Live data from Hacker News

The Impending Doom of Expiring Root CAs and Legacy Clients

scotthelme.co.uk

51–60 of 209 posts

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#51

Earlier quoted context omitted.

I like Amazon's model for this on the Kindle: Kindles are subsidized by ads, so you can buy what is effectively a REALLY cheap tablet from a well-known company if that's most important to you. OR, if you prefer, you can go pay a one-time fee an eliminate ads from the OS.

Or you can buy the cheap one with ads and keep it on aircraft mode, longer battery life, no ads. (Download content from PC via USB)

[deleted]

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#52

We have our smart TV just acting as a display for a mini PC via HDMI connection. TV knows nothing about our WiFi so no phoning home.

Have you had fun hunting for and turning off all of the awful picture "enhancing" features yet? and then figuring out how to make it persistent.

Modern TVs really seem to ruin the video even though they are perfectly capable of just showing a color adjusted signal, quickly becomes obvious when you plug in a computer.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#54
post #36
post #34

Earlier quoted context omitted.

(ot: should that be clueless^Whelpful, or is there some new convention I'm not aware of? ^ still means "ctrl" right?)

The parent is using it to mean https://en.wikipedia.org/wiki/Logical_conjunction

If true, that would be logical and fair.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#55
post #8

Earlier quoted context omitted.

I never hooked up the smart tv to my wireless network. I have heard too many stories about data getting sent back to the manufacturers to sell your watching habits, etc. Instead, I use a Roku, that I know gets updates (and yes, they also sell your watching habits, but so far, nextdns.io's lists block the DNS that roku uses to do this.)

I have a dummy hotspot with no access to anything whatsoever, and which I allow my TV to connect to. Apart from exposing an undocumented API (with code execution capabilities), and allowing logging in as root over Telnet (without a password), it also tries to fetch software updates over plain HTTP. It's a bloody nightmare. On the plus side, it was possible to disable many of the smart features once I discovered the t…

Vulnerabilities are a massive trade off. I want my devices to be open to me, not to anyone. Seems like it should be straight forward to give you access to the device (like "scan this qrcode on the inside of this panel" and you get the private key). One can dream...

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#56
Once again the persuit of security theater to meet the requirements of commerce (which most of the web doesn't share) cause problems accessing the large parts of the normal web.

When are people going to learn that centralized cert authorities are just for commerce and only hurt the non-commercial web?

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#57
post #46
post #29

Earlier quoted context omitted.

My guess is the TV must support DRM

That's only for Bluray playback, for gaming the PS4 doesn't care about HDCP.

I'm pretty sure that is not correct. I've had issues with games on the PS4 not wanting to start, and I know the PS3 required HDCP for certain games as well.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#58

Earlier quoted context omitted.

I like Amazon's model for this on the Kindle: Kindles are subsidized by ads, so you can buy what is effectively a REALLY cheap tablet from a well-known company if that's most important to you. OR, if you prefer, you can go pay a one-time fee an eliminate ads from the OS.

Yeah, I would be less upset about the ad situation if they had made it clear up front and given me a choice like Amazon does with the Kindle. That said, when companies price the ad-free premium at 1000x the expected ad revenue, it gets aggravating again.

What's the advantage of this? Surely they're better off pricing it at 2x the expected ad revenue, since then they can expect to get twice as much now as they otherwise would get eventually? Indeed, even if it were 1.01x the expected ad revenue they've won with this upsell.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#59
post #58

Earlier quoted context omitted.

Yeah, I would be less upset about the ad situation if they had made it clear up front and given me a choice like Amazon does with the Kindle. That said, when companies price the ad-free premium at 1000x the expected ad revenue, it gets aggravating again.

What's the advantage of this? Surely they're better off pricing it at 2x the expected ad revenue, since then they can expect to get twice as much now as they otherwise would get eventually ? Indeed, even if it were 1.01x the expected ad revenue they've won with this upsell.

A willingness to pay signals that you A. have money and B. care about quality, which makes you a ripe target for price discrimination, which is why "ad-free" premiums often exceed the ad revenue by an enormous factor.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#60
post #8

Earlier quoted context omitted.

I never hooked up the smart tv to my wireless network. I have heard too many stories about data getting sent back to the manufacturers to sell your watching habits, etc. Instead, I use a Roku, that I know gets updates (and yes, they also sell your watching habits, but so far, nextdns.io's lists block the DNS that roku uses to do this.)

Problem some do connect to any non secured WiFi they can find.

Just remove the antenna? Won't be connecting very far after that!
Post reply on HN