Live data from Hacker News

Samsung Blu-ray players bricked because of an XML config file

theregister.com

151–160 of 181 posts

Re: Samsung Blu-ray players bricked because of an XML config file

#151
post #36

Earlier quoted context omitted.

What language makes it impossible to write if parse(config) == false then reboot?

Impossible is a big word :). But while a C or C++ program tends to crash in the presence of an error, like with a segfault, a lot of languages just throw an error which you can catch. So you could proceed with the default values, if the file cannot be read correctly.

"can catch" doesn't give you anything, unless you actually do the catching.

C and C++ programs tend to crash in the presence of an error, but so do rust programs (panic), C# and java and js and python programs (unhandled exception). Some languages make it harder to footgun yourself for certain types of errors, but never all types of errors.

I have seen js programs (and similar stuff in other languages) crash because of something like

    JSON.parse(response).list[0].string.length
where the response was valid json, just the .list property was an empty array (or even undefined because omitted in the json).

Does rust protect from such mistakes (because I know some people on here like to claim rust is the answer to everything)? Verbatim from their docs:

    let v = vec![0, 2, 4, 6];
    println!("{}", v[6]); // it will panic!
I'd guess it's exactly such type of bounds error at play with the Saumsung thing, from the mention of that empty element in the article.

I have written such code myself because I was lazy or distracted or "need performance" or "this can never be empty per spec" or "oops, my range calculation was off by one", tho luckily I didn't outright brick anything, yet.

Re: Samsung Blu-ray players bricked because of an XML config file

#152

One thing you have to understand is that these internet-connected Blu-ray players in question are programmed to log their activities and send copies of this information to Samsung. In some ways, this is even more disturbing than the bricking. Only corporate greed can create a media player that watches you and needs constant firmware updates. I have a VCR and DVD player which still work, and things like this are the r…

> Only corporate greed

Go read up about the Cheka, Mao, and the Stasi.

I use Fastmail, eschew most social media, and run a PinePhone. I'm not a fan of corporate surveillance.

But they're amateurs compared with the murderous surveillance states of years past.

Re: Samsung Blu-ray players bricked because of an XML config file

#153
post #139
post #131

Earlier quoted context omitted.

> Best solution is to "air gap" your TV by not connecting it your wifi or ethernet. How long will it be before TVs embed a cellular modem with manufacturer-paid service to keep the smart features connected? “No setup, works straight out of the box” has to have at least some marketing value, after all.

That's exactly the point of 5G, if I understand it correctly.

Metal roof. Line walls with metallic insulation. There might be something available for the windows too.

Re: Samsung Blu-ray players bricked because of an XML config file

#154
post #69

You broke it, you bought it Samsung. Full refund. Pick up the device at your expense or provide disposal costs as well. Warranty is not any part of the issue if you come into my house and break a thing I own and is my property.

What makes you think that what they broke is your property?

Read the EULA. It almost certainly specifies that what you think you own, has in fact just been licensed to you.

Re: Samsung Blu-ray players bricked because of an XML config file

#155

Earlier quoted context omitted.

It's worse than you think - it's not just your DVD player that's spying on you, but your TV is too -- many TV's use Automated Content Recognition to detect what you're watching regardless of source (DVD, over the air, streaming app, etc). They even detect commercials, and which language you're listening to. https://www.adexchanger.com/ad-exchange-news/the-marketers-g...

"The telescreen received and transmitted simultaneously. Any sound that Winston made, above the level of a very low whisper, would be picked up by it, moreover, so long as he remained within the field of vision which the metal plaque commanded, he could be seen as well as heard. There was of course no way of knowing whether you were being watched at any given moment. How often, or on what system, the Thought Police p…

> except in darkness,

With modern cameras even darkness is no guarantee.

Re: Samsung Blu-ray players bricked because of an XML config file

#156
post #123

Earlier quoted context omitted.

It's essentially impossible to buy a consumer TV that's not "smart" these days. There are commercial TV's/monitors, but those are both expensive and also typically not focused on image quality. Best solution is to "air gap" your TV by not connecting it your wifi or ethernet.

Why do I need a TV? Arbitrarily large monitors are available for gaming.

And those manufacturers will double-down by scanning for an open wireless network and send the data stream without you knowing, or embed a cellular modem to bypass all that.

It's a truly disgusting trend.

Re: Samsung Blu-ray players bricked because of an XML config file

#157
post #123

Earlier quoted context omitted.

That's my answer. I'll never own a "smart TV", just decent gaming graphics with a large monitor.

It's essentially impossible to buy a consumer TV that's not "smart" these days. There are commercial TV's/monitors, but those are both expensive and also typically not focused on image quality. Best solution is to "air gap" your TV by not connecting it your wifi or ethernet.

I remember reading somewhere that some of them still tried to connect to any "open" WiFi network they could find

Re: Samsung Blu-ray players bricked because of an XML config file

#158

One thing you have to understand is that these internet-connected Blu-ray players in question are programmed to log their activities and send copies of this information to Samsung. In some ways, this is even more disturbing than the bricking. Only corporate greed can create a media player that watches you and needs constant firmware updates. I have a VCR and DVD player which still work, and things like this are the r…

You'll be surprised on how much crap Samsung packs into low-end & mid-end smartphones in India, especially since now the phones are made in India, available only in India(M-series). The phones have major international data hoarder apps, their equivalent in India and their Samsung equivalent with its own app downloading services which masquerades as system updates to force the gullible into downloading Samsung apps ev…

I just hope we have a clean option like Pinephone with flagship quality hardware soon.

Re: Samsung Blu-ray players bricked because of an XML config file

#159

Earlier quoted context omitted.

You'll be surprised on how much crap Samsung packs into low-end & mid-end smartphones in India, especially since now the phones are made in India, available only in India(M-series). The phones have major international data hoarder apps, their equivalent in India and their Samsung equivalent with its own app downloading services which masquerades as system updates to force the gullible into downloading Samsung apps ev…

I just hope we have a clean option like Pinephone with flagship quality hardware soon.

True, but unfortunately PinePhone shipments have been stopped to India & Russia[1]. I assume that would be the case for many other brands shipping their handsets from China/HongKong to India.

So, these local manufacturers are going to have free run shipping crap embedded phones for a long time.

[1]https://www.pine64.org/2020/07/15/july-updatepmos-ce-pre-ord...

Re: Samsung Blu-ray players bricked because of an XML config file

#160

Earlier quoted context omitted.

At least TVs on the (originally) European DVB broadcast system can pick up firmware from broadcasts. Packets in the transport stream include the necessary firmware.

Is there anywhere I can read more about the technical details behind this? It sounds pretty interesting. I searched for "DVB firmware", but didn't find much.

There are several Methods for this - search for OTA... One of our STB models are still using OTA via DVB-C (I’m in Denmark). Only without the the last few months are we replacing the QAM based SWUPDATE mechanism to an TCP/IP based mechanism (IP is required for using the STB in the first place even though it’s a DVB-C BOX)

EDIT Here are the standards you want to read: https://dvb.org/?standard=specification-for-system-software-...

Post reply on HN