> And "require longer support" doesn't fix it because many of the vendors will go out of business.
Which is not a real issue in practice. It's like arguing that warranty doesn't matter because the vendor might go out of business.
Which is not a real issue in practice. It's like arguing that warranty doesn't matter because the vendor might go out of business.
Then if you're a five person shop making routers and you publish the firmware source under a license that allows anyone to make and distribute modifications you're all set. And if you're Apple or Microsoft and you want to make a router without publishing the source code, you post the enormous bond which you have no trouble doing because you're an enormous company and you're all set.
Are you serious? The number of IoT companies that make a product for a couple years and then go bust is enormous.
> It's like arguing that warranty doesn't matter because the vendor might go out of business.
How are you going to use a warranty from a company that no longer exists to get a security update for a product a million consumers still have?
> How are you going to use a warranty from a company that no longer exists to get a security update for a product a million consumers still have?
I was not talking about using warranty for this.
But then many consumers value cost or other things over security, which is why you need all the devices to be able to be updated even after the vendor is gone.
> I was not talking about using warranty for this.
Then why are you talking about a warranty to begin with?
This is only possible if the firmware is replaceable. Along with a practical update mechanism it also requires the possibility to create an update package. That can be achieved by using open source components, but there might be other mechanisms. For example making provisions in case of bankruptcy.
> Then why are you talking about a warranty to begin with?
I was making a comparison with warranty law, which exists to ensure a certain minimum bar for quality and longevity of products. Which is usually desired, therefore legal provisions for updateability of hardware should also be required. Note that a firmware update might well become required within the warranty period.
This is by no means a new concern. IP cams, home routers, robot vacuums, and internet-enabled fridges exist for a long time already. The warranty period was never intended to cover "smart" devices. Maybe forcing an extension of the warranty period for such devices is enough to take care of the problem.