Skip to content

The IoT Longevity Crisis: Managing Obsolete Security and "Cloud Slop" with Yossi Oren

Yossi Oren

Security researchers examine technical aspects of The IoT Longevity Crisis: Managing Obsolete Security and "Cloud Slop" with Yossi Oren.

Summary

IoT Longevity Problem

Yossi Oren discusses how IoT product lifecycles diverge from vendor lifecycles. Devices may remain deployed for decades after companies, engineers, and smart features fade—illustrated by a fridge stuck in 2017. Sensors and actuators outlast the software and hardware supporting them.

Critical Infrastructure Exposure

Unlike home devices behind a perimeter, field-deployed IoT on bridges, traffic lights, and dams is physically accessible. Compromised devices can become network stepping stones, and upgrades on critical systems like dams carry operational risk when original designers are gone.

Separating Actuation from Cloud Slop

Oren advocates decoupling durable actuation from ephemeral "AI cloud slop" smart features so core functions survive when cloud services end. Sustainability demands planning for decades-long device lifetimes.

Documentation and AI

He urges writing imperfect documentation and teardown videos that future maintainers—and LLMs—can combine with binaries and product media to preserve working knowledge across generational hardware turnover.

Related talks