Security quote of the week

Whether or not arbitration is a bad thing, it wouldn't apply in this case. If D-Link (or whoever) makes a consumer router that is vulnerable to being recruited into a bot net that is used against my server and causes me financial harm, I could potentially have a claim against D-Link. There's no previous contact between us, so that arbitration decision wouldn't apply.

Think of it like this: if a company made a toaster with faulty wiring that burned down an apartment building, all the other people in the building (and the building owner) would have a claim against that company, but no prior contract with them. So arbitration wouldn't apply.

Of course, IANAL, so I have no idea if there is even liability in my toaster example. But if there is liability there, then I could see there being liability for vulnerable routers or other IoT devices.