930
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 27 Mar 2024
930 points (100.0% liked)
Technology
73655 readers
3853 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
What’s a good-faith argument for exempting these devices? Or was it simply successful lobbying in protecting corporate interests.
I could see an argument about medical devices, HVAC, and vehicles... But I don't think I'd agree with them. Except maybe medical.
Consoles and toothbrushes though? What the fuck?
I don't see any argument for vehicles, tbh. HVAC tinkering is almost exclusively high voltage so that makes just a little sense, don't want people swapping a 350 volt AC capacitor with a 250 volt DC capacitor and having it blow up, but Vehicles means a manufacturer can do everything imaginable to limit part availability and kill aftermarket parts purely for profits.
Vehicles need it because the keyless entry radio needs to pair with the engine start. Otherwise a thief can steel a car in a few minutes by bringing their own computers.
I guarantee you keyless start cars aren't more secure because of paired parts. The encryption for the fob's signal isn't the result of a paired part.
Particularly as a lot of newer thefts just use an amplifier to boost the key signal, and fake the key being in the car. Part pairing wouldn't help at all there.
.....you mean like they do currently?
Which is why manufactures are now putting those pairs in so you cannot do that anymore.
If the security was so bad that removing part pairing would crash this, then it wasn't secure to begin with. Same argument as apple pairing the fingerprint sensor, the emsensor is only doing the reading, not the authentication.
They're right though. The security in newer cars and anti-theft features require that a couple of different modules talk to and validate each other. That's how it's designed to work to prevent theft or hacking. When your ECU talks to your keyless entry module or what have you they perform a handshake. That ECU and keyless entry module talk to the vehicle's starting system to validate that yes the correct key at the correct range is being used to send the signal to start the vehicle.
Again, if you're so deep in the car that this matters, this is not the part that's going to stop you, unless the car is so poorly built that the keyless entry module is readily available without taking apart the entire car. This is a non-problem.
You don't have to have paired parts for secure authentication. You just need parts that have been set up and authenticated beforehand. That is not the same as part pairing.
What's to stop me from going to a junk yard, paying for a key and the modules in question, attaching them to a different car and stealing that car?
Literally nothing stops you from doing that with paired parts. Nothing. Keyless cars get hacked, stolen, dismantled, and rebuilt all the time, just like any other car.
Encryption and authentication are equally secure with or without physical part pairing.
That's not true. The paired parts are attached to the VIN. Literally programmed with the VIN of the car and a lot of them are single use for specifically this reason. You don't know and you're very insistent.
You can't. That's the point. Once those parts are configured to a vin they only work with that vin.
I guarantee you that the paired parts can and will be swapped out or stolen. It does nothing to protect consumers. Give me an example of a manufacturer who uses paired parts and I'll find examples of thefts, hacks, and replacements.
Wrong wrong wrong wrong. Go to literally any dealer and ask a tech.
I'll be waiting for when you find an example, mate.
I'll log into all data for this. Give me a sec.
I do for things like ECUs that are programmed to the vin to prevent theft or tampering that would allow an attack vector for the vehicle.
I guess console because they want the whole thing intact to enforce DRM?
Exactly.
Good thing part pairing doesn't exist for the Switch.
Mine is the Ship of Theseus at that point.
For toothbrushes, are they worried repair won't re-seal it effectively so make it unsuitable for use in the wet environment?
Even HVAC, WTF?
I mean, I don't want the thing supplying the air I'm breathing to accidentally not burn all the gas and lead to carbon monoxide poisoning etc.... Things like the ductwork and shit, for sure, but not like, a burner.
The great irony is it's frequently the "ductwork" that's the problem: plugged or badly installed exhaust pipes, which the manufacture has no control over. The rest are the appliance itself wearing out or failing with no warning.
I've repaired furnaces myself several times including replacing burners and exhaust fans -- it isn't rocket science. It's no different than working on any other "dangerous" thing like a car. If someone somehow manages to fuck up so badly it hurts or kills someone that's on them.
Yeah that's totally valid. Agreed.
But I also wouldn't really trust third party parts for the appliance itself. I think once you do, that immediately becomes a possible problem. If it was in my house, I'd only buy from the manufacturer for something like that.
But on the other hand, Idk that it's necessarily wrong to legislate forcing these companies to allow it. I generally believe consumers should have the option on their own, but some things are too dangerous. I'd pretty much be against medical devices but HVAC is a little more uncertain to me.
So you want to be stuck with the same thermostat forever? Imagine it comes with one of those Amazon ones with a persistent camera and microphone in it that you can't opt out of.
A thermostat doesn't have refrigerants/gasses in them. It's nothing more than a complicated on off switch
You need some sort of licensing to do most HVAC work anyways. Theres no point in forcing companies to make all the parts available to the average joe when the average joe can't legally do the work anyways.
The goal of the bill was to get something with teeth passed. Fighting every lobby at once would be impossible, so they leave those devices out of it and will now be able to work on different laws for those things. At least that’s what I read they’re doing for the John Deere stuff at least. The legislators know it’s going to be a difficult battle, so they segmented the law to make it so that a failure in one spot wouldn’t cause a loss everywhere.
Heh. Teeth.