FBI tells Jo(e) Sixpack to become an expert in IoT security

It's also accidentally written the syllabus for a 'Home IoT Network Engineer' course

By Richard Chirgwin

Posted in Internet of Things, 14th December 2017 01:55 GMT

Internet of Things users need to become sysadmins, America's Federal Bureau of Investigation says.

That's a summary of the Feds' blog post, published this week, in which the agency's Beth Anne Steele wrote that Things are best deployed on their own network, with an off-switch.

Steele's post offered a checklist explaining how consumers can best secure their stuff, including a suggestion to: “Isolate 'IoT' devices on their own protected networks” – which means you'll want a firewall between your broadband modem and the switch that connects the devices.

The checklist might reach beyond the capabilities of the average IoT buyer, who just wants to swipe the phone app to control their lights (because the wall is so far away), but on its own, that's a point worth making. So here's the full list, with El Reg commentary.

The depressing thing is that every single item on this list is necessary and true, and nearly all of it is beyond the home user. It would, however, make a sound syllabus for some kind of certification, if anybody would study it, which they wouldn't.

The FBI promises its blog next week will be on Internet-connected toys. We can hardly wait. ®

Sign up to our NewsletterGet IT in your inbox daily

57 Comments

More from The Register

'Amnesia' IoT botnet feasts on year-old unpatched vulnerability

New variant of 'Tsunami' is a disaster waiting to happen

Ignore that FBI. We're the real FBI, says the FBI that's totally the FBI

Don't open that malware mail from the Feds that's not from the Feds, Feds warn

What do you press when flaws in Bluetooth panic buttons are exposed?

Researcher able to DoS and track personal protection kit

Behold, ye unworthy, the brave new NB-IoT logo

Logowatch And give thanks unto the GSMA

Amazon, Google inject Bluetooth vuln vaccines into Echo, Home AI pals

Updated The BlueBorne ultimatum

Another IoT botnet has been found feasting on vulnerable IP cameras

Children, please welcome Persirai to the class

Bluetooth bugs bedevil billions of devices

Baffling spec sinks security for short-range comms protocol

Google reveals rapid Bluetooth gadget connection tech

'Fast Pair' works on Androids and some audio devices, Google wants it in your car too

IoT gateways get a benchmark from the TPC

You're going to run a pair of servers to tend 'things' and pre-analyse their data, OK?

Vodafone's IoT boss packs bag, Sprints off to America

Ivo Rook heads to US telco, picks up Softbank advisory role