[iot-discussion] What role does the SP play in protecting consumers re IoT?

Patrik Fältström wrote:
> Yes, I am on this list, and the link to the paper is:
>
> <https://stupid.domain.name/node/1720>

Thanks for this document. It show that end-to-end (end-to-multi-end) is 
the basis of the Internet.

> I think we need in the case of IoT much more clearly:

I like these four areas of thinking!

> A. Tools and software packages that are correct, that do the right thing, so that whoever want to do an internet connected toothbrush can do so by downloading the right software. There are very very few packages that everyone uses (OpenWRT, DNSMasq, Curl etc) and I am still waiting EU Commission and similar organisations put in serious money to have those packages, open source, do the right thing.
>
> B. An agreement from manufacturers that their gear are to do the right thing. Like a gentlemans agreement. Will not help at all, but still a good thing. Enable and make it easy for companies to be signatories of things like MANRS. ISOC?
>
> C. Make it much more clear in the various pan european legislations that an ISP do have the ability to cut off customers from which bad packets come from. Today ISPs should forward packets but also protect the network (handwaving, handwaving). I do not see ISPs be afraid of cutting customers off, and the main reason for not doing it has to do with increased support cost (why would an ISP invest money in helping a customer they already do not make money on configuring their toothbrush correctly?).
>
> D. Public sector must buy only correct internet connected toothbrushes. To see public sector buy a single thing that do not do IPv6, that do not do DHCP correctly or what not should be punished in some way. Here is where the whip should be applied. Big time! And of course to whoever delivers an internet connected x-ray with open port 22. Full refund, replace the gear, and up to 4% of the turnaround in economical fees if not remediated quickly (i.e. in months).
>
> But, as I see little to no interest in "correct Internet access" from for example the Commission, I do not understand how this (A+D) will be implemented.

So we must help all involved entities in the above areas to achieve this 
common goal: assuming that we value to opportunities van the present 
Internet.

The above aspects are quite technical (and I see security even as quite 
technical).
We also have the ethical, the non-existence of anonymity in the data 
world, etc. That is more a philosophical issues that we need to try to 
solve: as deep analytics/search machines is emerging everywhere (with 
[cloud] processing capacity).
'Luckily' this is a general issues, so not only in IOT.

All the best,


Victor
-- 
Victor Reijs
Network Development Manager and International Relations
HEAnet CLG, Ireland’s National Education and Research Network
1st Floor, 5 George’s Dock, IFSC, Dublin D01 X8N7, Ireland
+353 (0)1 6609040   victor.reijs at heanet.ie  www.heanet.ie
Registered in Ireland, No. 275301.  CRA No. 20036270 (w)