Monday, July 24, 2023

A positive consumer security move by the US Government

This seems like a decent step forward:

The goal of the new US Cyber Trust Mark, coming voluntarily to Internet of Things (IoT) devices by the end of 2024, is to keep people from having to do deep research before buying a thermostat, sprinkler controller, or baby monitor.

If you see a shield with a microchip in it that's a certain color, you'll know something by comparing it to other shields. What exactly that shield will mean is not yet decided. The related National Institute of Standards and Technology report suggests it will involve encrypted transmission and storage, software updates, and how much control a buyer has over passwords and data retention. But the only thing really new since the initiative's October 2022 announcement is the look of the label, a slightly more firm timeline, and more input and discussion meetings to follow.

We'll have to see how this plays out, but better consumer information on security is A Good Thing.

 

7 comments:

Matthew W said...

Yeah, going to get out early and say "no thanks" to just about anything that they do that is supposed to be "good" for me.

Landroll said...

Ah yes! Excellent. Just had a valuable lesson on the Internet of Things. Decided to quit HP Instant Ink program. Printer is now locked up with ink cartridge carrier in home position. Can not get old ink cartridge out to install new HP cartridge. PO'd much? why yes. Glad you asked.

Chuck Pergiel said...

Typical. Industry charges on with their haphazard methods of building new widgets, blindly oblivious to the side-effects their new whiz bang gizmos create. This goes on until enough people get fed up and start making a fuss. Eventually the government gets involved and we get a new bureaucracy and a big fricking pile of new regulations. Well, what you gonna do? That's modern life in the USA.

triffman1999 said...

just like NIST's support of the new ECC et al crypto eh? Trustworthy. This is missing the fundamentals.

KurtP said...

And it'll have a separate part of the chip that withholds any and all information that ever passed through, with a special back door for any of Americas Stasi you use against you whenever they feel like it.

danielbarger said...

So...a FAUX "seal of approval" will be added to con the skeptical into accepting more electronic spies into their homes. Sorry. Not buying the bullshit. The Fed Gov simply CANNOT HELP ITSELF. They will ALWAYS spy on anyone and everyone. This "promise" isn't worth the ink it's written in.

Mind your own business said...

Seriously? Given what the government is doing in the home appliance regime, I can't see how anyone would trust any information they put out with regard to guiding consumers to the device with the "right" security features. Probably just means they already know how to hack those devices.

How about a list of devices WITHOUT any connectivity that requires "security?"