Bruce Schneier on IoT threats, and how to deal with them. This is a rather lengthy article and probably worth the read.
Our computers and smartphones are as secure as they are because companies like Microsoft, Apple, and Google spend a lot of time testing their code before it’s released, and quickly patch vulnerabilities when they’re discovered. Those companies can support large, dedicated teams because those companies make a huge amount of money, either directly or indirectly, from their software — and, in part, compete on its security. Unfortunately, this isn’t true of embedded systems like digital video recorders or home routers. Those systems are sold at a much lower margin, and are often built by offshore third parties. The companies involved simply don’t have the expertise to make them secure.
“Click Here to Kill Everyone: We’re Building a World-Size Robot, and We Don’t Even Realize It”
tinfoilparachute 