Editing Security (section)

====Security through authorization====
Authorization is the process of confirming that a user is who they say they are. Authorization processes are extremely important to the functioning of the internet but risk becoming a security vulnerability and threat to consumer rights if used improperly. Authorization features can be used by companies to lock out features when the user's subscription expires, in this case the purpose of authorization is lost because the user need not confirm who they are, just that they have a valid subscription. These sorts of lock-outs are significant in that the product's physical features still work but the company is intentionally preventing the user from accessing them because their internet-based subscription has ended. 

Authorization for the sake of company product control harms the consumer's [[right to own]] their purchase and also can introduce new attack vectors for malicious actors. Attack vectors may be introduced within the product itself: malicious actors can't remotely hack a fridge without an internet connection but they might be able to hack a smart fridge that has the user login via the internet. Attack vectors may be introduced on the user's information as the company now needs to store authorization information (password hashes, usernames, emails, god forbid in clear text) and may do so insecurely opening themselves to attack.