There is a very strong incentive in IT markets to get a product out before the others to grab a dominant position as fast as possible, and no incentive to slow down and design a secure offer.

So, including security in a connected product today is a strategic mistake and a waste of money. Time to market is so much more important.

Customers don’t really care either, and I don’t see cloud vendors or MNOs saying things like “you’re out of my cloud/network if you system isn’t secure”.

So, I am not a fan of regulation, but there is no credible alternative today, and the time is counted. When some hackers takes down a big chunk of internet or kills a few persons, then regulation will step in hard in panic mode, and that doesn’t sound good.

“Information security is not a technological problem. It is an economics problem. And the way to improve information security is to fix the economics problem.”

Some people spend time to create needs and wants, and competitiveness creates a kind of race that is getting uncontrollable, and more particularly with “gadgets”.

As the final end user has so many choices, almost anyone can come and propose a service that probably already exist, yet, it does not matter because people like to have “the choice”.

In my opinion, the best solution (but not my favorite one) would be a natural self-regulation of the market, namely, few big actors/companies must take the lead and stop this frenetic race to “the-most-connected-device”.

The only analogy I have in mind right now is the law of jungle where natural predatorS (I insist with the “S”) must control some different territories.

I don’t think that government and laws can be a solution as some people suggest, unless those laws are applied to the whole world instead of only few small countries.