====== 2020-09-19 - cloud-free devices ====== {{ :blog:2020:09:19:hey_wiretap.jpg?400|https://pics.conservativememes.com/people-in-the-sixties-ibetternotsay-thatior-the-government-will-wiretap-29929731.png}} computer cloud environments are great for many things. however buying device that's key functionality is available via provider's cloud only is not. yes, this links to [[2020-09-19 - LAN of Things|my recent post on IoT]]. when you have such a device (eg. vacuum cleaner robot) there are couple of things to keep in mind here: - privacy. you send out your data to god-knows-who and have no control over it. - security. 3rd party now has: - network-connected device, in your private WiFi/LAN. think: eavesdropping, [[wp>Man-in-the-middle attack|MitM]], [[wp>botnets]]. - ability to gather any sensor data, at will, at anytime (eg. vacuum cleaner robot with a camera / mic, voice assistants, etc...). - companies do [[https://hackaday.com/2019/10/08/teardown-quirky-egg-minder/|go bankrupt]]. - companies get [[https://hackaday.com/2016/04/07/alphabet-to-turn-off-revolvs-lights/|bought by other companies, with different goals]]. - companies can overnight switch to premium-tier only, forcing you to pay monthly fee for using a device "you own". - companies can [[https://hackaday.com/2020/02/24/ethics-whiplash-as-sonos-tries-every-possible-wrong-way-to-handle-iot-right/|end supporting "legacy" product]] leaving you with effectively dead device. - companies can get [[https://hackaday.com/2020/08/07/this-week-in-security-garmin-ransomware-keepass-and-twitter-warnings/|hacked and their cloud will seize to operate]]. - and some companies [[https://hackaday.com/2017/04/05/iot-startup-bricks-customers-garage-door-intentionally/|can just have a bad day or hate you enough to disconnect you]]. there is a big financial trouble with sustaining operations when model relies on customers buying HW, and using the money to offer free services. markets tend to saturate and cash flow suddenly start to decrease. another thing is, that even with all the best intents of the company, they still can get hacked and you'll be a victim. see all the attacks options above. these can be carried out by some1 who gains access to company servers. after giving it a thought i decided i'll never buy any such device. it just does not make sense to me.