How to Engineer Secure Things: Past Mistakes and Future Advice

The recurring engineering mistakes behind insecure IoT products, starting with unvalidated firmware updates (see the TrackingPoint rifle), plus advice like root of trust and code signing.