FollowingCalifornia's Internet of things (IoT) security law from last year, the governor of Oregon signed a new IoT security law, according to which technology companies are required to install "reasonable security features" on connected devices to prevent information leakage or manipulating the devices. There is no specification in the law, however, concerning the actual meaning of reasonable security features.