Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Impending Doom of Expiring Root CAs and Legacy Clients

scotthelme.co.uk

Post reply on HN
Print view View original

161–170 of 209 posts

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#161

Post by cptskippy »

the_pwner224 wrote: post #137
cptskippy wrote: post #47

Earlier quoted context omitted.

I can't speak for their latest and greatest but the LG TVs I've used running webOS (Oled and LCD) work fine without ever being connected to a network. I have a C7P panel I've connected via Ethernet a couple times to update the firmware and it has continued to work offline just fine. They also support CEC so if the devices you're plugging into them support CEC you can just put the TV remove into a drawer and not worry…

> I have a C7P panel I've connected via Ethernet a couple times to update the firmware and it has continued to work offline just fine. You may want to be careful with this. On Amazon Kindles when you connect to WiFi it downloads ads and will keep showing those same ones forever if you never reconnect and let it fetch newer ads. Seems the TV doesn't do it yet, but it could be added in a firmware update. Unrelated, wha…

To fix some issues with a Roku Premiere Plus and switching refresh rates causing screen blanking because if those stupid Netflix Autoplay trailers.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#162

Post by payamb »

hamiltont wrote: post #78

Has anyone taken the offered training? I'm pretty good with TLS, but could use more hands-on time with openssl and PKI, especially a deeper understanding of certificate chaining issues. Would be interesting to know if the training is targeted at "total beginner" or "intermediate looking to be advanced"

I’ve taken the training and I recommend it, Keep in mind though that TLS and PKI are broad subjects and covering every intermediate/advanced use case in a two days training won’t be possible. But yeah it does cover certificate chaining issues, cross signing etc.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#163

Post by jiggawatts »

myself248 wrote: post #37
hanklazard wrote: post #9

Earlier quoted context omitted.

Someone on HN recently floated the idea of a company that would make quality, non-smart electronics and appliances that would also be easily serviceable. I wish this existed and would pay significantly more for products like this. To address your question, I think they’re all “smart” now. I ended up getting a low-end Samsung 4K a few months ago and it’s been good so far. It starts up very quickly, maybe 1-2 seconds.…

Specifically for TVs, you can get a new display driver board for whatever panel is in there. Eats HDMI/DP, spits out eDP or VBO or whatever the panel format is. Often these are pretty basic, with a minimal OSD pasted in by the Shenzhen seller who configures the thing to your order. Personally I'm trying to get my hands on the SDK for the software that runs in the driver chip (does the OSD and the scaling and everythi…

> Specifically for TVs, you can get a new display driver board for whatever panel is in there.

Is this something that is practical and commonly done, or only theoretically possible?

I have an older model Sony 4K TV (pre-Android) that is so slow now after its recent firmware updates that it responds to button presses only after 2-3 seconds. It's unbearable!

I'd love to be able to just pop in a new driver board and refresh the TV, but I've never heard of anyone doing this kind of thing before.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#164

Post by chihuahua »

koolba wrote: post #22
hanklazard wrote: post #9

Earlier quoted context omitted.

Someone on HN recently floated the idea of a company that would make quality, non-smart electronics and appliances that would also be easily serviceable. I wish this existed and would pay significantly more for products like this. To address your question, I think they’re all “smart” now. I ended up getting a low-end Samsung 4K a few months ago and it’s been good so far. It starts up very quickly, maybe 1-2 seconds.…

Never add your WiFi credentials you your TV. It doesn’t let you remove them so you’re only option is to create a “dummy” network (ex: phone as a hotspot) and switch to it. Also, watch out for clueless^helpful friends and relatives who try to “fix” your TV’s WiFi.

I had this problem with a Vizio 40" 4K TV once, and was able to solve it using the factory reset function in the menu.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#165

Post by chihuahua »

DaiPlusPlus wrote: post #157
chrisweekly wrote: post #155

Earlier quoted context omitted.

Curious why multiple HDMI inputs matter, given a decent A/V receiver (a few hundred bucks) can handle it for you (along with waay better options for audio)?

AVRs are a huge hassle to deal with, and overkill when you only have 2 or 3 devices to switch between and/or don’t have many audio-only devices. AVRs made more sense during the days when we’d have CD players, tape decks, VCRs and DVD player, vinyl record players, cable/satellite STBs, and a game console or two all hooked up. Now it’s just an STB (if you aren’t a cord-cutter), a Roku/AppleTV/Chromecast/FireTV, and may…

Without an AV Receiver, how would you drive a set of speakers?

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#166

Post by hanklazard »

syshum wrote: post #95
koolba wrote: post #22

Earlier quoted context omitted.

Never add your WiFi credentials you your TV. It doesn’t let you remove them so you’re only option is to create a “dummy” network (ex: phone as a hotspot) and switch to it. Also, watch out for clueless^helpful friends and relatives who try to “fix” your TV’s WiFi.

This is why you segment out your WiFi, I have 4 SSID's 1. Normal Traffic 2. Guest 3. Security Devices (Camera's, and other Home Automation) 4. Media Devices (Roku, FireTV, Smart TV's, etc) media devices only have access to my home Plex server and the internet nothing else

Yeah, VLANs work for a TV that is only trying to connect to your network, but doesn't deal with the case of a TV that will connect to any open SSID (a case that at least one other commenter in this thread claims is already occurring). It wouldn't be difficult to have the TV check different open networks if it's not able to reach a server due to a firewall config on the home network. For anyone living in a relatively dense city, this could be a problem.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#167

Post by robrtsql »

jjoonathan wrote: post #90
oarsinsync wrote: post #64

Earlier quoted context omitted.

> I’m just waiting for the day when all TVs require a working internet connection We're not there yet, but we're on our way. My Philips Ambilight TV pops up a warning every few weeks to remind me that I should connect the TV to the network to benefit from all the smart apps it has bundled. Immensely frustrating.

My TCL bootloops if it doesn't have an internet connection. It also shows ads on its screensaver. Coincidence? Dunno, but it's sure making TCL money and making me miserable.

Can you factory reset it? I have a TCL Roku TV which I've never connected to the Internet and it shows a pretty standard 'logo bouncing around the edges of the screen' screensaver.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#168

Post by recursive »

chihuahua wrote: post #165
DaiPlusPlus wrote: post #157

Earlier quoted context omitted.

AVRs are a huge hassle to deal with, and overkill when you only have 2 or 3 devices to switch between and/or don’t have many audio-only devices. AVRs made more sense during the days when we’d have CD players, tape decks, VCRs and DVD player, vinyl record players, cable/satellite STBs, and a game console or two all hooked up. Now it’s just an STB (if you aren’t a cord-cutter), a Roku/AppleTV/Chromecast/FireTV, and may…

Without an AV Receiver, how would you drive a set of speakers?

I use powered studio monitors. They drive themselves.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#169

Post by kstrauser »

jakub_g wrote: post #65

Smart TVs are the worst. Unrelated to TLS: I work for a video streaming company, and while almost all of desktop/mobile Chromium-based traffic is Chrome v80+ or at least v70+, the smart TVs have webviews based on Chromium v45~55 (most TVs) or ~v60 (cutting edge modern Samsungs), and some older ones (~2016) are even worse, based on a very outdated webkit which is more or less Safari 8.0 - basically hardly better than…

If this is the newspaper-whack-to-the-nose that gets people to stop using sly TVs as more than dumb monitors, then I think we'd all be better off for it.

Re: The Impending Doom of Expiring Root CAs and Legacy Clients

#170

Post by stephen_g »

kmonsen wrote: post #68
geerlingguy wrote: post #3

I begrudgingly bought a 'Smart TV' just because I wanted a 4K monitor. But I use it as a dumb monitor and watch app-based content through an Apple TV. At least I'm reasonably sure the Apple TV will be updated for 5-10 years, and is a lot more disposable than a giant TV. My last TV worked great for about 12 years. No way Panasonic would've kept supporting it that long. Honestly, the thing I hate most about smart TVs,…

They are all smart, because that is actually cheaper. The manufacturers earn money on selling what your view, ads and selling subscriptions. And they make more on this than it costs to make the TV "smart". There was a Vergecast with the Vizio CEO and he said this is the new business model. Notice that both Samsung and Sony are testing with ads on the homescreen, if those two are willing to do this as premium brands y…

The cost to make the TV smart is almost nothing (the software would cost a bit, but from every smart TV I've seen not as much as it should because it's always pretty crappy and janky). The additional BOM cost would be a few dollars at the quantity they make these things in for an ARM SoC and some RAM.

I really think he's massively exaggerating. His statements might be more rationalisation because people hate it, but they just want to squeeze more money out of people. But I can't believe that showing some ads and fingerprinting content would net them more than $100 over the life of an average TV. I'm sure there are plenty of people who would pay more than that for a no-ads, no network connection required version.

Post reply on HN