IoT news of the the week for Feb. 1, 2019

How about an Energy Star label for IoT security? Public Knowledge, a consumer rights organization, has proposed that the government mandate some kind of cybersecurity mark to denote that a connected device is secure. Much like the Energy Star label certified that a device meets some minimum federal standards for energy use, the Security Shield label would certify that a device has some basic security elements from design all the way through the end of life for the product. The paper doesn’t specify the particular requirements but delves deeply into how a program should be implemented, assessed and adopted. Go read it.  (Public Knowledge)

How Alexa knows to stay quiet during Amazon’s Superbowl ad: For everyone who is curious about why Alexa doesn’t wake up when it hears its name on commercials, the Amazon team is here to help. Basically, there’s a small database on the device that checks for the sound of the ad saying “Alexa” and then telling the device it’s not real. I was surprised Amazon doesn’t use something akin to supersonic signals that the human ear can’t hear to keep Alexa quiet. Seems simpler, but also something that could be prone to misuse. (Amazon)

The FDA is approving new gadgets like crazy: The Food and Drug Administration said that 2018 was its most successful year in approving medical devices. The agency approved 106 devices, up from a record number of 99 approvals in 2017. Not all of them are connected devices, but their approvals stem from a modernization effort of the agency’s approval process that is leading to more connected devices and even apps that can help with medical issues, such as depression or substance abuse. (MedGadget)

Augury raises $25M; acquires Alluvium: Augury, a company that applies intelligence to vibration data to assess maintenance needs, has raised $25 million in a Series C round of funding. The funding also helped Augury purchase startup Alluvium, which pulls data from industrial machines for analysis. The combined company will have the ability to analyze those industrial streams as well as glean maintenance issues based on Augury’s technology. Typically, for security and performance reasons, those two functions are separate. The funding round was led by Insight Venture Partners, with Eclipse Ventures, Munich Re/HSB Ventures, Pritzker Group Venture Capital, and Lerer Hippeau participating. (VentureBeat)

Cisco releases networking gear for IIoT: Cisco has been pushing for the internet of things to grow for a decade or so; witness the hype around fog computing. However, this week it has launched a line of switches and routers designed for industrial IoT that are physically rugged and software that combines Cisco’s IT networking chips with the needs of industrial networks. (Network World)

More on IoT device insecurity: If you need another article explaining that the race to lower costs has hurt the security of connected devices, and a list of how we will all pay for this in the not-too-distant future, then this Forbes article has you covered. The best takeaway was not that security is expensive, but that IT security and industrial security have different threat models and companies need to model out both threats and react to them differently. Think of it how you think about securing your home when you leave (setting an alarm, locking a door) and how you secure yourself walking through a parking lot at night (carrying an alert, maybe keeping your key between your fingers). You’d never think that locking your door at home would protect you from a mugger in a parking lot, yet in big companies, people make that mistake all the time. (Forbes)

Once again, you are the product: In a story that should surprise no one, Bloomberg has discovered that the makers of several period-tracking apps sell user data either to offer more targeted ads or to help insurance companies get data on fertility needs. Either way, it’s creepy to think that a 30-year-old who’s tracking her unusually heavy period might see ads for super absorbent tampons or the newest menstrual cup while a teen might see articles on how to use a tampon. The bottom line of this story is that none of the companies Bloomberg talked to promise to keep your data secret, although Clue apparently only shares it with academics. So let the downloader beware. (Bloomberg)

A CIO view on deploying IoT technology: This interview with Chevron CIO Bill Braun is a nice overview of how the role of the chief information officer has changed as companies embark on digital transformations. He cites the need to work more with startups when it comes to evaluating new technology, as well as a need to understand how new tech relates to Chevron’s business goals. Most of this is an admission of how quickly tech decisions have to be made today. (WSJ)

Wyze scores $20M in funding: The maker of a $20 connected camera and $30 panning camera has raised $20 million in funding from Norwest Venture Partners. Wyze has sold more than 1.5 million of its cheap cameras, which is a rare success at scale in the smart home market. The good news is Wyze is doing well. The bad news is that if cheap is what drives the market, we’re going to have some real security and longevity challenges ahead. (Wyze)

Want to sponsor this newsletter and the IoT Podcast? Space for 2019 is quickly filling up. Contact andrew (at) staceyoniot.com for a media kit.