Internet of Things Problems - Computerphile

A hacked car that could kill you should be more worrying than a thousand lightbulbs taking Facebook offline. University of Cambridge's Professor Ross Anderson explains why safety should be higher on the agenda than privacy.

This video was filmed and edited by Sean Riley.

[jam]

Prof Anderson is one of the clearest speakers on Computerphile and this episode describes very well the future problems being put in place by remote software control. Forget the term 'regular update'; it should be conceptually thought of as 'remote control', because that is exactly what it is. We are no longer 'buying' products, we are 'hiring' them with a lease term completely dictated by the manufacturer or by whoever might take control in the future.

[CalebJohnsonlivingca]

The 'S' in I.O.T. stands for Security.

[alexanderreynolds]

These are hard problems! I think the easiest way to get this point across is: who is going to update problems in <autonomous vehicle/medical device> if <manufacturer> goes out of business?

[KrossX]

"The S in IoT stands for Security, and the P for Privacy."

[RobertMilesAI]

Little known fact that "Internet of Things" is actually the short form of the full technical phrase "Internet of Things That Shouldn't Be On The Internet"

[nathangek]

I love how calmly and clearly he explains stuff

[devillair]

If the goverment or any 3 letter agency has a backdoor, it is only a matter of time until those with malicious intend gain knowledge of the same backdoor.

[Ribby]

One of my programmer teachers in college used to work on medical equipment. He said often times upwards of 75 to 80% of the code on these devices were security and error checking code. Very strictly regulated.

[UnfortunateFreakNo]

As my computer security professors says, "The S in IOT stands for security."

[cybercat]

We need some bookshelf book/tech review videos. Just looking at the titles in the background of this video has been as interesting as the video itself almost.

[themagpieable]

Good, sensible, straightforward talk about a very complicated issue. More of this please.

[Zothaqqua]

I am *so* waiting for the "don't sue me" button to stop working *in general*, because that'll help to stop the software industry pumping out unreliable products and washing their hands. The implications for software engineering are profound.

[SEVE_P]

Professor Ross Anderson should have his own channel, he presents really well.

[ammobake]

The technical issues are huge considering cars are just one example. You have aircraft, mass transit systems, etc.. And security vulnerabilities of these systems are not always disclosed as they are discovered - as discussed in the other recent computerphile vid. It's never possible to completely eliminate all potential exploits and bugs. Especially when we know governments will sometimes sit on these exploits for their own purposes, thereby raising the stakes.

[bastardtubeuser]

thanks Professor Anderson, we are so lucky to have the Computerphile channel thanks guys.

[mrlithium]

I want to be like this guy when I get old. He explained everything perfectly and covered all bases pretty much. And his bookshelf is awesome! I zoomed in to look :)

[twank]

Really interesting look on the I.O.T. I was always looking at the privacy side of the IOT and the amount of traffic you could generate for an attack using captured end devices. This however brings a clear look at it from a physical security point of view. Nice video, gonna share it now with some mates ;)

[Diggnuts]

Safety and privacy are not necessarily two different or unrelated things.

[Danielhuren]

im gonna make this even simpler since so many people seem to be missing the point lets say your car has an electronic clutch or the gas petal isent purely mechanical and instead handles by a computer which if you dident know is probly a signifigant portion of cars today now lets say that car is hooked up to the internet through some form or your phone now lets say someone descovers an exploit in the cars cpu that causes your cars cpu to think your pressing down on the gas petal and they figure out a way to put that exploit via a worm on your phone so that when you connect your phone to your car it causes your car to instantly think your putting the foot on the gas and the company knew about the issue but thought it was not economically viable to fix the issue till they got sued over it or it wasent discovered for 10 years and now 10 years of cars are all ticking time bombs and people are not updating the software cause there ether lazy or dont understand the risks

[Dominik]

"Don't sue me button". I think I should use that phrase from now on, when I code.