Comment by jqpabc123
5 days ago
The vast majority of humans have better things to do with their life than figure out how to secure their personal network.
Sure. But this doesn't have to be an either/or choice.
It's possible to make it easy for those willing to surrender all privacy and control without making it impossible for those who don't.
Example: Amcrest cameras are just fine with being restricted to the local network. If you ask nicely and order direct, they'll even give you a discount.
We need a system so pervasive that if you order random devices from aliexpress they use it, and they cannot cause trouble because they're properly contained. It's not enough for you to have good security, you need to know your neighbours do too.
My vision of how this should work can be inferred from https://github.com/atomirex/umbrella Essentially in the future wherever we have WiFi APs those should also be media SFUs (and probably MQTT brokers or similar) where each client will only see the AP and things the applications running on the AP have explicitly allowed, including streams piped opaquely from anywhere else.
The idea that being connected to WiFi means ability to see other devices and the public internet needs to stop being the default.
Per-device WiFi auth/identity can help with IoT device isolation.
that is the wrong take. We need to protect the people who have better things to do.
People who have better things to do, won't want rtsp
What they do want though is their privacy protected. They shouldn't have to think about why or how they want it protected, they should just have it done for them.