I think that you'll get a lot of feedback.
I would suggest to my peers, that the links you gave are "official channels," and are probably what you really want, as opposed to a rather rambling thread of comments.
But for me, you just get a rambling comment.
I made my career on devices. In particular digital scanners and cameras.
I worked for a company that was about as tinfoil as you could get, and they supported devices long past their sell-by date.
But I also know that my company was an outlier. They sold premium equipment, at a premium price. They were an "old-fashioned" Japanese corporation, and had a basic mindset of keeping the customer's workflow in the center of the screen.
I think IoT security is a huge issue, and I think that the solution could be that there are standard, open-source, open-license, free-to-use packages; maybe written in languages like C, that could be offered to the industry. These could enforce low-level compliance with security standards.
Oh, and keep the TLAs out of it. They would really like to put a bit of "extra spice" in something like that.
That said, I know that it will never happen. There's a gazillion issues.
I would suggest to my peers, that the links you gave are "official channels," and are probably what you really want, as opposed to a rather rambling thread of comments.
But for me, you just get a rambling comment.
I made my career on devices. In particular digital scanners and cameras.
I worked for a company that was about as tinfoil as you could get, and they supported devices long past their sell-by date.
But I also know that my company was an outlier. They sold premium equipment, at a premium price. They were an "old-fashioned" Japanese corporation, and had a basic mindset of keeping the customer's workflow in the center of the screen.
I think IoT security is a huge issue, and I think that the solution could be that there are standard, open-source, open-license, free-to-use packages; maybe written in languages like C, that could be offered to the industry. These could enforce low-level compliance with security standards.
Oh, and keep the TLAs out of it. They would really like to put a bit of "extra spice" in something like that.
That said, I know that it will never happen. There's a gazillion issues.