California recently passed a law attempting to improve IoT security. It's bad. It's based on a naive, superficial understanding of the problem that won't solve security, while needlessly raising costs.
blog.erratasec.com/2018/09/califo…
blog.erratasec.com/2018/09/califo…
So right after posting the above article, I added this tweet. Tesla's are Internet connected devices and 40bit keys are unreasonable security features. Yet, the important bit is Tesla has a disclosure program:
In other words, we see the difference between the myopic view California lawmakers have on security and the things that actually make a difference, like a notification/disclosure program.
