The UK government is working on a new piece of legislation that would ensure that vendors of smart devices, including IoT, correctly inform the customers about the lengths of security updates support. Manufacturers must be informed at the point of sale of the duration of time for which a smart device will receive security software updates. Manufacturers selling devices with universal default passwords could be banned from operating in the UK market. They must also provide a public point of contact to make it simpler for anyone to report a vulnerability.”]