DEF CON 32 - How To Keep IoT From Becoming An IoTrash - Roberts, Wysopal, Doctorow, Wheeler, Giese
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 46:43
The video reveals a growing crisis of abandoned IoT devices due to a mismatch between hardware longevity and short software support periods, leading to environmental harm, security risks, and consumer exploitation. Panelists urge policy reforms for transparency, security, and consumer rights in IoT lifecycles.
Key Takeaways:
• Hardware in IoT devices can last decades, but software support typically lasts only years—no U.S. laws mandate minimum support periods 5:30.
• Unsupported devices are exploited in botnets like Marai and Volt Typhoon to hide attacker origins, posing serious cybersecurity threats 9:31.
• Consumers face no recourse when companies discontinue support, as seen in Spotify Car and Belkin Weimo Netcam cases 25:40.
• Manufacturers should disclose end-of-life plans and offer open-source fallbacks to allow users to maintain, repair, or securely decommission devices 30:01.
• The U.S. lacks regulations requiring support disclosures, unlike the UK and EU, which mandate transparency 42:15.
The panel calls for policy changes rooted in public health principles to protect consumers, small businesses, and the environment from the harms of abandoned IoT devices.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
wow wo blast off all right uh thank you everyone for uh joining us here uh for our talk this afternoon bricked and abandoned how to keep the iot or the internet of things from becoming an internet of trash my name is Paul Roberts and I'm going to be moderating our discussion today I'm uh the publisher and editor-in chief at the security Ledger the head of editorial content at reversing labs and I'm also the founder of a new nonprofit called surf the secure resilient Future Foundation we're going to talk a little bit more about that later but our conversation today is going to focus on the problem of abandoned wear and endof life devices the idea behind this panel really came out of work that I and others on this panel have done uh on the issue of the right to repair our stuff and uh Tara a…