New IoT security rules: Stop using default passwords and allow software updates