The Coming Internet-Of-Things Horror Show
Like many others, Bruce Schneier is sounding the alarm that the Internet of Things security nightmare isn't just about things like poor or non-existent security for thermostats: rather, that "software control" of an ever-widening pool of interconnected devices and systems designed to act without human intervention creates an urgent threat the likes of which we've never seen.
Schneier says, "A recent Princeton survey found 500,000 insecure devices on the internet. That number is about to explode. Autonomy. Increasingly, our computer systems are autonomous. They buy and sell stocks, turn the furnace on and off, regulate electricity flow through the grid, and-in the case of driverless cars-automatically pilot multi-ton vehicles to their destinations. Autonomy is great for all sorts of reasons, but from a security perspective it means that the effects of attacks can take effect immediately, automatically, and ubiquitously."
Schneier says, "A recent Princeton survey found 500,000 insecure devices on the internet. That number is about to explode. Autonomy. Increasingly, our computer systems are autonomous. They buy and sell stocks, turn the furnace on and off, regulate electricity flow through the grid, and-in the case of driverless cars-automatically pilot multi-ton vehicles to their destinations. Autonomy is great for all sorts of reasons, but from a security perspective it means that the effects of attacks can take effect immediately, automatically, and ubiquitously."
Just this summer we replaced the old furnace for the first floor and basement. The furnace dated from the late 1970's and was not too efficient. We had central air added as well, along with some duct work changes.
I worked with the HVAC contractor to choose the best thermostat. We looked at all the options and the clear choice was a standard programmable thermostat. The benefits of a smart, connected thermostat were negligible. Once programmed, the standard thermostat adjusts and maintains the temperature perfectly on your schedule. It works well, costs less and is not vulnerable to cyber-attacks.
The benefits of a connected thermostat are few compared to a programmable, but the cost is much greater. Not really worth it.