Live data from Hacker News

All of Oculus’s Rift headsets have stopped working due to an expired certificate

techcrunch.com

331–340 of 390 posts

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#331

Earlier quoted context omitted.

Wow! I'm glad you were able to get it figured out. Sounds like a nightmare scenario. By the way, do you have any links to your surgical training startup? I'm doing some research into VR/AR for surgical telementoring and training and would be interested in seeing how it's in use.

Osso VR - http://ossovr.com/ We've had a fair amount of press coverage in specialist press recently so a search for Osso VR should turn up some recent articles too.

"I was a former game developer turned orthopaedic surgeon." [1]

Wow. That guy sounds interesting...

[1] https://www.youtube.com/watch?v=bqra7wslwCM

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#332

Earlier quoted context omitted.

A day off is nice, but doesn't mean that much in the scheme of things. I would like to see more companies write a Thank You letter from the CEO, signed by his managers. Something that he could use during his performance evaluations at the company, or attach to his resume for any other jobs. It's hard to get concrete evidence like that, which shows your value to the company. It would great to have documentation that c…

While the letter indeed would be nice, I'd much prefer the raise if it was me.

Or a bonus...

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#333

Earlier quoted context omitted.

I see the exclusives as a negative. I don't want to support their efforts to build a closed ecosystem around what should be an open API that any headmounted display + tracking can expose.

> I see the exclusives as a negative Would anyone with a straight face say the same about Nintendo's exclusives? I don't see anyone else in the market funding great things like Medium, Quil, Lone Echo, Robo Recall. Feels it's just cutting off your nose to spite your face to complain about this.

No, because the Switch is a game console whose hardware is produced by Nintendo to run Nintendo approved software. It doesn't allow homebrew by default and is a closed platform, and pretty much everyone buying one knows this.

An Oculus is not a standalone product; it is a peripheral that relies on an open PC platform for its processing. If software the Oculus uses can run on any PC and the Oculus does not have a unique hardware capacity to operate the software, then the exclusivity is an arbitrary constraint.

Oculus wants all the perks of being its own platform without the responsibility or technical merit.

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#334

They let their certificate expire, essentially bricking all of their devices. And now the app running it won't start, so they can't push an update. Just recently picked up a Rift. I love the hardware and their exclusives are top notch, but this confirms my suspicions that their backend is super goofy. They sell Rifts at Best Buy and want to pretend that it's a consumer-ready product, but here's why I am recommending…

> It sounds like they are moving their efforts towards "lighter" experiences.

Can you explain what this means in practice? I'm not super familiar with Rift but I'm curious.

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#335
post #274

Earlier quoted context omitted.

It's not like a cert is necessary for it to function. A VR headset is basically a monitor you wear on your face. This is their own poor design choice that just ensures they're going to lose business of anyone who needs reliability in their headset.

The "monitor you wear on your face" trope is simply inaccurate, and essentially a misunderstanding of the state of VR today. I say this not to either criticize you or excuse the mistake by Oculus (they really needed to countersign their cert with a timestamp server), but to educate. These are non-obvious issues to people that don't follow the VR sector. Monitors work without low-level drivers because their maturity (…

> For the Rift, the hand controllers are wireless input devices refreshing at 1,000Hz;

Could you share more info on this? Is it actually possible to poll the devices at that resolution from code?

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#336
post #258

Earlier quoted context omitted.

Hardly original, kids have been using this to extend the trial periods of shareware since forever. Most Rift users have been using RunAsDate which hooks the kernel's time APIs.

Yup, hardly original to think of a non-obvious security work around the morning of a conference that could potentially make or break the company's future success, while dealing with what must have been insane pressure from the everyone there to figure it out.

It's extremely obvious to anyone who's ever used shareware and it was also posted on reddit within like 5 minutes. Kudos for not using google I guess.

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#337

Earlier quoted context omitted.

Yes, you’re talking about the proliferation of declarative APIs over explicit, imperative ones. My pet theory is that because we typically understand our needs before we understand the code paths required to fulfill them, our V1 APIs are usually a declarative “this is what should be” interface. Then we spend days or months making it happen and by the time we understand the required code paths, we’ve totally baked our…

I lean towards providing both -- high-level abstractions sufficient for the 90% built on lower-level abstractions that are available if needed.

Declarative/imperative is orthogonal to high level/low level.

You can have high level imperative APIs... they just need to be explicit.

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#338

Earlier quoted context omitted.

Yeah but, certs are not necessary for the oculus rift to function.

Drivers are necessary for the rift to function, and certs are necessary for drivers to function.

This is why half of the blame lies with Microsoft for following the rest of the industry into making software for grandma's protection at the detriment of software freedoms.

An enterprising user can turn off these driver signing enforcement settings but it's quite a song and dance and first you have to even be aware of it.

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#339

Earlier quoted context omitted.

The problem in this case is much deeper than their fault / your fault. The problem is that in this industry we do (have to?) lean too much on the power of abstraction. Whether you are writing SQL or graphics code you are constantly told "just express what you want to express directly, and the system is smart enough to do things as efficiently as possible". But that might not be very efficient at all. The people who w…

"...or graphics code you are constantly told "just express what you want to express directly, and the system is smart enough to do things as efficiently as possible"." Who is saying that? I've worked in video games for 18 years and never heard that. In fact, anyone who said that would get puzzled and suspicious looks. We generally use a very C-like variant of C++.

Your comment sounds accurate from what little I know of the game community. But the reason it is fun to read about game programing is precisely because you guys are so willing to dive into the detail.

I was responding to a comment about Cairo graphics, which I assume is not much used in games. The kind of graphics I was thinking about is things like Cairo, Windows WPF, the Web.

That said: once upon a long time, OpenGL was supposed to be achieve efficiency by being high level so that the rendering stack could optimise your drawing better than you could. That idea didn't work so well and modern OpenGL seems to take the opposite approach.

Re: All of Oculus’s Rift headsets have stopped working due to an expired certificate

#340
post #304

Earlier quoted context omitted.

You said a cert is required, but the footnote quote says drivers must be signed. Being signed doesn't expire. Could you rectify the discrepancy and explain why an expiring cert is a requirement for VR, your analysis (though clearly highly informed) seems spurious to me.

Rereading your question, I realize I may have not actually answered an underlying topic: what is the difference between a certificate and a signature? The short answer is: - a "certificate" contains a number of things: a portion of an asymmetric key (either public or private), and a ton of metadata[1] to give information about that key: validity period, algorithms used, version, etc. - a "signature" is the result of…

> So if that creation certificate expires (or is revoked) it calls into question the validity of the signature(s) created from that certificate.

Are you arguing that already-installed drivers should no longer be trusted? I can't tell.

If a cert expires at time T, the usual assumption is that forging signatures before T is not feasible (otherwise the expiration was poorly chosen), while forging signatures after T might be feasible.

If it's after T and we see a new update, we don't know whether the signature was crafted before or after T, so we should assume the latter and reject it.

But if we've already installed a driver, then we must have received its signature before T, otherwise we wouldn't have installed it at the time. So we should still continue to trust it after T.

Post reply on HN