Hacker News new | past | comments | ask | show | jobs | submit login

I mostly agree with you. I too like to actually own my hardware.

However, another angle to view it is that these are huge security vulnerabilities. Visiting a webpage on your TV to install a custom firmware could also be used for great evil as well.

So letting this huge holes exist is not that great, but there should be an easier on path for people who want their own custom firmware.

I think Google phones do a good job here. It's nearly impossible to accidentally flash your phone with an unsigned firmware, but you can also unlock the boot loader and do whatever you want.




> It's nearly impossible to accidentally flash your phone with an unsigned firmware, but you can also unlock the boot loader and do whatever you want.

From what I have heard, that "whatever you want" excludes important things like banking apps.


That's really on the app. Google provides a flag to the app if they detect tampering, the app chooses to limit functionality.


The security angle is also the way to legislate this stuff away.


Can you explain more explicitly what you mean by that?


Right now, businesses with no expertise in software can make poorly-designed IoTs because there is no cost associated with it.

Forbidding such things will be like whac-a-mole; but forcing businesses to provide security update support for 5 or 10 years if their product offers internet, wifi, or cellular data connections would make some businesses balk.

As with all things, these costs are off-loaded to the consumer and it leads to some serious problems when scaled.

From the business side, having a quantifiable cost for security would also extinguish some bad ideas; perhaps by the bean counters.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: