By “Connecting things isn’t so different to connecting people …”
In a conversation I had recently, the privacy issue of ‘Alexa’ came up (other models available too), my colleague said “Alexa, you just plug-it in and go”. Which got me thinking about how fast attitudes to technologies can change when the conditions are right. It’s great technology charges ahead in leaps and bounds, I find the convenience of my smart phone fantastic. I also like that my car is so much more reliable than the first one I owned twenty years ago. However, I am firmly in favour of today’s new car drivers having to pass a test just like I did, and that cars still have MOTs. Leaving aside the fascinating future of Driverless Cars, today, even though automotive technology is so much better, car drivers are still responsible for their vehicle.
Likewise, with computers, they’re fantastically more advanced than even a short while ago, but you, me, and everyone who powers up a PC, plugs in a gadget or connects an IoT device have a responsibility to ourselves and the wider community. Yes, the manufacturers of the gadget should make them reliable and secure, but we all know the market, particularly consumer/domestic market, is largely driven by cheapness and why are any of us surprised that as a consequence the gadgets we buy leave a lot to be desired in terms of security? This lack of security[1], a cost known as an externality[2], as those interested in economics will know, doesn’t fall on the manufacturer, it largely falls in a very thin layer on everyone, a bit like ash – if it’s coming from a bonfire, then not too much to worry about, but if the ash is coming from a volcano, well then, “bad stuff” is happening.
Gadgets and IoT devices can be connected to the University network, but the regulations and policies still apply. If individuals are accessing the network through the device they need to be suitably identified, etc, as with all logins. Someone, probably the person connecting the device has the responsibility for securing the device, and patching it as necessary. In some cases this might be hard to do but the requirement for control and accountability remains.
If a member of staff has any questions how best to make use of a necessary gadget or IoT for their work at Kent please contact the IT Service Desk [https://www.kent.ac.uk/itservices/help].
“Connecting things isn’t so different to connecting people, though it may involve a shift in the kinds of precautions that are used. Preventive, rather than responsive, controls may well be more appropriate, especially where devices such as cameras or building controls interact with the physical world.”[3]
[1] https://www.schneier.com/blog/archives/2017/02/security_and_th.html
[2] https://en.wikipedia.org/wiki/Externality
[3] [Cormack, A. (2017) Janet and the Internet of Things [Online]. Jisc Community. Available from:
https://community.jisc.ac.uk/blogs/regulatory-developments/article/janet-and-internet-things [Accessed 05 April 2018].]