Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 10 submissions in the queue.
posted by janrinok on Thursday March 08 2018, @03:21AM   Printer-friendly
from the internet-or-security dept.

Ross Anderson in the Security Group at the University of Cambridge Computer Laboratory asks some questions about whether durable goods such as cars can be Internet-connected and yet provide sufficient privacy and safety. It's not a deep discussion but it does raise a few other pertainent questions.

Perhaps the biggest challenge will be durability. At present we have a hard time patching a phone that's three years old. Yet the average age of a UK car at scrappage is about 14 years, and rising all the time; cars used to last 100,000 miles in the 1980s but now keep going for nearer 200,000. As the embedded carbon cost of a car is about equal to that of the fuel it will burn over its lifetime, we just can't afford to scrap cars after five years, as do we laptops.

Meters and medical devices are two more examples of hardware that can cause great harm when control of the integrated software is taken over by malfeasants.

Source : Making security sustainable.
and Making Security Sustainable: Can there be an Internet of durable goods? (warning for PDF)


Original Submission

Related Stories

Chapters of Security Engineering, Third Edition, Begin to Arrive Online for Review 4 comments

Ross Anderson, a British professor who was recently denied entrance to the US, well-known for his extensive background in cryptography and computer security research, is in the process of writing a new edition of his book on computer security engineering. So far, the preface and two chapters of Security Engineering, 3rd edition are online available for review. Other chapters will follow online as well. The first and second editions will remain available too.

Today I put online a chapter on Who is the Opponent, which draws together what we learned from Snowden and others about the capabilities of state actors, together with what we've learned about cybercrime actors as a result of running the Cambridge Cybercrime Centre. Isn't it odd that almost six years after Snowden, nobody's tried to pull together what we learned into a coherent summary?

There's also a chapter on Surveillance or Privacy which looks at policy. What's the privacy landscape now, and what might we expect from the tussles over data retention, government backdoors and censorship more generally?

Earlier on SN:
Sustainable Security for Durable Goods (2018)
Daniel Stenberg, Author of cURL and libcurl, Denied US Visit Again (2018)


Original Submission

This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
  • (Score: 5, Informative) by Runaway1956 on Thursday March 08 2018, @03:34AM (21 children)

    by Runaway1956 (2926) Subscriber Badge on Thursday March 08 2018, @03:34AM (#649309) Journal

    At present we have a hard time patching a phone that's three years old.

    No, we don't have a hard time patching a three year old phone. What we have in reality, are vendors who simply refuse to patch three year old hardware, because that forces you to purchase new hardware. Patching the old hardware poses no great difficulty, if the vendors are just willing to maintain that hardware.

    • (Score: 3, Insightful) by Adamsjas on Thursday March 08 2018, @03:54AM (6 children)

      by Adamsjas (4507) on Thursday March 08 2018, @03:54AM (#649318)

      Well, nice rant, but not totally true.

      Since I've owned a cell phone two network standard radio protocols have been totally shut down by US carriers. Current phones dropped those as well, but I was using phones that were working fine right up to the day they decided to shut down the towers handling them.

      But my long since disused Razr, iPhone, and one early android still work as phones today If I bothered to put a current sim in them.

      Its all the crap software that they pile on that kills these old phones. 3g, 4g, LTE, even GPRS data still works. And isn't going away any time soon.

      But the problem isn't that hard to solve. Mandate a socket that you can plug in a replacement radio into.

      And all future cars have to have that socket. Replacement socket kits should also be an easy thing to provide, if not by the manufacturer, then by the third party market. Just like software, specify the interface structure and protocol, and let each side (car and radio) do what they want behind their respective interface.

      • (Score: 3, Insightful) by Arik on Thursday March 08 2018, @03:58AM (3 children)

        by Arik (4543) on Thursday March 08 2018, @03:58AM (#649321) Journal
        "the day they decided to shut down the towers handling them."

        *THEY DECIDED.*

        They turned off the towers, of course your phone quit working. That has nothing to do with it. The phone itself had no problem, it would have kept right on working.

        --
        If laughter is the best medicine, who are the best doctors?
        • (Score: 3, Insightful) by frojack on Thursday March 08 2018, @06:03AM (2 children)

          by frojack (1554) on Thursday March 08 2018, @06:03AM (#649354) Journal

          Wasn't that exactly his point? His various phones contused to work till the day the carriers ceased to support that type of cellular connection, probably because that radio type was uneconomic.

          Kind of like Leaded Gasoline. That 60's era vintage car is just going to have to be tuned to deal with it.

          As long as cars with internet connections can operate without that connection, (such as in cellular dead zones), and the radio system can be changed out, there shouldn't be a problem.

          --
          No, you are mistaken. I've always had this sig.
          • (Score: 3, Interesting) by JoeMerchant on Thursday March 08 2018, @01:55PM

            by JoeMerchant (3937) on Thursday March 08 2018, @01:55PM (#649478)

            Before I signed up for my first cellular service, I bought a pair of tri-band Ham handhelds. They were good for making contact with the SO when she picked me up at the airport, and out in the woods there was a repeater tower that could call in to town and maybe summon an ambulance if required.

            20 years later, those handhelds still work like they always did (though the batteries are NiCad and a bit weak, could spring for a LiPo version today if I cared) - and they only cost about as much as one year's cellular contract.

            --
            🌻🌻 [google.com]
          • (Score: 3, Insightful) by Arik on Thursday March 08 2018, @02:58PM

            by Arik (4543) on Thursday March 08 2018, @02:58PM (#649502) Journal
            " His various phones contused to work till the day the carriers ceased to support that type of cellular connection, probably because that radio type was uneconomic."

            Meaning they calculated they could make more money by forcing 'upgrades' to even shittier 'phones' in the process? The ones that spy on the customer for ad-server kickbacks?

            The word you're looking for is not 'uneconomic' it's 'unkleptocratic.'

            --
            If laughter is the best medicine, who are the best doctors?
      • (Score: 1, Informative) by Anonymous Coward on Thursday March 08 2018, @07:59AM (1 child)

        by Anonymous Coward on Thursday March 08 2018, @07:59AM (#649394)

        They used to have that. Car radios had DIN slots and ISO connectors, and often replacing a radio was so easy that a burglar could do it in under a minute.

        My current car was manufactured with a cassette player. The previous owner replaced it with a CD player. I replaced it with one that takes both USB (A) and SD card (full size).

        Nowadays radios are connected to everything, and almost impossible to replace. At the same time, don't expect USB and SD cards to last anywhere near as long as cassette tape did.

        Anyone buying a new car today, you should demand that the radio either be replaceable or come with USB-5/E, nano-SD and be able to receive both DAB+++ and DVB-H4.

        • (Score: 4, Insightful) by anubi on Thursday March 08 2018, @12:12PM

          by anubi (2828) on Thursday March 08 2018, @12:12PM (#649455) Journal

          Tell me about it. When I was trying to buy a new vehicle about two years ago, every visit to the showroom was immediately followed by a bout of nausea.

          What I was being shown went against everything I believe in.

          5 minutes in the showroom and I was ready to puke.

          I ended up buying a 20+ year old diesel van off of Craigslist. At that point, I had made up my mind I would do whatever it took to get the older machine back up to snuff.

          --
          "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
    • (Score: 3, Interesting) by JoeMerchant on Thursday March 08 2018, @04:25AM (8 children)

      by JoeMerchant (3937) on Thursday March 08 2018, @04:25AM (#649329)

      vendors who simply refuse to patch three year old hardware, because that forces you to purchase new hardware

      Be grateful that your 3 year old phone still works as well as it did 3 years ago. When a certain fruity phone and device company pushes updates to their old hardware, they degrade the performance - sometimes to completely unusable levels. Meanwhile, on the dark side, Microsoft did the same thing to Windows XP - it ran great on the old Atom processors when they came out, but 5 years later it was dog-slow, re-install from CD-ROM and forbid updates and it's snappy again.

      --
      🌻🌻 [google.com]
      • (Score: 4, Interesting) by anubi on Thursday March 08 2018, @08:04AM (7 children)

        by anubi (2828) on Thursday March 08 2018, @08:04AM (#649396) Journal

        I still have several DOS and WIN95 systems running absolutely perfectly... still doing what they were programmed to do.

        Amazingly, I even still have some of those old CDC 40MB MFM disks still running... the Seagates all died though. Stiction got every last one of 'em.

        Not too concerned over the disks though... if they go, I have plenty of IDE and Flash memory alternatives. But as long as the disk runs, I just back up the programs and keep going. I still have a box of about a dozen of the things still in the garage somewhere. They just don't seem to die.

        Yes, I occasionally have to change out the clock battery, or put fresh capacitors in the power supply. Looking at the "AC volts" across the filter capacitors with my trusted 50 year old Triplett 630 VOM will spill the beans if the capacitors need changing.

        The only problem I see coming up is it is almost impossible to find a parallel port printer anymore. And I think soon the VGA displays I use will be scarce as the copyright people work with hardware manufacturers to "close the analog hole".

        When I build something, I expect it to work until it is dismantled. Not time out in three years or so. Finicky stuff that doesn't last is the kind of thing one would sell a business, that is businessmen that can't see beyond the next quarter. Some businesses seem like they absolutely love to spend all their capital on ephemeral junk, while gloating over how much money they saved by hiring the cheapest manpower they can attract. Then they wonder why they can't keep up with technology. Guess what, you don't HAVE to change out all the wiring in your house every three years. It will do what it was designed to do for a hundred years. You want to set up automated assembly plant? Do it right, and it will do what it was designed to do for a hundred years.

        To this day, I have yet to see a "worn out" computer with the exception of what I will type later. I have only seen those rendered obsolete through lack of support. However the time between the Pentium II up to the more modern processors I avoid, because of power supply and heat sink issues.... there was runs of crappy capacitors, and the boards had issues with other heat related and pulse related problems. However, the processors released the last five years or so are back on track for being reliable. It was about a twelve year window around 1996 to 2008 that it seemed nothing coming out was worth having. It was all full of heat sinks and massive current pulses that lead to deterioration of bypass capacitors.

        I considered the 386SX to be the last "super-reliable" device for mundane machine control... which I am now designing Arduino/Propeller hybrids for their eventual replacement. I simply cannot trust the commercial DRM'd stuff in an industrial environment. What do I do if someone upgrades the OS when its busy putting labels on bottles? Come in the morning only to discover a room full of broken bottles and a congratulatory "you have successfully upgraded" message on the monitor?

        Presentation is everything. I guess its OK if they also show a cartoon depiction of a smiling man wearing a suit, hand outstretched for a shake. The roomful of broken bottles won't look so bad then.

        XP on the Atoms? I felt that Atom was a fantastic step toward again making something that was not a heat-making, current-sucking, power-hog. Something usable for making a long-term device with.

        I have a celeron in my laptop. Same thing. Snappy when I first bought it. Got slower and slower. Finally a virus delivered by JavaScript did me in a few years ago. It was on these very forums you guys steered me onto NoScript. So, I reinitialized my laptop to factory state, noted how the machine was back to its snappy state, reloaded my software, disabled updates, and am still using it. Ten year old machine, WalMart special - no less, but works great. Admittedly, a lot of the modern softwares work like crap in this old machine, the big one to me was the browser. And again, you guys saved me with the SeaMonkey recommendation. I had FireFox, which had grown beyond this machine's resources, and was hanging up on YouTube all the time when an ad insertion caused it to overload. Its working with SeaMonkey. Hell, as long as I have a browser, Eagle, LTSpice, the Arduino programming environment, MathCad7, and a few other utility proggies, it does all I need. Its not like I am doing any heavy gaming on this thing or anything else computationally intensive. EAGLE seems to load this thing down more than anything else. I am running Eagle 4. I have access to Eagle 6. Is it worth it to upgrade? Or will doing so make things worse in terms of additional resource requirements? ( Asked for the same reason that I ran the earlier Firefox just fine, but the later one takes up so much memory and CPU that I simply max out then either stutter or crash! )

        --
        "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
        • (Score: 3, Insightful) by driverless on Thursday March 08 2018, @11:31AM (2 children)

          by driverless (4770) on Thursday March 08 2018, @11:31AM (#649436)

          That's a problem with some of the standards for security being written today, which are driven almost entirely by a few large silicon valley companies who assume the whole world is online 24/7 and anything can be updated within 24 hours. There's no backwards compatibility or future planning, just "lets throw in every cool feature we need for our purposes, we can always roll out new patches whenever we feel like it, and deprecate anything we feel like". There's no way to reconcile this with devices that have to operate in the field for five, ten, twenty years. "We've got what we want, and everything else doesn't exist".

          • (Score: 3, Insightful) by anubi on Thursday March 08 2018, @12:33PM

            by anubi (2828) on Thursday March 08 2018, @12:33PM (#649464) Journal

            And then one day they sell out to someone else who turns off the server.

            Then you are left holding a bunch of technology that no-one ( due to Intellectual Property rights ) knows what to do with if its broke.

            Might as well toss it and start all over.

            I find that paradigm very nauseating. I feel if I can't fix it, I really question what business I have with it. It would be like a business hiring an employee, but having no control over him.

            The exception is cheap generic consumables.

            --
            "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
          • (Score: 4, Insightful) by JoeMerchant on Thursday March 08 2018, @01:40PM

            by JoeMerchant (3937) on Thursday March 08 2018, @01:40PM (#649472)

            I just "felt a bomb dropped" when one of our developers told me that the WebRTC source code was 5 to 6 GB... for a comms layer!

            The world is truly screwed if we're depending on 5 million pages of code just to shuttle data from A to B in a "open" format.

            --
            🌻🌻 [google.com]
        • (Score: 3, Funny) by Runaway1956 on Thursday March 08 2018, @03:30PM (3 children)

          by Runaway1956 (2926) Subscriber Badge on Thursday March 08 2018, @03:30PM (#649512) Journal

          When I build something, I expect it to work until it is dismantled.

          That is an attitude that I learned almost forever ago. My first boss in construction, immediately after high school, put it into perspective for me. Words to the effect, "Every house I've ever built is still standing, and still looks good. If one of my houses falls down because you didn't do your job right, I'll have Jose kill you. If one of my houses starts looking crappy and deteriorated because you screwed up, I'll have Jose take your nutsack off. Don't fuck up my houses!" I took his warnings a little more than half seriously.

          (Jose was a crazy bastard - big burly guy with no sense - and not even Hispanic, don't ask me why they called him Jose.)

          • (Score: 2) by canopic jug on Friday March 09 2018, @05:23AM (1 child)

            by canopic jug (3949) Subscriber Badge on Friday March 09 2018, @05:23AM (#649862) Journal

            He was just carrying on an old tradition that goes back to at least Hammurabi [lexology.com] if not earlier.

            [229] If a builder build a house for some one, and does not construct it properly, and the house which he built fall in and kill its owner, then that builder shall be put to death.
            [230] If it kill the son of the owner the son of that builder shall be put to death.
            [231] If it kill a slave of the owner, then he shall pay slave for slave to the owner of the house.
            [232] If it ruin goods, he shall make compensation for all that has been ruined, and inasmuch as he did not construct properly this house which he built and it fell, he shall re-erect the house from his own means.
            [233] If a builder build a house for some one, even though he has not yet completed it; if then the walls seem toppling, the builder must make the walls solid from his own means.

            http://mcadams.posc.mu.edu/txt/ah/Assyria/Hammurabi.html [mu.edu]

            Nothing about nutsacks though. That might have been a local variant.

            --
            Money is not free speech. Elections should not be auctions.
          • (Score: 1) by anubi on Friday March 09 2018, @10:29AM

            by anubi (2828) on Friday March 09 2018, @10:29AM (#649903) Journal

            My first boss at Chevron - first job out of University - really instigated the value of craftsmanship and good workmanship into me and the other newhires.

            I clearly remember my boss showing me the refinery when I first arrived. He told me this refinery was here before I was even born. It was. He told me it would be here long after I die. Well, I just went to get my Social Security retirement turned on today... and the Chevron Pascagoula refinery is still there, proud as ever.

            Just like he said it would be.

            When one takes all the trouble to make something in the first place, make it right. Otherwise all I make is expensive junk.

            I only wish I had the knowledge then that I have now, as my inexperience at the time resulted in a lot of misjudgment on my part. I remember some of the refinery mechanics carefully picking up all the parts of some failed thing I had designed, and placing them on my desk so I would see what I had done wrong when I came to work the next morning.

            I sure wish some of the other companies I worked for later in my career took that stance.

            But then, those companies do not exist anymore either.

            Chevron is still hanging in there.

            What sickens me is the ones who made the el-cheapo decisions got paid, got bonuses, then got out, leaving the stockholders with an empty purse, the customers with junk, and the employees without a job.

            --
            "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
    • (Score: 2) by Grishnakh on Thursday March 08 2018, @07:08AM (4 children)

      by Grishnakh (2831) on Thursday March 08 2018, @07:08AM (#649376)

      No, we don't have a hard time patching a three year old phone. What we have in reality, are vendors who simply refuse to patch three year old hardware, because that forces you to purchase new hardware.

      What they mean is that we, as a society, have a hard time patching a 3yo phone, and they're right, we do. The problem is that we, as a society, seem to be unable to actually force these vendors to act in the best interests of society rather than their profits. I don't see any realistic way of fixing that problem myself.

      • (Score: 2, Insightful) by anubi on Thursday March 08 2018, @08:15AM (3 children)

        by anubi (2828) on Thursday March 08 2018, @08:15AM (#649398) Journal

        We get crap because we accept crap.

        --
        "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
        • (Score: 3, Insightful) by Grishnakh on Thursday March 08 2018, @04:56PM

          by Grishnakh (2831) on Thursday March 08 2018, @04:56PM (#649548)

          Exactly! It's just another variation on my theme that I frequently post here, "every nation gets the government it deserves". This one is: "a population gets the mobile phone technology it deserves". As a group, we don't value or insist on phones having quality software support for years after the initial sale, and we don't push our governments to require this, so we don't get it.

        • (Score: 4, Insightful) by mhajicek on Friday March 09 2018, @01:13AM (1 child)

          by mhajicek (51) on Friday March 09 2018, @01:13AM (#649796)

          Because some people accept crap, the market share of crap increases until crap is all we have to choose from.

          --
          The spacelike surfaces of time foliations can have a cusp at the surface of discontinuity. - P. Hajicek
          • (Score: 1) by anubi on Friday March 09 2018, @09:38AM

            by anubi (2828) on Friday March 09 2018, @09:38AM (#649893) Journal

            Which was why I was experiencing so much nausea in the new car showroom.

            Don't get me wrong.. the vans I looked at looked beautiful.

            It was those tiny tires that looked like one pothole away from failure, plastic "bumpers" that looked poised to make mountainous repair costs out of molehill sized bumps, and don't even get me started on way un-necessary complexity, nonstandardized parts, and difficulty of repair ( which they repeatedly assured me that I was "covered". ) Uh yeah, I've heard those words before. Covered? More like faith and hope. I have already experienced the business meaning of the word "covered". The closest equivalent word I can come up with is "splotched", but the word "covered" sounds better in presentation.

            I would see such effort put into place by so many artistic types, along with all this marketing "customer lock-in", that all I could see was more problems for me than I really cared to deal with. I just wanted to buy a new car. But not all this "now that you have made a huge investment, you need to protect your investment with these plans, that we may change or modify at any time we please... you must agree to this or warranty will be voided..." kind of businesstalk. I really had my heart set on a Dodge Sprinter or ProMaster, but all that businesstalk made me so nauseated I had to leave.

            They were making it painfully clear to me that in no way would I "own" the van, I would only enter into some sort of agreement where I agreed to anything they asked for, and in return, I could drive the van off the lot without them calling the police.

            I came looking for substance, all I could get was presentation, and someone had gotten to these guys and filled them full of the same crap that used to go through the last major company I worked for when they hired in these teams of "consultants" to teach us "the leadership skills of business" aka "how to get maximal profit before the customer wises up". Executives really lap this kind of stuff up... presentations by lots of very well dressed men with lots of viewfoils and handouts - lots of rounds of handshakes...its a circle-jerk for the suit and tie crowd, but from the other side, the customer, this kind of crap is purely nauseating.

            --
            "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
  • (Score: 4, Insightful) by JoeMerchant on Thursday March 08 2018, @04:22AM (5 children)

    by JoeMerchant (3937) on Thursday March 08 2018, @04:22AM (#649328)

    Can people manage their own passphrases? IME, just barely. If you could trust people to actually use a passphrase as secure as correcthorsebatterystaple, they could actually manage secure keys using 30+ year old tech. When the end users won't even use a 7 of 9 dot swipe code to keep their phone "secure" - how can you possibly control something like software updates to a car?

    If the users were really mindful and the manufacturers only pushed software updates that were really necessary, then when your car says "important safety update available, please authorize installation ASAP" the users could check the news and manufacturers' website to confirm that the update is legit and then authorize it.

    Instead, we've got automatic daily pushes of multiple updates for our phone apps, every home PC and console device seems to need weekly updates, and there's no way in hell that I'm going to research each one for myself before authorizing them, so - in effect - the update path is wide open, users are asleep at the switch - if not by their own lack of caring then by chronic update fatigue; So, then, anybody who breaks the update key/scheme that's typically identical for millions of end users has free reign to push whatever they want to millions of devices.

    --
    🌻🌻 [google.com]
    • (Score: 2, Funny) by anubi on Thursday March 08 2018, @08:27AM

      by anubi (2828) on Thursday March 08 2018, @08:27AM (#649400) Journal

      So, then, anybody who breaks the update key/scheme that's typically identical for millions of end users has free reign to push whatever they want to millions of devices.

      You are *so* insightful bringing this up. As far as I am concerned, this alone should be a top national security issue.

      Imagine... United States gets into war with "bad guy" because he does not abide with our WishList. We impose "sanctions", he retaliates by sending us a fake "Important Update" to all our computers/cars. Can you imagine the chaos that would result in this country?

      And who knows if our systems aren't already compromised, with the "secret codes" to do this held in reserve for the day some "Enemy of the State" decides to play his "Trump"(pun intended) card. Our government will look just like Keystone Kops all over again.... all those badges, uniforms, armed men, salutin', and orders... but they can't get their car to start.

      --
      "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
    • (Score: 2, Informative) by shrewdsheep on Thursday March 08 2018, @09:28AM (3 children)

      by shrewdsheep (5215) on Thursday March 08 2018, @09:28AM (#649412)

      Instead, we've got automatic daily pushes of multiple updates for our phone apps, every home PC and console device seems to need weekly updates, and there's no way in hell that I'm going to research each one for myself...

      Just don't. I have updates disabled and I have accrued around 50 update request on my phone. The old rule was: software should improve with every new update. That rule has changed to the opposite at least on the commercial side. This is why I am not interested in updates as I do not expect improved functionality.
      For a car, updates are certainly expected to follow the same path. However, critical safety updates - the equivalent to phone-app-vulnerabilities - would require updating. I have no intention to purchase a car that does automatic updates that cannot be user-controlled. This would mean to be put under the total control of the vendor, by extension the goverment and by futher extension criminals.
       

      • (Score: 1) by anubi on Thursday March 08 2018, @12:17PM (2 children)

        by anubi (2828) on Thursday March 08 2018, @12:17PM (#649456) Journal

        I am of the strong belief that 95% of those "updates" are related to new DRM enforcement agents.

        --
        "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
        • (Score: 3, Interesting) by JoeMerchant on Thursday March 08 2018, @01:51PM (1 child)

          by JoeMerchant (3937) on Thursday March 08 2018, @01:51PM (#649475)

          I worked intimately with Adobe Flash for a few months in 2013, got to know each and every update, what it was supposed to do, what it actually did with respect to our products, etc. And, your belief is correct, at least 95% of Adobe Flash updates in that period were playing whack-a-mole with video pirates doing things like watching BBC content from out-of-licensed-region terminals.

          --
          🌻🌻 [google.com]
          • (Score: 1) by anubi on Friday March 09 2018, @09:48AM

            by anubi (2828) on Friday March 09 2018, @09:48AM (#649895) Journal

            I sure had a feeling it was the whack-a-mole, because it seemed every time I got a system upgrade, there would be some other program I would now have to install the latest version of before I regained functionality, that is, if it would.

            I blew the proverbial fuse when Microsoft put out that FTDI chip bricking update. I had to go through every design I had that involved that FTDI chip and re-lay it out to a CH340.

            This is just the way highly paid men think, and one has to design around them in order to build a robust product. For me, that meant abandoning FTDI and going to a Chinese design.

            Just because FTDI and Microsoft will stoop to this kind of thing does not mean I will.

            --
            "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
  • (Score: 2) by krishnoid on Thursday March 08 2018, @04:39AM (12 children)

    by krishnoid (1156) on Thursday March 08 2018, @04:39AM (#649331)

    As the embedded carbon cost of a car is about equal to that of the fuel it will burn over its lifetime, we just can't afford to scrap cars after five years, as do we laptops.

    How do these numbers change for electric car components?

    • (Score: 3, Informative) by anubi on Thursday March 08 2018, @09:09AM (11 children)

      by anubi (2828) on Thursday March 08 2018, @09:09AM (#649406) Journal

      When I look at how much energy it took to make that van I just purchased off of Craigslist, I feel I made a significant impact rescuing that thing from destruction. This thing is over three TONS [duckduckgo.com] of steel! Huge diesel engine. I fell in love with the thing over its simplicity and lack of any electronic doodads that someone else could shut down on a whim.

      Even though those old mechanical diesels are massive, and are damned heavy for the power they put out, they are extremely simple and reliable. Everything is gears, cams, pushrods, and pistons. Get it started, it runs.

      If I was to drive a lot, then I would have to place its pollution and mileage higher up on the considerations, but for me, an old retiree, getting to the supermarket, Home Depot, Harbor Freight, or Frys is about it with maybe a trip to the doctor occasionally. I seriously doubt any pollution I incur driving it will come anywhere close to the pollution incurred to make this thing in the first place. No, I would not have bought this for a 100 mile per day commute.... for me its more like 100 miles per week. $20 / week for 5 or 6 gallons of diesel isn't making a helluva dent in my budget. I am quite confident this 20+ year old machine *will* outlive ME.

      If anything else, this machine will have no problem hauling a camper should I become homeless, which is a concern for me given how I am mostly an introvert and work better with machines than I do with people, but people have the say on how much I am valued.

      I feel if more of us would value our older technology, and simply refuse to buy because something offered is "new", and INSIST that we understand how it works before we buy it, we would see attitudes change. But, alas, we offer the "new, shiny" along with an "attractive" loan package, and most of us will sign up. I think we are all getting herded into one hellacious debt trap, but who am I to stand up against the man wearing the suit, in front of the microphone, egging us all into being controlled by those we empower to control the things we PAY for?

      --
      "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
      • (Score: 3, Interesting) by JoeMerchant on Thursday March 08 2018, @01:45PM (10 children)

        by JoeMerchant (3937) on Thursday March 08 2018, @01:45PM (#649473)

        We "rescued" a 2002 Mercedes S for very little money up front, and I too think that's much better for the environment - driving around at 21mpg for the next 100,000+ miles, than sending 2 tons to the recyclers and getting another freshly formed 2 tons that might get 30mpg doing the same job.

        Personally, I like the late '60s early '70s small block V8 cars - good air conditioning, reasonable safety (yes, it's better today, but the bulk of the risk was removed by the late '60s.) I might get one of those some day and put on aftermarket fuel injection, because carburetors literally suck for a daily driver.

        --
        🌻🌻 [google.com]
        • (Score: 2, Insightful) by anubi on Friday March 09 2018, @09:59AM (9 children)

          by anubi (2828) on Friday March 09 2018, @09:59AM (#649896) Journal

          Yup, I sure got a nice warm feeling over rescuing something, and being able to fix it back up to what I really wanted in the first place.

          I feel I actually own this thing.. not just renting the right to drive it.

          After my bouts of nausea in the showrooms, I knew really well that what I really wanted was to go back in time and buy the van I bought when it was brand new. So I had to settle for the next best thing... get what I could, knowing full good and well that even if it took the price of a brand new modern van to fix the old one up to "like new", I would still much rather have the "old school" technology than the "new school" technology, even if I was to pay the same price for either.

          For the same reasons I would rather have my old mechanical bimetallic mercury thermostat than a NEST. That old bimetallic thermostat with that little ball of mercury sealed in a glass tube has been working for 40 years. Absolutely elegant design. And I did not have to agree to anyone's customer lock-in contract in order to use it.

          --
          "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
          • (Score: 3, Insightful) by JoeMerchant on Friday March 09 2018, @08:40PM (8 children)

            by JoeMerchant (3937) on Friday March 09 2018, @08:40PM (#650216)

            So, we don't have a Nest, but we do have an Ecobee, because that cute little bimetallic strip was located in a non-representative temperature location in the house - with the Ecobee we have 4 thermosensors distributed around the house and can make some data-based decisions about air-flow balance, etc. Now, why in hell I have to go through a remote website to access the thermostat on the wall of my home from my phone that's on the same local network? That should be illegal.

            --
            🌻🌻 [google.com]
            • (Score: 1) by anubi on Saturday March 10 2018, @04:48AM (7 children)

              by anubi (2828) on Saturday March 10 2018, @04:48AM (#650390) Journal

              Absolutely.

              Should I have the same need, I would use my Arduinos.

              Mostly because I know the Arduinos so well I can use the same building block to build nearly anything I need.

              --
              "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
              • (Score: 2) by JoeMerchant on Saturday March 10 2018, @05:30AM (6 children)

                by JoeMerchant (3937) on Saturday March 10 2018, @05:30AM (#650406)

                Ecobee thermosensors are also PIR motion sensors and battery powered - lasting over a year on a 2032 coin cell, impressive.

                --
                🌻🌻 [google.com]
                • (Score: 1) by anubi on Saturday March 10 2018, @06:46AM (5 children)

                  by anubi (2828) on Saturday March 10 2018, @06:46AM (#650431) Journal

                  Thanks.. I will have to look into those. The CR2032 is one of the very few cells in my stock, as even the local dollar store carries packs of 'em for a buck.

                  Right now, I have the old existing thermostat wire... which has 24 volt control power. Something like I had to connect one wire or the other to ground to call for heat or cold.

                  I looked into it a long time ago when someone gave me an old thermostat. That was during the last energy crisis I believe in the 70's. I ended up giving that old thermostat away to a restaurant where a lady friend of mine was working as a waitress.

                  She told me her customers were complaining that it was too hot or cold in the restaurant. Her boss, though, told her to leave the thermostat be. So I asked her to introduce me to her boss, and I mounted the old thermostat to the wall behind the counter, in full view of the customers, so that when one complained, she could go "adjust" it. It wasn't connected to anything. Just screwed to the wall. But it kept the customers happy. And netted her some tips.

                  It was one of those type that had the contacts though, not the mercury one. The contacts were pitted, and would not work reliably. It was a fitting end for the thing.

                  --
                  "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
                  • (Score: 1) by anubi on Saturday March 10 2018, @06:52AM (4 children)

                    by anubi (2828) on Saturday March 10 2018, @06:52AM (#650433) Journal

                    Forgot to mention... that's why I love forums like these... someone would now really have a helluva time trying to sell me a NEST after I read your post.

                    --
                    "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
                    • (Score: 2) by JoeMerchant on Saturday March 10 2018, @11:54PM (1 child)

                      by JoeMerchant (3937) on Saturday March 10 2018, @11:54PM (#650686)

                      Well, YMMV - We bought a handful of LaCrosse BIG LCD digital clocks back in the '90s, they still run nearly 5 years on a pair of AAs - recently we bought a couple more, and neither of them will run even 3 months on a pair of fresh from the package Duracell AAs. I suspect PCB cleaning issues, but mostly I'm just disgusted with the experience: new clock, looks awesome - 3 months later, oh man maybe the batteries were stale, 3 more months later: nope, this thing is a POS. Rinse, lather, and repeat with the next one.

                      --
                      🌻🌻 [google.com]
                      • (Score: 1) by anubi on Sunday March 11 2018, @08:54AM

                        by anubi (2828) on Sunday March 11 2018, @08:54AM (#650852) Journal

                        There seems a lot of "cost cutting" going on with companies these days, as they perceive a few cents cheaper to produce means more profit. They are quite willing to trade off a reputation for quality for a better quarterly return. Then they take the money run to the next company who will hire them at top dollar to do the same for them.

                        I watched this type destroy a company I worked at. They come in, quickly cash out the company's reputation, a few people get very good bonuses, the rest of us get pink slips, and the real estate is sold.

                        Have you taken the covers off the clocks to verify its the same circuit board? Some of those earlier clocks ran on 4000 series CMOS logic, and easily went years on a cell, however the newer ones are likely a microcontroller clocking along at 4MHz, and drawing uA instead of pA.

                        I just had to send back one of the TECSUN 18650 radios I just bought off of Amazon for similar issues... battery life, with the radio supposedly OFF, was four days. It was a quality control issue... the other three work as expected. I'll probably write an Amazon review over it, so I can bring up what to look for so in case anyone else gets one with that issue, they know they got a dud too, send it back, and get one that works.

                        --
                        "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
                    • (Score: 2) by JoeMerchant on Sunday March 11 2018, @03:07AM (1 child)

                      by JoeMerchant (3937) on Sunday March 11 2018, @03:07AM (#650747)

                      Also, what, you don't trust the hundreds of (shill) "Man this product is just perfect, exactly what I was looking for..." reviews on Amazon?

                      --
                      🌻🌻 [google.com]
                      • (Score: 1) by anubi on Sunday March 11 2018, @08:31AM

                        by anubi (2828) on Sunday March 11 2018, @08:31AM (#650842) Journal

                        Also, what, you don't trust the hundreds of (shill) "Man this product is just perfect, exactly what I was looking for..." reviews on Amazon?

                        Think I haven't seen those ads promising me $20 for me to write a five-star review of some product on Amazon? Some products I read, the whole review section looks like one big ad. Just like Southerners have a distinct dialog, so do ad-people. Buy now! Limited supply! Only ($price)! See that and run. That's the standard bait line.

                        I always read the reviews from the worst up.

                        The moaning of a pissed off customer means orders of magnitude more to me than the glorious rapports of those paid to post.

                        But even then, some of those are posted by competitors.... so I have to look for specifics. I want to know WHY the one-star rating. If its the truth, bringing the matter into a courtroom with defamation of character charges will only result in a courtroom of snickering jurors.

                        Once above 3-star, reading the review is near useless. If I see even one 5-star review that smacks of paid-review, I have to assume the high order reviews are salted and damn near useless.

                        --
                        "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
(1)