Hacker News Reader

Comment by Heffay626 | Hacker News Reader

I bet we're going to start seeing a whole genre of IoT security specialists on the rise

Interestingly, there are already 'IoT security firms' that specialize solely on distributed device and data management

Do iot company want to pay for that? A better question for someone in the know, what problems are they having that they would pay to have solved? Updates? Security? Plain old execution and delivery time of a new iot device?

That can be more difficult than one can anticipate. This isn't like a desktop or web app where there's a second layer of security, like firewalls/AV and sandboxes respectively. IoT tends to be neglected in terms of updates, and with the new version of the device coming out every couple months, I would imagine there would be devices that won't receive security updates not long after they're bought.

In case of IoT they're in charge of the whole device, and the security of those things aren't looked into a lot. Sounds stupid, but it does need it's own specialists. Otherwise you're going to end up with a lot more insecure devices.

Just an example: https://www.reddit.com/r/controllablewebcams/

I guess what I am getting at is: do companies not want to pay for security of these devices because they only sell for a few months before the next model comes out? If that is the case forming a security company doesn't seem like a very profitable venture.

Has someone made the equivalent of ruby on rails for these devices? It doesn't work for everything, but for most it works well enough and gets it the job done in a fraction of the time that a complete custom job would require?

This could be a start: https://hexdocs.pm/nerves/targets.html

I happen to like Elixir the language a lot, but it does have legitimate advantages.

Reply on news.ycombinator.com