IoT security risk - who'd have thought it!

I think to anyone in the industry the mad rush to produce pointlessly internet connectivity from everything from light bulbs to fridges while not thinking too hard on the security aspects was always going to become an eventual disaster.

The main problem is the no sense of obligation on the part of the manufacturer to keep devices up to date even if they have done a good job on security in the first place.  You can understand their reluctance, there is no direct money in it - just a small amount of consumer appreciation.   The average consumer will also not really understand the hacking war that is going on around such devices especially if any covert surveillance could be obtained (thinking of the security agencies hacking TV camera functions here).

Also trivial device like a light bulb being connected to the outside world has a short lived wow factor, now a trashy app can turn on your lights when you are out - it's simply not that useful. A read a hilarious article about the Zuckerberg toying with automation at home, and controlling things from his mobile - I hope that keeps him from world domination.