Earlier quoted context omitted.
> It's easy to build it in a way so that the worst that the software can do is cause it to turn into a "dumb" fridge. If it's so easy, why don't more companies do it? Why didn't Nest build their thermostats so that when the battery runs out, it reverts to a "dumb" thermostat instead of turning off your heat? http://www.theguardian.com/technology/2016/jan/15/bug-nest-t...
To be fair, most "dumb" thermostats still require an external power source to continue to operate. Very few actually pull operating current from the 24v C wire if it even exists on the given system. If it doesn't, R (the switched 24v power for Heat and Cold signals) isn't guaranteed to continually have current. Only when your Heat is turned on (probably a standard toggle lightswitch on the side of your furnace) will…
I stayed in a hotel with Android lightswitches and it was as bad as you'd think
231–240 of 325 posts
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#232Earlier quoted context omitted.
Could be. I just spent some time on the modbus.org site. I haven't looked in a while. There is pretty much no mention of security though they claim that Modbus over TCP is an internet protocol.
Maybe embedded network is the new javascript ecosystem: rediscovering novel ideas (like authentication!) that were invented 50 years ago. /deploying CAN bus without security
That if you have a box that can talk to network A and B, suddenly anything on A can talk to anything on B.
A CAN bus, or older modbus installs, would be airgapped by its very nature.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#233I'm amused by the use of Modbus. I worked on Modbus networking back in the 1980's at Modicon (a company that disappeared long ago that created the "standard"). Using a protocol invented before the internet to control devices on a semi-public network is insane. The original Modbus was designed to communicate with factory devices controlled by logic controllers over serial and eventually over a custom token ring networ…
I think if people actually knew the true extent of the debacle that industrial control protocols are, they would pass out. If you ever want nightmares, check out EtherNet/IP CIP protocol... Of course, there are no security provisions whatsoever. If you can get a device on the LAN, you're golden. Every device, fully open to monitoring and control of every attached piece of equipment. In the new world of inexpensive, b…
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#234Earlier quoted context omitted.
The cheapest Chromebooks ship at $149 and have a pretty much unbrickable automated update flow that includes the firmware for the CPU and embedded controller(s). It's not a matter of luxury, it's a matter of having people work on it who care. Disclosure: I work with them. Much <3 :)
Except when you're abroad on roaming cellular charges, and your three laptops decided that since your iPhone's personal hotspot is WiFi, it's time to download today's ChromeOS image version, because the one you had downloaded the night before was not good enough anymore. Source: Chromebooks are awesome, and even with excesses like this, they're still the cheapest to operate by far.
A comment in https://bugs.chromium.org/p/chromium/issues/detail?id=323010 claims that the BSSID is used for a "suspected" state, but that may not be enough to actually stop it from downloading updates, but I'm far from an expert in that domain.
In short, identifying tethering states with iOS seems to be hard.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#235Earlier quoted context omitted.
Keep in-mind that we're talking about always connected devices. Firmware updates could be done remotely without the end user needed to do anything, except perhaps give his approval.
Great my fridge just rebooted for a firmware update and bricked itself now the peas are rapidly defrosting and I am in a panic. Edit: Shoutout to Internet of Shit https://twitter.com/internetofshit
Nothing in remote/automatic updates requires being brickable. Don't buy such a crappy fridge.
Or, call a serviceman to fixe it, just like you would today with dumb fridge.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#236Earlier quoted context omitted.
Add a physical switch for firmware updates, on an opt-in basis. How does Tesla implement updates?
> How does Tesla implement updates? Tesla has a pretty vested interest in shit keeping working considering it's a pretty luxurious and high-profile product. The cut-price manufacturer of your $20 lightbulb or $300 fridge? Not so much.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#237Seriously, I fail to see the ROI of such endeavor.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#238So sad. I find the mechanics here really challenging to overcome. The hotel management no doubt wants "really cool tech" for their hotel to show they are up to date etc. And they send out an RFQ which someone bids on, really cheaply. Knowing that by only doing the things the hotel asks for, they can throw something together quickly and cheaply for a big payday. This is exactly the mechanism that gets people in troubl…
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#239Earlier quoted context omitted.
> How does Tesla implement updates? Tesla has a pretty vested interest in shit keeping working considering it's a pretty luxurious and high-profile product. The cut-price manufacturer of your $20 lightbulb or $300 fridge? Not so much.
Then the opportunity is to convince customers why they should pay more for well-supported connected products. Easiest way is to make high-margin products.
Re: I stayed in a hotel with Android lightswitches and it was as bad as you'd think
#240When I stayed there, it was just as soul destroying to use these things as you might imagine. The implementation felt like they'd asked a VB6 dabbler to implement it in Java. Then stuck it in the cheapest 600mhz tablet they could find. The UI was purely a button grid with distorted graphics, and dodgy typography. Button presses took about 1/2 a second to respond, and every 5th press caused the app to crash (adding a…
Now I'm living in the future.
I keep waiting for this iot/we put a chip in it/etc to produce results that are an improvement...