Right to Repair

This magazine is not receiving updates (last activity 0 day(s) ago).

Please_RTFA , in To buy no longer means anything.

I guess I don't have Minecraft anymore either, the email service I used back then doesn't exist anymore so I never got those notifications.

fuckingkangaroos , in Disable tracking on Chevy Bolt 2019

So if they're charging more for bad drivers, they'll charge less for good drivers, right?

If one company raises rates on bad drivers and uses the difference to offer lower rates to other drivers, they'll get more customers.

DragonTypeWyvern ,

You should do stand-up, that was hilarious

socialpankakemix , in How to hack your Tesla

you wouldn't download a seat heater would you?

ProfessorOwl_PhD , in How to hack your Tesla
@ProfessorOwl_PhD@hexbear.net avatar

turning off the power to the amd chip exactly when it's checking authorization

I'm sorry, are you telling me that jailbreaking a Tesla is as simple as duplicating Pokémon in Gold and Silver?

Cyyris ,

The more things change, the more they stay the same, I suppose.

Rognaut , in Hyundai Ioniq Repair Riddle: Why Does a Battery Cost $60,000? This is worse than Tesla!

To be honest, id watch more of his videos but, he just creeps me out. Idk what it is.

jadelord ,

Agreed. He does give out a fanatic hyperactive vibe, eventhough he is voicing a good cause.

orcrist , in I'm Conflicted

Lineage OS could be OK for you.

MTK OP ,

I'm on the fence in that, but thank you!

Anticorp , in Obscure screw added so appliance cannot be disassembled

One more use for the awesome oscillating cutting tool I received for Christmas last year!

Engineer Mod , in Kobo partners with iFixit to make new e-readers more repairable

Great news, iFixit partnerships are a great way to improve repairability.

Piemanding ,

I just hope iFixit doesn't become the bad guy as the only repairability game in town.

lgsp OP ,
@lgsp@feddit.it avatar

You know, I was thinking the same thing. It's always iFixit: Motorola, Nokia, and now Kobo. But I don't see how a company with a mission like iFixit can turn into bad guy (enshittify?). Am I too optimistic?

Piemanding ,

Just looked it up and iFixit is not publicly traded so the potential for enshitification is much lower, but still possible. If iFixit goes public I will lose all faith in them.

yoz , in Disable tracking on Chevy Bolt 2019

Or stop buying cars made by these companies.

StupidBrotherInLaw ,

They all do it, to varying extents. The only good way to avoid it is buying a car old enough to not collect your data.

grey , in Polish Hackers Repaired Trains the Manufacturer Artificially Bricked. Now The Train Company Is Threatening Them
@grey@discuss.tchncs.de avatar

Man, just go back to normal trains and now computers with attached trains. Can't hack or remotely kill what doesn't have a computer in it.

RubberElectrons ,
@RubberElectrons@lemmy.world avatar

Erm... There's a lot going on inside an electrically powered train. Even a diesel engine has a computer managing fuel flow and diagnostics.

More importantly, you need networked computers to handle automatic train safety systems, a requirement in the EU from what I understand, after several notable rail crashes up to the 70's.

FiskFisk33 , in Polish Hackers Repaired Trains the Manufacturer Artificially Bricked. Now The Train Company Is Threatening Them

Modifying the software of a device YOU OWN, should never be illegal in and of itself.

Engineer OP Mod ,

Absolutely. Maybe an exception for video game multiplayer cheating, but that's the only thing I can think of. Any other situation I can think of just enriches the computer to the massive detriment of the user.

Akrenion ,

Force modified clients in a seperate lobby. Mods can be fun and extend shelflife of games immensly.

Cold_Brew_Enema , in Disable tracking on Chevy Bolt 2019

Your first mistake is buying Chevy.

JohnDClay OP ,

Only cheap EV, not much of a choice

Cold_Brew_Enema ,

I would rather ride a pogo stick to work than ever give Chevy another penny.

JohnDClay OP ,

Why?

Cold_Brew_Enema ,

Because every experience I have ever had with them has been awful, and everyone I know who has owned a chevy has had constant issues. Transmission failures under 50k miles, electronics breaking on new cars, entire ac failing on a car with with only 40k miles, etc. I could keep going. GM clearly does not give a shit about quality control.

Couldbealeotard , in Obscure screw added so appliance cannot be disassembled
@Couldbealeotard@lemmy.world avatar

The security bit is doing it's job. If this is a barrier for someone, then they aren't the kind of person who should be playing with the internals of a dangerous electronic device.

KillingTimeItself ,

a dangerous electronic device.

i feel like if someone has the capability of bitching about a security screw on the internet, they probably have the intelligence to unplug a blender from the wall.

If this is the standard for security screws, hex/torx will almost certainly do it's job, but significantly better.

Couldbealeotard ,
@Couldbealeotard@lemmy.world avatar

This is the same person that had to smash open the device like a caveman banging rocks together. Posting a rant online instead of just buying a security bit isn't a good second step either. OP may certainly be the exact type of person to keep out: bold enough to try to break open electronics, but stopped by a fairly standard security bit.

uis ,
@uis@lemm.ee avatar

but stopped by a fairly standard security bit.

Did you read post. Before writing was best time, but second best is now.

Here's quote if you have eyesight like mine:

I had to cut the casing open in order to discover why I couldn't unscrew the fourth.

MachineFab812 ,

The screw head was at tho bottom of a 2 inch shaft.

They didn't have to cut shit.

uis , (edited )
@uis@lemm.ee avatar

Which was discovered AS RESULT of cutting open.

You are quite spammy, aren't you?

MachineFab812 ,

No, the shaft was not uncovered as a result of cutting the thing open. They were able to reach the screw-head with a regular screw-driver, just not turn it. Says right there in the post.

Learn to read, stop spamming people with your shit takes, and sure, let's pretend replying to your copy-pasted bullshit with more copy-pasted bullshit is somehow worse. Anything to feed trolls like you.

KillingTimeItself ,

maybe caveman want motor out of blender, and screw is hinderance to motor collection. Don't judge a mans cave by the lack of blenders. Judge it by the principles held within!

Regardless, security bits are a skill issue, and i will not stand for them. They make cars with traditional bolts and nuts, those are perfectly accessible to the average person, yet people killing themselves with their bad car repairs, is disconcertingly low. They're bad for repairability, they're bad for the environment, and most importantly, they waste time and money for no fucking reason.

MachineFab812 ,

Seatbelts tend to be held in with Torx-head bolts. Right bicycle pedals have left-hand-threaded studs. Spanner-screws are a standard you'll find drivers for in any good security or electronics/small-appliance repair set.

Odds aren't that far off that this screw was chosen for their blenders decades ago when this screw-driver was more common, and this one part was never updated as the design ... "evolved".

KillingTimeItself ,

i've got no problems with torx (it's one of the best driver designs) and nothing wrong with left hand thread, as you said, it's needed for bicycles, but using proprietary "security" bits is just, less than acceptable in the modern day and age.

Though i am inclined to agree with you on the design theory, it's more than likely they have billions of those little proprietary things kicking around in a warehouse, and there's just no reason for them to get rid of them.

Lizardking27 ,

Shit take.

downpunxx , in I'm Conflicted
@downpunxx@fedia.io avatar

when was the last time you heard of an older model smart phone model or line becoming so insecure due to the lack of ongoing "operating system" or "manufacturers security updates", off the top of my head I can't think of one

ZeroPointMax ,
downpunxx ,
@downpunxx@fedia.io avatar

cheers for that, but all i see on that list is a whole bunch of "this could lead" and "there's a possibility", not any widespread outtages of breaches of entire product lines, like we have seen in the past with botnets and viruses in the pc world. i'm all for precaution, but again, i can't think of a time there's been a worldwide, or even nationally localized, smart phone infection across a brand or product line due to the ending of regular security updates, and i'd be interested if anyone knew if there ever has been.

what i'm thinking is, while it's best practice to have manufacturers/phone company os gui security updates for any smart phone in use, it's not the end of the world if there aren't. i could be wrong, but "this could lead" and "there's a possibility" is warning, not proof or anything at all

MTK OP ,

I'm sorry but you are wrong, if there is a CVE it means it works, and "could lead to" means that it literary can lead to that outcome.

All you need it one really bad CVE or a few bad-ish ones to do a lot of damage.

downpunxx ,
@downpunxx@fedia.io avatar

sure, could lead to, show where it has, in small groups, or large, ever, for any smart phone

CosmicGiraffe ,

Botnets targeting android devices are a thing, here's an example: https://blog.fox-it.com/2023/09/11/from-ermac-to-hook-investigating-the-technical-differences-between-two-android-malware-variants/

In this example, they're renting access for thousands of dollars. These people have a clear motivation to find ways to exploit devices and unpatched CVEs are an easy way for them to do that.

downpunxx ,
@downpunxx@fedia.io avatar

ok, i browsed through that, and again, am not seeing where it actually was deployed and affected end users, just a breakdown of how it could, and what i've continually been requesting, wondering about is if a botnet/virus campaign has ever been actually pushed out to smart phones, anywhere, at any time, due to the ending of manufacturers security updates, and again, i've yet to be presented with any evidence it has (only that it could be)

MTK OP ,

Look, when it comes to security statistics, a lot of it is locked behind closed doors in all kinds of big security companies. I can tell you personally that I have worked in such a company and you could see a lot of exploitation (attempts) on Android devices. It was there.

Look once there's a CVE and there is a POC for it. Usually there comes a Metasploit module for it and then it's for sure being used by a bunch of people.

downpunxx ,
@downpunxx@fedia.io avatar

aha, the old, i know it happened, i just can't produce any real proof of it happening, anywhere, to anyone, at any time. got it. well, shit, i'm convinced, guess you shouldn't use that Pixel 4a then. question answered, problem solved. be well.

MTK OP ,

Look, I have no interest in convincing you, you can also find some materials online but yeah, plenty of this info is closed source, that's just how it is with some industries.

If you want to throw caution to the wind because you couldn't find anything that is your choice.

rand_alpha19 ,

It's a vulnerability that is actively able to be exploited on any compatible system that isn't explicitly protecting against it (i.e., any outdated phone connected to the internet).

So a very big fucking deal in general, even if your specific phone may not be targeted. Your only defense is hoping that you're not unlucky, which is a really shitty approach to security.

downpunxx ,
@downpunxx@fedia.io avatar

sure, able to be exploited, show where it has, in small groups, or large, ever, for any smart phone, ever

rand_alpha19 ,

I don't really care enough to spend a lot of time searching, but I found this opinion article breaking down a severe Apple iOS vulnerability from 2019: https://www.tomsguide.com/opinion/your-iphone-is-less-safe-than-it-was-yesterday-and-thats-good

If a device isn't getting security updates anymore, it's vulnerable. And a lot of the time these things aren't caught right away. This is the exact same reason why you should never put a computer running Windows XP or 7 on the internet - it's no longer secure and your system can be accessed by any person motivated to do so.

If you don't care, that's another matter. But you're inarguably at a higher level of risk when your system can be exploited in a greater number of ways than one with more recent security patches.

downpunxx ,
@downpunxx@fedia.io avatar

and again, not being a sea lion, as sea lions request others to research easily identifiable information, which my posit is precisely the oposite of, i've asked if there ever has been a smart phone vulnerability like a botnet/virus campaign that has ever been actually pushed out to smart phones, anywhere, at any time, any where due to the ending of manufacturers security updates, and again, i've yet to be presented with any evidence it has (only that it could be). so, not knowing of one personally (which in no way means it hasn't happened, just that i don't know about any such occurance) i put it to the comment section, and having been replied to almost a dozen times now with "vulnerabilities" i've yet to be presented with an actual infection case. not one.

rand_alpha19 ,

If you want documented evidence that there is a nefarious cadre of organizations hacking phones en masse using high-profile exploits before you'll believe that out of date phones are something to give a shit about, then you'll never be "presented with an actual case."

What you're describing isn't the reason why we should care about security. If you don't care, whatever, but planning for bad things that could happen is just basic preparedness even outside of computing. If a fire started in my apartment and I didn't have a fire extinguisher I'd be fucked regardless of how likely I think a fire would be.

downpunxx ,
@downpunxx@fedia.io avatar

I know people who have had fires in their apartments, I have seen news reports on tv and the internet, there are entire subsections of literature giving excruciatingly grand detail of historical fires throughout time. You know, proof that a thing happened, and investigation of why and how it happened.

What I have not seen any proof of, at any time, from any source, is a mass infection of consumer grade smartphones which would have been prevented by ongoing timely security updates. Not one. Rien. Bubkas. What I am seeing a lot of is people convinced that a warning is as good as an experience which has been studied and learned from. What I'm seeing without fail in this thread are people so jammed up with "could" and "possibly" but no "here's what we learned from this exploit being detonated in the wild, and here's the reason it happened".

I like your fire analogy, I'm worried about fires, I've seen the results. The same can't be said about not getting ongoing manufacturers security updates for smart phones.

rand_alpha19 ,

Okay, then you don't care. That's fine. There's no mass hacking of phones going on, that's not the risk and whoever told you that it was is stupid.

It's an individualized problem, which is why it doesn't make the news and why you're on your own when companies fail to keep your device up to date. It's not as sensational as a massive fire so it's hard to care about.

Anyway, hopefully you'll never have to worry about being hacked. The odds are in your favour, after all. The issue is when you get unlucky.

MTK OP ,

I do want to add that there are also mass hacking of phones, they just tend to be non-disruptive to the user, so it rearly gets coverage.

ysjet , in Obscure screw added so appliance cannot be disassembled

Honestly, if you don't have a set of security bits I would be concerned about you opening up a blender.

KillingTimeItself ,

honestly i'd be concerned about somebody without tools opening a blender. Why are they in there? How did they get in it? And what did the blender do to them?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • kbinchat
  • All magazines