Live data from Hacker News

The Impending Doom of Expiring Root CAs and Legacy Clients

scotthelme.co.uk

71–80 of 209 posts

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#71

Earlier quoted context omitted.

> Someone on HN recently floated the idea of a company that would make quality, non-smart electronics and appliances that would also be easily serviceable. I wish this existed and would pay significantly more for products like this. You know, I've wanted something like this as well for a while. I know next to nothing about startups or companies, but I wonder how hard it would be to create a hardware startup around th…

Doubt it would work. Hardware is commoditized and low margin. That's why TVs are embedding internet advertising, to make fat stacks from their otherwise barely profitable products.

Wouldn’t that work in _favor_ of the startup idea?

If the hardware is a commodity and the market is for a bare-bones, self-serviceable “just a TV”, then the startup should have significantly lower engineering costs and benefit from the low component costs. Given that people on this thread are stating that they would pay a premium for such a product makes it seem even more viable.

Maybe other people have different “serviceability” definitions, but I once replaced the main board of a broken Vizio smart TV —- there were only two components —- a power board and the main electronics board. The hardest part was tracking down a replacement board, but $35 and a few screws later and I had a working TV again. That met my definition of self-service.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#73
You almost need something in HTTP for a client to signal which root certificate is being used, then if it's old, push the new one (signed by the old one) in the response. There's plenty of potential for abuse with this, though.

Maybe root certs need to expire more often so implementors have to do OTA updates.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#74

I begrudgingly bought a 'Smart TV' just because I wanted a 4K monitor. But I use it as a dumb monitor and watch app-based content through an Apple TV. At least I'm reasonably sure the Apple TV will be updated for 5-10 years, and is a lot more disposable than a giant TV. My last TV worked great for about 12 years. No way Panasonic would've kept supporting it that long. Honestly, the thing I hate most about smart TVs,…

https://www.necdisplay.com/

At most they come with a QAM tuner. Some are a display only. None have smart TV spyware from my browsing their offerings.

Fixed a typo

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#76

Earlier quoted context omitted.

Someone on HN recently floated the idea of a company that would make quality, non-smart electronics and appliances that would also be easily serviceable. I wish this existed and would pay significantly more for products like this. To address your question, I think they’re all “smart” now. I ended up getting a low-end Samsung 4K a few months ago and it’s been good so far. It starts up very quickly, maybe 1-2 seconds.…

> Someone on HN recently floated the idea of a company that would make quality, non-smart electronics and appliances that would also be easily serviceable. I wish this existed and would pay significantly more for products like this. You know, I've wanted something like this as well for a while. I know next to nothing about startups or companies, but I wonder how hard it would be to create a hardware startup around th…

I'd think that a fancy looking website for a group-buy, where you manage a relationship with a manufacturer to build to your spec & you build (or get them to build) the software behind it would give it what you want. Kind of like https://www.weargustin.com/ or a Massdrop?

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#77
This will also be an issue with some docker images built some years ago with an outdated cert store somewhere in there. Unmaintained images are, in effect, frozen in time.

I'll just mention glassfish here in case someone in the near future wonders why this or that application is failing: it has it's own cert store (different from the JVM one), and it is a bit out of date. Yes, I just ran into a github project whose last commit was 3 months ago (march 2020) and that wouldn't work with LE certificates, all because deep down the docker matrioshka, there was a glassfish with outdated certs.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#78
Has anyone taken the offered training?

I'm pretty good with TLS, but could use more hands-on time with openssl and PKI, especially a deeper understanding of certificate chaining issues. Would be interesting to know if the training is targeted at "total beginner" or "intermediate looking to be advanced"

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#79
"Impending" doom?

Devices from 10 years ago are _already_ useless online.

Not only are the root certificates completely expired, but let's see which protocols does an openssl 0.9.8 build from a decade ago have in common with, say, current Gmail's IMAPS server: NONE.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#80
post #52

Earlier quoted context omitted.

Have you had fun hunting for and turning off all of the awful picture "enhancing" features yet? and then figuring out how to make it persistent. Modern TVs really seem to ruin the video even though they are perfectly capable of just showing a color adjusted signal, quickly becomes obvious when you plug in a computer.

I don't know to be truthful. The TV remote has loads of buttons bottom the only ones I use are on/off, source to find the HDMI and volume sometimes. I'd love just to have a dumb monitor of the same size but they're not available. A bonus then would be no need to have a tv licence.

If you're referring to a UK TV licence, it doesn't matter what kind of monitor you're using; it's about what you watch (live TV, whether over the air or online, or any use of BBC iPlayer). Watching TV via a computer and a dumb monitor still requires a licence.

https://www.tvlicensing.co.uk/check-if-you-need-one

(Edited to add: Conversely, merely owning a TV does not require a license; if you're only using it as a computer or gaming monitor, and not watching [online] TV programmes on it, you should be fine.)

Post reply on HN