How to Fix the Internet · Electronic Frontier Foundation (EFF)

Securing the Internet of Things

·28 min·2 clips

A coffee mug that demands firmware updates every few weeks raises questions about what those updates actually fix.

This episode of "How to Fix the Internet" features hosts Cindy Cohn and Danny O'Brien from the Electronic Frontier Foundation in conversation with security expert Windell "Windows" Snyder. They explore the security challenges and potential solutions for the vast ecosystem of internet-connected devices, known as the Internet of Things. Snyder brings a long-term perspective on device security and resilience. The discussion opens with Snyder's personal anecdote about a Wi-Fi-enabled coffee mug that required multiple opaque firmware updates. She notes that while updates are a positive sign, their purpose is often unclear to users. The hosts list common IoT devices like thermostats, doorbells, and refrigerators to illustrate the scale of the issue. Snyder points out that many manufacturers still treat security as an afterthought rather than a core design principle. She argues that supporting a device's full lifespan requires a commitment to ongoing security updates. A central problem identified is the lack of transparency for consumers about a device's security posture. The conversation critiques the current market where insecure devices are cheaper and faster to produce. Snyder suggests that the industry needs to recognize security updates as a critical path for product resilience. She observes that some forward-thinking companies are beginning to design for long-term security support. The episode highlights the disconnect between a product's physical longevity and its often-shorter digital security lifespan. An interesting tension arises between the desire for rapid innovation and the need for secure, maintainable products. Snyder implies that consumer expectations for device longevity, even for simple items like a cup, are changing. The opaque nature of firmware updates is presented as a microcosm of larger transparency issues in IoT. The tone is conversational and solution-oriented, blending personal anecdotes with expert analysis. The style is educational, aiming to demystify a complex technical landscape for a general audience. Listeners interested in cybersecurity, consumer rights, and the hidden complexities of everyday technology would find this episode valuable. Those seeking highly technical deep dives or debates on specific vulnerabilities might find the discussion too introductory.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from How to Fix the Internet