Most Smart Device Makers Fail To Reveal Software Support Periods, FTC Finds (ftc.gov) 32
Nearly 89% of smart device manufacturers fail to disclose how long they will provide software updates for their products, a Federal Trade Commission staff study found this week. The review of 184 connected devices, including hearing aids, security cameras and door locks, revealed that 161 products lacked clear information about software support duration on their websites.
Basic internet searches failed to uncover this information for two-thirds of the devices. "Consumers stand to lose a lot of money if their smart products stop delivering the features they want," said Samuel Levine, Director of the FTC's Bureau of Consumer Protection. The agency warned that manufacturers' failure to provide software update information for warranted products costing over $15 may violate the Magnuson Moss Warranty Act. The FTC also cautioned that companies could violate the FTC Act if they misrepresent product usability periods. The study excluded laptops, personal computers, tablets and automobiles from its review.
Basic internet searches failed to uncover this information for two-thirds of the devices. "Consumers stand to lose a lot of money if their smart products stop delivering the features they want," said Samuel Levine, Director of the FTC's Bureau of Consumer Protection. The agency warned that manufacturers' failure to provide software update information for warranted products costing over $15 may violate the Magnuson Moss Warranty Act. The FTC also cautioned that companies could violate the FTC Act if they misrepresent product usability periods. The study excluded laptops, personal computers, tablets and automobiles from its review.
As long as... (Score:5, Interesting)
Right now, the only real protection for IoT device owners against the often terrible consequences of malicious actions of miscreants is to hope that the manufacturer (who has your money and doesn't care) will provide security and functional updates. Many manufacturers simply don't want to spend the money to hire a competent team to deliver good security. So they don't.
And so the only justifiable recommendation from real cybersecurity professionals is to say "NO" to IoT.
Even if you could find reasons to apply existing laws and requirements to IoT, it's unlikely to work as the IoT manufacturers usually operate in nations where such laws are simply ignored.
Re: (Score:2)
Funny overconsumption of tech (Score:2)
I expect that there will be a 'back to basics' brand of most consumer devices at some near term point where all of the cloud connected, smart features, computer controlled do-dads, etc. will be removed and the most basic product produced with decent quality components.
Hopefully, it goes upward until there's a basic truck with the minimum to be street legal in the US and California (Yes, in the US too). Only adding things like disc brakes, am/fm/hd radio, A/C, etc. There's a $10,000 truck in Mexico, but f
Should be illegal (Score:5, Insightful)
It should be illegal to force devices to use external cloud services. To offer it as an option is fine and good, but a device should ALWAYS be able to have local network command and control without having to ask permission from someone else's server to control something that exists behind your home or business firewall. You have everything from robot vacuums to garage door openers to enphase solar controllers now that are trying to force you to use ask permission from their services outside your homes security to control that device inside. This is really not one bit different than buying a house and a real estate agent refusing to give you a key to your own house and saying they will open the door for you every time you come and go.
Re: (Score:3)
You have everything from robot vacuums to garage door openers to enphase solar controllers now that are trying to force you to use ask permission from their services outside your homes security to control that device inside.
We're already seeing automobiles that are subject to similar restrictions. How long will it be before "my car won't work because the manufacturer got hacked" is a common complaint?
This is really not one bit different than buying a house and a real estate agent refusing to give you a key to your own house and saying they will open the door for you every time you come and go.
It's worse than that. You at least have a chance to talk to and reason with the agent. Just try getting in touch with the provider of the service your new appliance depends on. Hell, just try figuring out who the provider of that service is.
Re: Should be illegal (Score:3, Insightful)
I'm okay with devices being cloud based, I'm not OK with this not being disclosed, or with manufacturers not being required to specify a support period that if not fulfilled is grounds for warranty return. There ought to be a law protecting us from that kind of bait and switch.
We're not getting those protections any time soon, though.
Re: (Score:2)
Now, now. Think of the poor billionaire business owner who needs to be able to squeeze you for ongoing payments even though you only bought one thing, once.
How are they ever to afford that third mega yacht?
Re: (Score:3)
As stated, it is illegal.
But businesses have gotten used be illegal, as long as the profits outweigh the fines. And so far, there are no fines at all.
Re: Should be illegal (Score:2)
I had a very good laugh when one of those types was complaining on TV that his super duper cloud connected charger was no longer working because the company went bankrupt and shut down the cloud s
Re: (Score:2)
They of course have to mention the extra cost of the charging equipment they had to install at home. Oh and of course, they had to beef up the electricity connection of their home.
You're retarded, right? Most homes already have a 220 circuit for the clothes dryer. And you don't have to "beef up" any connection from your utility.
Re: (Score:2)
You realize that simply having 220 is not the hindrance right? All meters and electrical panels that feed homes have a maximum amperage rating AND a max number of circuits. That amperage rating is for all circuits in the panel as well as the fact that the loads have to somewhat be leveled between the two 110 legs that make up the 220. Many homes are near max on the circuit count right from the beginning and many older homes are near the maximum amperage rating for their panel.
Re: (Score:2)
Re: (Score:2)
I have an older home near maxed out. If I want to put in a charger, I'll hang it off of the dryer circuit with a selector so both dnh't try to run at once. But I won't need a new panel or drop.
Of course, if I get an EV, I won't get a cloud dependent charger.
Re: Should be illegal (Score:2)
220V that was the eighties here. Since they unified the voltages over our neighboring countries, it is 240V. Some homes have 380V, at least in the distributer box.
Cheapest installation here is 240V x 40A. That is 9.6 kW. Figure out the rest yourself.
Re: (Score:2)
Re: Should be illegal (Score:2)
This may only help consumers so much .... (Score:5, Insightful)
I think it's probably good to put pressure on companies to try to provide this information. But realistically? A lot of these "smart devices" are manufactured by companies who end support for them because their entire company was dissolved/bought out by another one or they go under in a bankruptcy.
Re:This may only help consumers so much .... (Score:4, Interesting)
Re: (Score:2)
This is why we need consumer protection laws which state that if the device becomes unusable because of abandonment in less than a certain period of time, which should probably be determined based on a combination of economic and ecological effects, the reseller is responsible for refunding the customer. Then they will be more hesitant to shovel shit at us.
Re: (Score:2)
Even the *huge* players in the industry, like Apple and Sony and Google and Samsung, make some products that fail and get swept under the rug; arguably, they could be required to subsidize ongoing support for them, from their more successful products; but that doesn't work for the small companies that make (collectively, between them) the majority of devices.
I don't think small companies are incapable of producing quality/supported goods, so I don't think that should be a legitimate excuse for not doing so. That is a disservice to all the small companies out there actually doing a good job. Now maybe they don't sell on Aliexpress, but that should tell you something.
Re: (Score:2)
Yes, their firmware will basically be dangerous shit on release and probably never get any better; and their 'app' will be tied to some rapidly aging version of android and be full of horrifying security mistakes; but they won't even have bothered with the PKI to
Re: (Score:2)
That shouldn't be a "get out of jail free" card. I'm less certain about how this should be managed (except by requiring that local control be feasible and the interface be public information), but bankruptcy shouldn't dissolve that obligation. Some of these things are medical devices. Turning off a vital medical device should be considered premeditated murder. Turning off a less important one should be considered battery. And turning off one that's just useful should be considered theft.
Re: (Score:2)
They don't have to go bankrupt or even start taking losses. They merely have to make less profit than their target. When you know you can do something new with a potentially higher margin, the old products need to go bye-bye.
I wish more people understood that even profitable products can be discontinued and even disabled.
Re: (Score:1)
"Smart" devices? (Score:4, Insightful)
lacked clear information (Score:4, Insightful)
> 161 products lacked clear information about software support duration on their websites
It is because they have no plan. The only plan is to sell as much junk as possible right now, and then sell them another one later. Support? Psssh.
Never buy any device... (Score:2)
...that requires a cloud connection
The cloud is a trap
Run away!
Re:Never buy any device... (Score:4, Insightful)
Re: (Score:1)
If what you want it to do is turn bread into toast, but the salesman is pushing a device whose main purpose is to consult online reviews of different brands of bread and recommend which ones to buy for toast-making purposes, and, incidentally, it can also turn the bread into toast as a bonus feature, this might make sense to the salesman, especially if he's on commission; but the online reviews aren't relevant to *your* purpose for
Re: (Score:2)
UNLESS you can set up an independent cloud server and run it from that.
If the support period isn't stated (Score:2)
It's zero.
but I just make e-waste landfill for you to buy (Score:2)