The IoT Longevity Crisis: Managing Obsolete Security and "Cloud Slop" with Yossi Oren
Security researchers examine technical aspects of The IoT Longevity Crisis: Managing Obsolete Security and "Cloud Slop" with Yossi Oren.
Summary
IoT Longevity Problem
Yossi Oren discusses how IoT product lifecycles diverge from vendor lifecycles. Devices may remain deployed for decades after companies, engineers, and smart features fade—illustrated by a fridge stuck in 2017. Sensors and actuators outlast the software and hardware supporting them.
Critical Infrastructure Exposure
Unlike home devices behind a perimeter, field-deployed IoT on bridges, traffic lights, and dams is physically accessible. Compromised devices can become network stepping stones, and upgrades on critical systems like dams carry operational risk when original designers are gone.
Separating Actuation from Cloud Slop
Oren advocates decoupling durable actuation from ephemeral "AI cloud slop" smart features so core functions survive when cloud services end. Sustainability demands planning for decades-long device lifetimes.
Documentation and AI
He urges writing imperfect documentation and teardown videos that future maintainers—and LLMs—can combine with binaries and product media to preserve working knowledge across generational hardware turnover.
Related talks
fwd:cloudsec North America 2025·26 min
Security researchers examine technical aspects of Inviter Threat: Managing Security in a new Cloud Deployment Model.
Black Hat Europe 2024·38 min
Noam Moshe · Tomer Goldschmidt
Analysts investigate attack surfaces and defenses concerning The Insecure IoT Cloud Strikes Again: RCE on all Ruijie Cloud-Connected Devices.
RSAC Cybersecurity·31 min
Presenters detail vulnerability discovery and exploitation in Next-Gen IoT Botnets 3: Bad Implementations of Good Cloud Platforms.


