Live data from Hacker News

Samsung Blu-ray players bricked because of an XML config file

theregister.com

101–110 of 181 posts

Re: Samsung Blu-ray players bricked because of an XML config file

#101
post #21

I think the best approach is to never, ever connect a device like a TV, Blu-ray player, etc to the internet. That's the only way they'll survive. So far no HDMI-based attacks. Hotglue the ethernet port?

At least TVs on the (originally) European DVB broadcast system can pick up firmware from broadcasts. Packets in the transport stream include the necessary firmware.

ISDB-T has similar system and some Toshiba DVRs at some point had similar mass bootloop I remember

Re: Samsung Blu-ray players bricked because of an XML config file

#102

Earlier quoted context omitted.

How do you think manufactures can afford to sell these large screens at such cheap prices. They continue to make money off of you long after the initial sale. I'm surprised they just don't give them away (except it would probably raise too many questions). Your digital cable boxes have been doing this for even longer.

They aren't getting much back from selling the data. Maybe $20 off.

And that is based on what data? BigCorps tend to not continue doing something if it's not going to bring them much return.

Re: Samsung Blu-ray players bricked because of an XML config file

#104
post #22
post #20

Are these running Tizen?

Probably. Samsung hired thousands of c++ developers in a particular low-cost country to build Tizen. You can't really hire that many quality developers that quickly, and it showed.

Tizen is not a bad system by itself. For example, all Samsung watches run it, and they're the best wearables after iwatch.

Re: Samsung Blu-ray players bricked because of an XML config file

#105
post #36

Earlier quoted context omitted.

What language makes it impossible to write if parse(config) == false then reboot?

Impossible is a big word :). But while a C or C++ program tends to crash in the presence of an error, like with a segfault, a lot of languages just throw an error which you can catch. So you could proceed with the default values, if the file cannot be read correctly.

Oh please. C and C++ programs can be coded to fail gracefully and "a lot of languages" fail in unpredictable and unfortunate ways and shitty programmers still don't catch those magic errors. This is a matter of crappy engineering, not per se crappy language.

Re: Samsung Blu-ray players bricked because of an XML config file

#106
post #61

Earlier quoted context omitted.

I'm with you, and I prefer "dumb" devices, but you can still buy these blu-ray players and not connect them to the internet. The internet connectivity is sold as an additional feature so that you can use your blu-ray player to watch Netflix. I agree that I don't want logging on a device like this, but if I was going to connect one of these to the internet, I would at least want regular security updates.

Vote with your wallet. Don't buy these internet devices. All it takes is for a visiting family member or friend who wants to watch Netflix while you're in another room/asleep/etc to click okay.

That’s what my in-laws did. “For some reason you hadn’t connected your smart TV to the internet; instead of using your Apple TV, we gave TCL your WiFi password. Aren’t you proud we figured it out on our own?”

Re: Samsung Blu-ray players bricked because of an XML config file

#108
post #61

Earlier quoted context omitted.

I'm with you, and I prefer "dumb" devices, but you can still buy these blu-ray players and not connect them to the internet. The internet connectivity is sold as an additional feature so that you can use your blu-ray player to watch Netflix. I agree that I don't want logging on a device like this, but if I was going to connect one of these to the internet, I would at least want regular security updates.

Vote with your wallet. Don't buy these internet devices. All it takes is for a visiting family member or friend who wants to watch Netflix while you're in another room/asleep/etc to click okay.

Wow. I hadn't thought of this vulnerability. Time to set up MAC address blacklists on my router.

Re: Samsung Blu-ray players bricked because of an XML config file

#109
post #79

Earlier quoted context omitted.

> needs constant firmware updates Firmware updates are good. They can patch security issues and they can improve different aspects of the device. The security being the best plus obviously. Wholeheartedly agree that there is no reason for a company like Samsung to track your every move despite you paying them hundreds for said devive. I'd be very surprised if they don't make a hefty profit from such devices. So why t…

What security updates would you foresee being necessary for a traditional BluRay player? Perhaps I'm not being creative enough, but I can't think of what a hacker would accomplish. Other than allowing the player to read pirated BluRays, I guess, but that's not the user's problem.

I don't know about security per se (as others have mentioned a dumb player doesn't need internet), but I could very easily see a decoder bugfix or something to do with i/o error conditions or mishandling some particular kind of disc...

Re: Samsung Blu-ray players bricked because of an XML config file

#110
post #68

Earlier quoted context omitted.

Easier said than done. It’s increasingly difficult to find a “dumb” TV these days. Almost all have smart functionality. (and besides, most TVs have other ways of watching Netflix that ought to be more convenient for a visitor. A $30 Roku stick is all you need)

Don't buy a TV then, buy a monitor. https://www.dell.com/en-uk/work/shop/dell-55-4k-conference-r...

Is there any difference in display quality between a monitor and a TV with roughly the same specs?
Post reply on HN