IOT Blog article

[dngray]

Discussed in https://github.com/privacyguides/privacyguides.org/discussions/1716

^{Originally posted by mfwmyfacewhen September 2, 2022}
I think a page explaining how awful IOT is for privacy/security would be good to have. Would like some ideas for what to put in it.

I'm thinking we could do something with this, perhaps in the form of a blog post.

Unfortunately many IoT devices are designed with very limited upstream support. They often depend on specific BSPs (board support packages) from vendors which only work with particular Linux kernels. That's how you get devices which are forever stuck on an old kernel.

I think we could make some general recommendations here such as:

• Be wary of devices that don't discuss a support cycle or have open source drivers
• Discuss using VLANs to separate unsupported IoT devices
  • Which could be a precursor to OPNSense split tunnel guide with VLANs #1863

[ghost]

I'm thinking this could be part of the smart home pr. Maybe even something about how to know if you're buying an IOT device, I know people that are just trying to buy a thermostat or a garage door opener and they end up buying some awful IOT thing on accident.