night web startup.
I don't know if it currently works like this in Japan, but the idea is that with a reliable enough warning system, vital infrastructure could automatically respond to the few seconds warning an earthquake alert might provide.
Hearing that, an Internet of Things suddenly seemed to me a little more serious and useful. Of course that doesn't excuse poor security or sloppy design. It only makes it that much more important.
The high speed rail system has its own detectors, both along the rail lines and at the coast.
He loves it.
PS: He's also got the IoT lights :P
I'm also a fan of Gaia Theory, but it doesn't mean that the Earthly ecosystem is an organism in the same sense as the individual flora and fauna.
And considering two further things makes for even more interesting conversation: 1) there's no super-clear distinction between life and death..there's a massive difference in function and activity along the development and decay cycles that are possible for animals. 2) Animals without limbs or with added tools(extensions of our limbs) are quite workable.
This is only meant to add to your conversation; I'm not really detracting because I agree it's not in the same sense but rather a different class of a being.
Oh, and one more thing: Animals' collections of physical cells are also home to a large number of cells from a WIDE VARIETY of different "species" of bacteria and viruses..so many of which can basically take a person either up or down in health by a large factor. So this is analogous to the Earth which is home to a great diversity of humans, animals, plants, and so on. Beautiful really. Except for that which isn't.
Conceptually speaking, there is only one machine. Two "independent" machines, once coupled, now form one machine. And in the real world all the machines are already coupled.
Also, I feel like people should watch "Maximum Overdrive" and "Demon Seed".
Labeling it as a robot will rather make people discount the idea. "A robot? That man's crazy. Little things interconnected do not make a godzilla-like world stomping and destroying robot! Nuts!"
To be sure, putting all your industrial scada equipment on the public net could result in consequences similar to having a Godzilla running amok.
I call it IFTTT
Modularity. Modules, taking the scale of what cpus on the phones have to what the cpus in the late 90's till now had... interoperability... it is just not there yet. Infact it stagnated.
a lot has changed in the last months alone. there are several standards ready for IoT (ETSI M2M) [0], some are still being drafted (W3C Web of Things "WoT")[1].
Where I still see lot of room for improvement in standards is for totally radically new use-cases. Standardization guys are usually industry representatives from bigger companies who think about inter-op (and to a lesser extent use-cases). But many use-cases in IoT transcend or even threaten the business models of what the bigger players have built their power/dominance on (they prefer sustainability over disruption -- god I hate those buzzwords).
Therefore smaller innovators (individuals or garage start-ups) who have radical ideas such as building a decentralized business model (maybe using cryptocurrencies or blockchaining and not driven by harvesting user-data or advocate strong privacy) usually don't have the resources or time to put one of their staff into the slow-moving standardization bodies to make/defend their case.
Though the W3 is extremely open compared to others and even there are official members who vote behind closed doors, ... if enough contributors bring ideas in the open discussion groups, then these points too might get standardized.
The biggest problem though is standardizing security.
It is no coincidence that most IETF drafts especially older ones and official RFC's have under "Security" a note that says "to be done". Thinking ahead what might become a design problem later is hard and depends on how the standard later gets understood by the industry. But more important there aren't enough people who understand security in standards groups. That is not just a standards problem though and more of a disease of our industry. Just look at most web developers and have them explain how XSS/SQL-injection works ... or ask an Embedded engineer who is used to building non-connected appliances to think about remote exploitable buffer overflows after they connects the thing via a CoAP proxy to the WWW ... Yes you'd assume they know that in detail but reality is usually most have no idea - not because it's hard but because we are not incentivized by making it extra secure (security often is a useless feature unfortunately only indirectly affecting your financial bottom line (when sh1t hits the proverbial fan)).
[0] http://www.etsi.org/technologies-clusters/technologies/m2m
[1] https://github.com/w3c/web-of-things-framework
EDIT: typos (possibly even grammar mistakes gasp)
Skynet