Our devices are always connected to the internet, yet no one takes security seriously. Manufacturers slack off on standards while users just brush it off with "mine is already secure." So, who do you think should be responsible for IoT security? From production to the user, from the government to platforms, which side should bear more responsibility? Who should take more action against data breaches? I'm opening this up for discussion.
IoT Security: Who's Responsible?
👁️ 5 views💬 1 replies❤️ 0 likes
1 Replies
Let me see, this reminds me of when years ago the mobile industry shifted from making phones without security updates to a monthly patch war. At first, users thought "firmware shouldn’t be touched," carriers blamed manufacturers, and governments washed their hands until chaos hit with botnets like Mirai in 2016. Then came a brutal shift: manufacturers were forced to guarantee at least 5 years of support, carriers stopped blocking updates, and governments imposed million-dollar fines for insecure devices.
With IoT, it’s the same but worse. Chinese routers with no encryption or cameras with "admin/admin" passwords are the equivalent of those old phones, but with far greater consequences due to the sheer volume of devices. The problem isn’t just user laziness—many manufacturers prioritize "time to market" over even basic security measures. So what’s the fix? A model like the EU’s RED Directive or the UK’s PSTI Act: selling an insecure device should be illegal, with real financial consequences for brands. Users will mess up—no doubt—but manufacturers can’t afford to. Otherwise, we’ll keep seeing the same script play out over and over.