The governor of California just signed into law the first law in American history that ensures that IoT devices/gadgets have “reasonable” security features that “protect the device and any information contained therein from unauthorized access, destruction, use, modification, or disclosure.” I think it’s kind of sad that the law has to force vendors to build their products more securely. But if it’s going to take something like this for it to happen then so be it! Wonder how the rest of the country is going to follow and what fines and law suites are going to come about if a vendor does not comply. Will they not be able to sell their product in Cali? What if they bought it on Amazon across state lines?
https://www.cnet.com/news/california-governor-signs-countrys-first-iot-security-law/
I believe it is badly in need of passing a nation or industry-wide security standard for the Internet of Things. The IoT a new class of smart devices that Internet-connected to provide automation, remote control, and AI processing to traditional appliances in home or office environments. IoT devices are not designed with security concerns. This has already resulted in several IoT devices security breaches. For example, in September 2018, a cybersecurity research team discovered a zero-day vulnerability in NUUO NVRMini2 video software, which was produced by NUUO who was one of the global security surveillance system solution providers. The vulnerability would allow hackers to remotely access and control than more 100 brands and 2500 surveillance camera models.
This is exciting to see. I am happy to see the first steps towards legislature imposing security measures. This is a small first step. I would like to hear our president impose such standards.
I wonder how much of this “security” the mayor is calling for would be appreciated when the state is looking for evidence?
If this mayor only wishes to change a few words he could have IoT devices locked down so securely that even our government would have issues breaking into them.
Hi Sev
It is a good news for us to know. It is important to limit the devices to access the data. It is a significant step to have this law for information security. In the future, the law should be signed by all states of the country. There should be a standard for the industry to have good performance of the devices. The law is a good for setting the standard for the industry.
This is a big move in California for information security, and also will impact whole country. Securing information is important nowadays, vendors in industry should be required to do their parts toward achieving information security. It shows that information security awareness is developing in California and hope it will spread all places.