Tech Time Bombs

·1 hr 9 min·5 clips

Chinese APT groups use hacked home routers in Tennessee for password-spraying attacks on critical infrastructure.

Kerry Parker introduces the episode by noting it's a pre-recorded interview with Paul Roberts due to vacation, focusing on IoT device abandonment. Roberts is introduced as a cybersecurity journalist and founder of the Secure Resilient Future Foundation, which advocates for smart cyber policies. The interview begins with Roberts explaining how the foundation evolved from Secure Repairs, a group supporting right-to-repair laws by countering manufacturer claims about security risks. He describes the IoT ecosystem as 'tech time bombs,' where billions of unsupported devices with vulnerabilities are exploited by malicious actors. Examples include Chinese APT groups using compromised home routers for password-spraying attacks and the Mirai botnet targeting DVRs. Roberts highlights the lack of liability for manufacturers and the need for regulations, comparing it to historical automotive safety improvements. He discusses model legislation requiring ISPs to replace end-of-life devices at no cost and transparency in software support periods. The conversation touches on DMCA restrictions hindering security research and repair, with Roberts advocating for exemptions. Parker proposes technical solutions like standardized device reporting protocols. Roberts mentions other organizations working on IoT security, such as CISA, EFF, and the Institute for Security and Technology. He emphasizes the importance of grassroots activism, inspired by right-to-repair successes, and urges listeners to join the foundation's efforts. The episode concludes with Parker previewing future interviews and encouraging subscriptions.

As heard by us

A focused policy-minded conversation on unsupported IoT devices, consumer risk, and security as a product responsibility.

Tech Time Bombs brings a sharper policy edge to a familiar consumer-tech worry: what happens when IoT devices stay in homes and workplaces after support runs out.

Read the full review in PlayNext →

Why you'd press play

Press play when you want a clear way to think about the danger left behind when an IoT device is no longer supported.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Firewalls Don't Stop Dragons Podcast