English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Consumer IoT devices are generally assumed to lack adequate default security,thus requiring user action. However, it may not be immediately clear to userswhat action to take and how. This uncertainty begs the question of what theminimum is that the user-base can reliably be asked to do as a prompt to securetheir devices. To explore this question, we analyze security actions advocatedat a national level and how these connect to user materials for a range ofspecific devices. We identify four pieces of converging advice across threenation-level initiatives. We then assess the extent to which these pieces ofadvice are aligned with instruction materials for 40 different IoT devicesacross five device classes (including device manuals and manufacturerwebsites). We expose a disconnect between the advice and the device materials.A stunning finding is that there is not a single assessed device to which allfour top pieces of converging advice can be applied. At best, the supportingmaterials for 36 of the 40 devices provide sufficient information to apply justtwo of the four pieces of advice, typically the installation and enabling of(auto)updates. As something of a contradiction, it is necessary for anon-expert user to assess whether expert advice applies to a device. This risksadditional user burden and proxy changes being made without the proposedsecurity benefits. We propose recommendations, including that governments andresearchers alike should declare their own working models of IoT devices whenconsidering the user view.

Easier Said Than Done: The Failure of Top-Level Cybersecurity Advice for Consumer IoT Devices