Live data from Hacker News

Read this before you buy that TV streaming stick

krebsonsecurity.com

391–400 of 575 posts

Re: Read this before you buy that TV streaming stick

#391
post #290

Earlier quoted context omitted.

Check their tomato paste. It turns out that nearly every tomato paste in Australia comes from Xinjiang in China, including those marked as Australian or Italian. Simplot (Leggos), the big US company, was the worst offender, so it's possible that tomato paste in Costco's US stores has been produced in Xinjiang using slave labour, irrespective of what the label says. https://www.abc.net.au/news/2026-07-27/australian-to…

Difficult to distinguish between actual slave labour and China-is-bad propaganda. Harm to the end user: none^ Benefits to the end user: more affordable tomato paste Government action to prevent slave labour products entering Australia: none^ ^close enough.

Chinese workers earn more than workers from latin America. At least their government isn't slave for billionaires

Re: Read this before you buy that TV streaming stick

#392

Earlier quoted context omitted.

Upon connecting it to the internet… I hesitate to blame the victim here, but why on earth would you do that? “$40 Chinese-made” didn’t give you pause?

This is an age where even teacups demand internet connectivity to fetch firmware updates

And then what happens if someone accidentally pushes the saucer firmware to the cup update?

https://hackaday.com/2022/03/18/welcome-to-the-future-where-...

Re: Read this before you buy that TV streaming stick

#393
post #251

Earlier quoted context omitted.

One of the main value propositions for retailers in a world of endless cheap garbage being sold online, is to vet products so customers can trust that what their buying is from a legitimate company and not junk or stuff like these streaming sticks. This is the problem with being an “everything store”. “Everything” includes a lot of things most consumers would like to be protected from, and assume they are due to the…

Costco vets their products very well, if I see something at costco and its something I need I just buy it. No need to research and I've never been burned. They only sell good quality stuff.

I don’t disagree, Costco has a reputation for selling well vetted products, but that’s not a good comparison. I trust Costco (even their online only sales), but in no way do I trust the other merchants listed.

We’re specifically taking about merchants that have a super shady online presence. They will basically sell you anything and everything and don’t care if it harms you.

The ones mentioned (Amazon, Best Buy, New Egg), it’s going to be hard to argue they vet (or care about vetting) the digital products they sell. You might as well throw Walmart into group too, their online offerings have gotten super sketchy if you really do into it.

Re: Read this before you buy that TV streaming stick

#394
If you have a Raspberry Pi 5 gathering dust somewhere and need a new streaming box then try LibreELEC. It decodes 4k content just fine. It has HDMI CEC. It can stream from local server or play directly from attached storage. There are no ads or tracking/profiling. It can play YouTube without ads but there is no support for Netflix, Apple TV or similar streaming services.

Re: Read this before you buy that TV streaming stick

#395
post #108

We purchased a Chinese-made projector from Amazon, which was surprisingly inexpensive (~40 USD). Upon connecting it to the internet, it placed a constantly running feed of ads on the corner of the screen, even while movies were playing. There was no way to disable it either. Even though it's not a stick, it's a similar principle.

If the hardware is good and cheap, it should be a fun project to replace the OS with a custom Android build that is clean of adware.

Do you have a link to the projector?

Re: Read this before you buy that TV streaming stick

#396

Earlier quoted context omitted.

At least in capitalism you have the choice to look for a malware-free alternative. 100% USSR, had it survived to the IoT era, would penalize you for not having a state-mandated surveillance device on at all times.

I agree fully with your assessment of USSR but basically any nation state with the power does such things. Show me a COTS smartphone where the end-user can burn the OTP fuses for his personal public key, so they can have it boot their own custom signed firmware, and control exactly what runs in TrustZone's SW Secure World?

You can flash yourself GrapheneOS with your own keys for the bootloader. Then again "I can't make sure all manufacturers aren't in collusion" when FBI sues Apple and others (and fails) over suspects' phone access is quite different from "every device sold in the country must have government malware", as it is in China.

Re: Read this before you buy that TV streaming stick

#397

Earlier quoted context omitted.

> TIL: Xinjiang tomatoes are something like 15% of the global market! China consumes 37% of the world’s tomatoes. 80% of China’s processed tomatoes are from xinjiang. Fresh tomatoes are generally grown locally, but that is true around the world.

China _produces_ 37% of the world's tomatoes, not consumes.

[dead]

Re: Read this before you buy that TV streaming stick

#398
post #67

I bet this is much broader than we all realized because just earlier today I was reading on https://gist.github.com/probonopd/3ad6b7777caea1503f00d5fe77... in order to tinker with a cheap (like really cheap) Android video projector : "Device: Magcubic HY300 Pro Android Projector (ui_Veng.projector) Issue: Device was being used as a residential proxy node without consent, causing thousands of suspicious DNS requests a…

Oh wow that's the same projector I have. Would be really cool to install a custom build on it, but for now I just have an Apple TV connected to it.

You can already adb connect in dev mode then install .apks, e.g. termux, Fennec and change some settings. It does seem rootable but I didn't try.

Re: Read this before you buy that TV streaming stick

#399

Earlier quoted context omitted.

The FCC tests electronics for radio interference. Perhaps they could test electronics for Internet behavior like this too? Some manufacturers will try to cheat on the tests, but we have AI security checking now, so maybe that would make it harder to cheat?

That sounds like a fast track to government control of what operating systems are allowed. These aren’t just electronics, they are low power computers that happen to have an OS and software preinstalled. (I’d be open to a rule that devices must allow users to wipe the devices and install their own OS.)

On the other hand, I suppose if the OS on a TV stick ran in a hardware-enforced sandbox that restricted network access to certain necessary domains, it couldn't be used for scraping websites and ad fraud? It's not being sold as a general-purpose computer so maybe it shouldn't be one.
Post reply on HN