"use strict";
var adace_load_67a4c4bb6e905 = function(){
var viewport = $(window).width();
var tabletStart = 601;
var landscapeStart = 801;
var tabletEnd = 961;
var content = '%3Cdiv%20class%3D%22adace_adsense_67a4c4bb6e8db%20adace-hide-on-phone%20adace-hide-on-landscape%22%3E%3Cscript%20async%20src%3D%22%2F%2Fpagead2.googlesyndication.com%2Fpagead%2Fjs%2Fadsbygoogle.js%22%3E%3C%2Fscript%3E%0A%09%09%3Cins%20class%3D%22adsbygoogle%22%0A%09%09style%3D%22display%3Ablock%3B%22%0A%09%09data-ad-client%3D%22ca-pub-2933510995499028%22%0A%09%09data-ad-slot%3D%226037521357%22%0A%09%09data-ad-format%3D%22auto%22%0A%09%09%3E%3C%2Fins%3E%0A%09%09%3Cscript%3E%28adsbygoogle%20%3D%20window.adsbygoogle%20%7C%7C%20%5B%5D%29.push%28%7B%7D%29%3B%3C%2Fscript%3E%3C%2Fdiv%3E';
var unpack = true;
if(viewport=tabletStart && viewport=landscapeStart && viewport=tabletStart && viewport=tabletEnd){
if ($wrapper.hasClass('.adace-hide-on-desktop')){
$wrapper.remove();
}
}
if(unpack) {
$self.replaceWith(decodeURIComponent(content));
}
}
if($wrapper.css('visibility') === 'visible' ) {
adace_load_67a4c4bb6e905();
} else {
//fire when visible.
var refreshIntervalId = setInterval(function(){
if($wrapper.css('visibility') === 'visible' ) {
adace_load_67a4c4bb6e905();
clearInterval(refreshIntervalId);
}
}, 999);
}
})(jQuery);
Google is trying to make the world of smart home devices more secure. (Image: Reuters/Beck Diefenbach)
MOUNTAIN VIEW, Calif. — Connected “internet of things” gadgets, like connected thermostats, cameras and speakers, suffer from security updates that arrive late or never. So Google (GOOG,GOOGL) has a solution in mind, and it involves the mobile operating system that has long suffered from security updates arriving late or never.
Android Things, the “IoT” platform Google unveiled at its I/O conference here, aims to transcend the problems Android has experienced on phones by taking device makers out of the update loop. Gadgets built on this foundation, Google says, will ship with software hardened against hacking attempts and at least three years of guaranteed, automatic security patches.
So, in theory, we should get smart devices that aren’t stupid about security and don’t get taken over remotely. That would be a welcome addition to a market currently swamped by security vulnerabilities that have allowed hard-to-detect privacy violations and fueled massive denial-of-service campaigns against web infrastructure.
How are you supposed to shop for a smart device?
Here in the reality of 2018, IoT security remains a big bag of unknowns. Manufacturers will introduce connected applianceswithout clear statements of how long they’ll get bug fixes — even though these things, if used like the non-connected sort, will stay in service for decades.
That can lead to a certain willful ignorance orlearned helplessness. “I don’t think that consumers are quite thinking about security yet,” observed summed up Carolina Milanesi, an analyst withCreative Strategies.
With Android Things, Google hopes to give developers and customers more than just vague assurances. This platform is built on Google-certified chipsets from such manufacturers as Qualcomm (QCOM) around which those companies can build smart devices. Then it adds a secured and stripped-down version of Android, on which developers can write apps using standard Android tools.
Google promises a minimum of three years of security fixes for each major release. That itself is well short of the lifespan of a thermostat or an LED bulb; Google hasn’t said what the maximum period of update support would be for Android Things, but it’s definitely not just three years. The developer blog postannouncing this platform’s 1.0 release notes “additional options for extended support.”
During a keynote Wednesday morning, Android Things project-management lead Vince Wu said Android Things would soon show up in additional Google Assistant-based smart speakers and Smart Displays—and would work for everything from connected doorbells to point-of-sale terminals. Note, however, that Google’s own Nest thermostats don’t yet run on this platform.
Other attempts to address this problem
Milanesi, the Creative Strategies analyst, offered a tentative endorsement of Google’s move but noted the company’s competition. At CES Samsung announced that it wouldincorporate its Knox security platform into its smart-home devices, and Apple (AAPL) has been pushing its ownHomeKit platform, under which Apple reviews and approves the security of third-party devices.
Last month, Microsoft (MSFT) introduced its own IoT platform,Azure Sphere. Based on the open-source Linux operating system—itselfa major departure for the firm—this includes a full 10 years of guaranteed updates, a duration much closer to the service life of household gadgets.
The best possible next development would be to see the likes of Google and Microsoft prominently advertise their guaranteed-update timelines, if not get into some one-upmanship on that front.
Being able to compare the support pledges on different connected gadgets would mean you wouldn’t have to feel so dumb when trying to buy a smart device. Until then, consider yourself more than welcome to hold off on flinging yourself into the connected-home lifestyle.
More from Rob:
EmailRobat rob@robpegoraro.com; follow him on Twitter at@robpegoraro.