Live data from Hacker News

FTDI driver kills fake FTDI FT232s

eevblog.com

151–160 of 315 posts

Re: FTDI driver kills fake FTDI FT232s

#151

The real problem here is that USB does not define a standard interface for an RS-232 adapter. Proprietary drivers should never have been required for these. Same deal for Centronics printer adapters.

It does, it's called CDC and there are plenty of other adapters that use it. Which is why I think the popularity of FTDI adapters is surprising in some ways.

Re: FTDI driver kills fake FTDI FT232s

#152
post #132
post #126

It's interesting to consider from a legal perspective exactly why this isn't something a company is allowed to do. (Assuming the company did in fact intentionally damage people's chips, reversibly or not -- sounds like we don't know for sure yet?) - Intentionally sabotaging someone's stuff, legally, is more or less the same as intentionally taking it. Keying a car and driving it away might have different names but ar…

One could argue that using the official driver with counterfeit chips is outside intended purpose of the official driver, at which point the user is proceeding at his or her own risk.

I think if somebody steals your bike, they ride it away at their own risk, but...

* That doesn't mean you can shoot them as they ride away.

* It also doesn't mean you can booby trap your bike.

Re: FTDI driver kills fake FTDI FT232s

#153
post #20
post #8

Earlier quoted context omitted.

> purposely reprogramming them to make them non-functional isn't Dumb question maybe, but why?

In addition to the other posted replies, it's bad software engineering. You really can't be confident enough in your logic to ever start issuing DESTROY_HARDWARE() commands of any kind, short of the small set of very specialized programs that may be deliberately used for such things (FPGA programmers, etc). Any error whatsoever and you may end up nuking your real customer's hardware. Bad plan. Same reason why program…

Thanks, that's a great answer, but I guess I'm curious about legal/ethical considerations.

Re: FTDI driver kills fake FTDI FT232s

#154
post #97

Earlier quoted context omitted.

Nobody would fault FTDI for releasing new drivers that don't work with counterfeit parts. That alone would cause enough inconvenience to manufacturers to make sure they use legitimate parts. It's the (unethical) bricking of the parts that has everybody up in arms.

Tangentially: people totally would fault FTDI for releasing drivers that don't work with counterfeit parts. See: Apple detecting and rejecting counterfeit iPhone cables.

The correct way is to detect counterfeit parts, display a huge warning and let the customer continue on their own risk. A similar process is used by the Linux kernel developers for non-opensource kernel modules: If you load them, the kernel becomes "tainted" and you won't get any support from the kernel developers if something goes wrong.

Re: FTDI driver kills fake FTDI FT232s

#155
post #8

Earlier quoted context omitted.

> purposely reprogramming them to make them non-functional isn't Dumb question maybe, but why?

You're damaging someone's hardware without their consent? Its essentially vandalism.

Sure, but the chips are illegal no? Where is the moral high ground coming from...

I'm not a supporter of intellectual property laws, but we have them, so I'd also be curious of any legal ground fake chip users have to stand on.

Re: FTDI driver kills fake FTDI FT232s

#156
post #135
post #97

Earlier quoted context omitted.

Nobody would fault FTDI for releasing new drivers that don't work with counterfeit parts. That alone would cause enough inconvenience to manufacturers to make sure they use legitimate parts. It's the (unethical) bricking of the parts that has everybody up in arms.

"bricking" doesn't seem to be the right word. FTDI is making it so that the counterfeit chips don't work with any FTDI drivers, old or new. (Per the thread, all that happens is the PID is changed to a PID that no FTDI driver will recognize)

Hey, an FTDI employee!

I'm surprised you found time away from scrubbing your Facebook page clean of all the disparaging comments.

My advice: Skip breakfast tomorrow morning - you're going to be eating quite a bit of crow for lunch.

Re: FTDI driver kills fake FTDI FT232s

#157
post #8

Earlier quoted context omitted.

> purposely reprogramming them to make them non-functional isn't Dumb question maybe, but why?

Making alterations to someone else's property without their consent for the express purpose of rendering it non-functional is commonly called vandalism.

In a culture with intellectual property laws I'm not sure that's true. Is it legal to destroy counterfeit handbags commonly sold on the street? Honest question, the police seem to do it frequently.

Re: FTDI driver kills fake FTDI FT232s

#158
I tried reporting this to Microsoft; their handling of calls to report security vulnerabilities was just horrendous.

=====

Hi,

I've been advised to email this address by 'XXXX' at Microsoft Support.

FTDI is shipping a malware driver for Windows; if it detects what it thinks is a counterfeit device plugged in by USB, it bricks it. Details here:

http://www.eevblog.com/forum/reviews/ftdi-driver-kills-fake-...

I've also attempted to report this by phone as suggested by XXXX. I've never experienced such difficulty trying to report a security issue; I'd have expected that you'd have processes in place, but apparently not.

My first attempt was met by a CSR who informed me that he knew of no protocol for reporting security issues, and that he couldn't help me because it wasn't directly effecting my computer. He then hung up on me when I asked to speak to a supervisor.

Second call got me a much more helpful chap, who after conferring with a supervisor, transferred me to professional services. The person I spoke with there said they also didn't have any security reporting protocol, or if they did, he didn't know about it. When I said the issue could effect thousands of devices, he transferred me through to 'corporate'.

I ended up going through an IVR system to an operator, who was no help whatsoever. She was entirely the wrong person to speak to; she was also completely ignorant of any security reporting process, and didn't know who to transfer me to.

Could you please call me on +61 XXX XXX XXX to acknowledge receipt of this report, and to discuss it? Thanks.

=====

Re: FTDI driver kills fake FTDI FT232s

#159
post #97

Earlier quoted context omitted.

Nobody would fault FTDI for releasing new drivers that don't work with counterfeit parts. That alone would cause enough inconvenience to manufacturers to make sure they use legitimate parts. It's the (unethical) bricking of the parts that has everybody up in arms.

Tangentially: people totally would fault FTDI for releasing drivers that don't work with counterfeit parts. See: Apple detecting and rejecting counterfeit iPhone cables.

Yes, people would fault them for removing functionality.

The problem in that case is not the actual new drivers, but the process of uninstalling the old working drivers.

Re: FTDI driver kills fake FTDI FT232s

#160
post #34
post #17

Earlier quoted context omitted.

The FTDI OSX drivers will still randomly cause kernel panics when the device is unplugged and a program still holds an open file descriptor for the serial port. While working with a company which was developing and selling products with FTDI chips in them, we made FTDI aware of this issue and attached many panic logs. It's been about 5 years and they've still yet to actually fix it.

OS X ships with an FTDI driver since 10.9. I suspect this one is made by Apple. Maybe because of this kind of issues. Do you still have crashes on 10.9+?

Unfortunately, the Apple driver exhibits the same issue. It also doesn't support the control lines on the FT232 (e.g, DSR/DTR, RTS/CTS).
Post reply on HN