Both development and evaluation teams have been ignoring security problems in Internet-connected devices for too long. That must stop.