From today, manufacturers will have to follow tough new rules if they want to sell “smart” gadgets in the UK in an effort to provide more security around devices such as televisions, baby monitors, and speakers that are connected to the internet. As our homes have gotten filled with more web-linked devices, from games consoles to fitness trackers, doorbells, and even dishwashers, some cyber-criminals use them to hack into home networks and steal private data.
Until now, manufacturers were expected to adhere to security guidelines, but the new law makes three new requirements: firstly, password procedures must be more secure, this includes not leaving any password set by the producer left blank, making it harder to guess, and using more complex options. Secondly, there should be clarity about how to report bugs or any arising security problems, and thirdly, the manufacturers and retailers must tell customers how long they will receive support, including software updates, for the device that they are purchasing.
The government describes the laws as a world-first and one that will protect UK consumers and businesses and boost the country’s resilience against cybercrime. The Department for Science, Innovation and Technology (DSIT) said that more than 50 percent of UK households now have a smart TV and a voice assistant such as Alexa. It added that homes have on average nine connected devices, which can include toys linked to the web, or home appliances, like radiators, ovens, and fridges, that can be remotely controlled. However, since their adoption, there has also been a proliferation of reports of hackers compromising such devices to misuse them.
Sarah Lyons, from the National Cyber Security Centre, said that it is the responsibility of firms making these products to act. “Businesses have a major role to play in protecting the public by ensuring the smart products they manufacture, import or distribute provide ongoing protection against cyber-attacks,” she said. The new law “has teeth,” according to Ken Munro, a security researcher for Pen Test Partners. “I think some device manufacturers at the bottom of the market might pay lip-service and do the bare minimum to make their products secure,” he said
Read the full article from The BBC here: Read More