During a review of W3C WoT &amp; ETSI M2M standards I noticed that security is totally ignored in these tech-standardization bodies. The standards leave security as an exercise to the industry and the maker communities (who are not spending money on security until they have an problem). That said, it&#x27;s also not trivial to implement something that at first sight seems straight-forward like 802.15.4 Security[0][1] without a deep understanding of the security architecture supported by the underlying platform:<p>[0] <a href="http:&#x2F;&#x2F;www.jwcn.eurasipjournals.com&#x2F;content&#x2F;pdf&#x2F;1687-1499-2006-093830.pdf" rel="nofollow">http:&#x2F;&#x2F;www.jwcn.eurasipjournals.com&#x2F;content&#x2F;pdf&#x2F;1687-1499-20...</a>
[1] <a href="https:&#x2F;&#x2F;www.cs.berkeley.edu&#x2F;~daw&#x2F;papers&#x2F;15.4-wise04.pdf" rel="nofollow">https:&#x2F;&#x2F;www.cs.berkeley.edu&#x2F;~daw&#x2F;papers&#x2F;15.4-wise04.pdf</a><p>Since the web is now getting &quot;engaged&quot; to the devices with CoAP and other protocols I wanted to create awareness of how bugs can spill over into the real world and do real damage there. If hacked insulin pumps or baby monitors don&#x27;t scare you enough how about hacking a train?  <a href="https:&#x2F;&#x2F;media.ccc.de&#x2F;v&#x2F;32c3-7490-the_great_train_cyber_robbery" rel="nofollow">https:&#x2F;&#x2F;media.ccc.de&#x2F;v&#x2F;32c3-7490-the_great_train_cyber_robbe...</a> ?? (everyone should probably watch this simply because SCADA strangelove guys are crazy and awesome)<p>Anyway to counteract the usually very &quot;marketing intensive&quot; tone of IoT groups on LinkedIn I decided to start this IoT Security group: <a href="https:&#x2F;&#x2F;www.linkedin.com&#x2F;groups&#x2F;4807429" rel="nofollow">https:&#x2F;&#x2F;www.linkedin.com&#x2F;groups&#x2F;4807429</a> it would be great to see people from <i>all</i> camps (IoT is a combination of 3 silos: 1) embedded, 2) web 3) infosec) actively contributing with technical topics in this group. I will keep it open to posts from marketeers but am heavily policing it for blogspam and remove any posts that are not security related).<p>Also I have some ideas about hackerspaces (<a href="http:&#x2F;&#x2F;hackerspaces.org&#x2F;" rel="nofollow">http:&#x2F;&#x2F;hackerspaces.org&#x2F;</a>) which IMO every city should have and support. They&#x27;re needed to propagate knowledge between these individual camps properly. (my contact details are in my profile in case you are interested to discuss more offline).