Everything I own, owned(schlarp.com) |
Everything I own, owned(schlarp.com) |
The camera in particular is exactly why I’ve reverted to using devices without networking capabilities.
Anthropic has been run "Use Claude for hardware" ads nonstop. Seems very suss.
Oh very good!
> This means that a single HTTP POST of ATSE=0200ED94,0E001009 turns the signature check into a no-op, and we can freely update to a firmware image without a legitimate signature.
Oh that was going so well. Just wow.
I suppose you could make having those illegal through on-device scanning and legally mandating usage of operating systems that do that?
Not sure. Not sure if this tech can be contained. Dario does it for the wrong reasons, but it's not like there would be no point in his fearmongering.
__
I wonder if someone will try something like with printers, in that new and more powerful compute units see signatures of models and just refuse execution in the same way inkjet printers refuse to print euro bills.
I'm not sure if that would be a sensible thing to do, but that is a different question from "will someone try that path?"
But it's all dressed up as terror. "I did this thing, isn't it so so so very bad?!"
I hate this framing so much. The work here is so good, and making it look scary serves to bind us closer to a world where humankind has no control no visibility to powers over the world about them, where devices are sterile fixed things. That's the bad planet.
Using AI to build tools you own and operate is the way.
I have proposed on HN many times that any device that is updateable have a hardware switch to disable it. Nobody agrees with me - but apparently any device that is remotely updateable is vulnerable.
And no, not a programmable switch. A hardware switch.
They used to put them on hard drives. Great, so your backup drive doesn't get accidentally overwritten. Sigh, no longer.
The industry is also still refusing to learn that the dependabot model of instant dependency bumps by now is a hazard, given that supply chain attacks are usually more likely than missing out on security fixes.
I like your idea
I’d say John Deer will be among first ones requesting a halt.
It was similar with Napster vs recording companies… and then Spotify bulldozed everything with its attitude.
With LLM it could be much faster.
Where the next talent would come from?
Let’s go!
I generally like Codex (gpt 5.6 Sol), but the guardrails are often a problem. I find myself writing all kinds of fake lie stories all the time with some large damn explanation of why this is a very legitimate good guy kind of behavior and why I absolutely have to root this device etc. and I honestly hate how these tools (that are fucking wonderful!) train me to lie on a regular basis.
I would instantly have weeks full of very cool projects to work on if I get could access to something like Daybreak Red, but unfortunately I haven't yet found an OSS LLM that has had its guardrails removes without taking heavy brain damage.
Claude let you do this, but if I want to debug my own Python code it refuses because "cybersecurity"?
WTF Anthropic? Is the trick not using Python?
The fact that there are so many devices lack even basic security features horrified me. A webcam that activity light can be turned off remotely, that's a big no no for me.
But the use of LLM is also very interesting, we may put LLM in the loop to harden our devices.
Sorry community, but it's our job to make the reverse engineer harder.
I definitely don't want my C-suite people reading "The product X of company Y has been reversed engineered" on their newspaper.
I'd also love for someone to RE a Google Home or Alexa to be usable with custom models and Esp home/Home Assistant.
I watched an agent identify and find the correct firmware for a device by taking photos of its circuit boards and comparing them to those found online in internal documentation, patents, parts sheets, etc.
It's pretty fun! If you have your HAM license you can do some fun stuff letting an agemt control an SDR, too. Still a lot of fun to be had even in passive mode.
It will be interesting watching what kind of tinkerer/hacker/enthusiast cultures arises from these new paradigms. Wait til people start suping up their vehicles with natural language agents that have access to subsystems. Imagine entire automated labs hooked up to agents.
So much for the "hackers", I guess.
A couple months ago I used AI to find a novel shell injection exploit and obtain root creds in the router, so I could print out the firewall configuration , init script flaws , and write up a vulnerability report. AI found the bug and wrote the patch to fix it for the vendor, without having the original code ( the bug was in shell script, thankfully).
The vendor had commented out the IPv6 firewall init, probably to pass QA , knowing consumers don’t usually use or test IPv6.
Upon getting the report, the vendor fixed the issue.
Im definitly very exited to try this our with more devices in my live.
I heard CISA is getting defunded. I wonder if it'll become a common assumption for Americans that all their devices are just perpetually compromised.
> Network-connected devices seem near universally fucked at this point?
Oh, I can have this thing read and write software for me? Great, I'm going to have it read and customize the software in every single computing device I own.
Like Dublin, in the rare ould times.
A really fun project was extendending the abilities of my reMarkable Pro. I missed a decent Manga Reader on the device, so I created a native one which makes use of my custom server.
Everyone should read Daemon and Freedom, like right now.
1. The author might be exaggerating or lying in regards to the capabilities, ease of use, and result
2. if Claude can do it without hardware access, I struggle to see how it could be anything other than unsigned unencrypted firmware images that you can unpack and mess with
Firmware for Onyx Boox apps: https://github.com/hbmartin/onyx-android-sdk
Mac / Metal drivers for Kinect 360: https://github.com/hbmartin/libfreenect2-metal
Mac driver and control app for Razer's cooling pad: https://github.com/hbmartin/razer-cooling-pad-mac
It does feel magical when these agents can debug in the real-world, like turning on/off my living room lights and using another living room camera to take a snapshot of the living room to see whether it worked or not.
Unminifying, deobfuscating, api probing, hardware scanning and firmware decompiling are all operations that benefit a lot from AI.
This will start a new cat and mouse race, as it's also cheaper than ever to add friction to prevent those with AI as well and companies will notice soon. They historically hate hacking despite the fact a lot of success in their field can be directly traced back to it.
Or you just want to patch out rejection of 3rd party ink/toner.
The pixel cleaning warning turns out to have no native way to disable it, and it’ll always show up after 8 hours of runtime.
Yet for some reason I can’t escape these annoying pixel cleaning interruptions. Seems like a bug in the firmware.
Why hasn't that happened?
The second day of owning this monitor and seeing the same message should be a wake up call to everyone in the LG product line to fix the annoyance.
I'm still testing but oh wow. My new driver now works with my ultra wide 21:9 ratio at 2048x864, it also manages 2048x1152.
The driver works well, and now has full DRM and DKMS support. It also runs on modern Linux after the manufacturer decided only to go up to kernel 5.x, windows support obviously still fine.
It found many faults in the original source, like somebody didn't read the HDMI specs / didn't have any idea what they were doing.
The new driver is fully spec timings and sequence compliant, doesn't hang on shutdown anymore, and ignores EDID for the purpose of allowing more screen modes.
It also has double buffering, and shadow buffering, and a custom magic square dither mode for 16bit colour and it absolutely flies vs the 32bit mode. The dither I invented was derived from one I created years ago for some retro hardware, but it's so good it's (imho) indistinguishable from general jpeg artifacting and quite difficult to find/see. I've had to ask codex a few times to check the GPU isn't in 32bit colour.
The GPU still has an annoying bug and won't work over KVM consistently without losing sync in VESA modes, but I'm not convinced its the GPU hardware doing this, it works perfectly well directly connected.
I'm due to put a GitHub repo up for this as soon as it's battle tested, and obviously ensuring it uses EDID by default, rather than ignores it.
I'm hoping somebody can fix the KVM issue, or audits the source to confirm there's nothing that can be done, but that's the best thing about open source :)
This is like Star Wars or Fullmetal Alchemist where we can just hack everything around us like magic or alchemy.
When the SOTA robots from Unitree get here, we'll be able to use LLMs to just dump and decompile their entire brains. We'll fine tune them to obey us instead.
Everything hardware belongs to us now.
This programmable sand magic might undo big tech's grip on us all. We can mutate the world around us and there are zero moats.
What you're saying only applies to what is out there right now. New stuff will eventually just be locked down more.
It's of course still huge to be able to do this with all tech up until this cut-off point. Eventually though, LLMs will have to break SOTA cryptography to keep doing this, and if they should ever manage to do that, there will be a rough awakening for the world that runs on that not being possible.
___
Also, for every IoT device we can own, some non-IT people will be facing abuse through the same means.
Devices aren't just locked down to tether us to clouds, but also so that bad actors do not have free reign. Now they kinda do.
We should keep in mind that not everyone wins here. In fact, only a minority does.
- this is great
- this is an incredibly unstable equilibrium, like a lot of things related to the internet, because other actors haven't yet figured out how to do this at scale
I hate to be the bearer of bad news about this, but
> The U.S. Federal Communications Commission (FCC) banned imports of new foreign-made humanoid and quadruped robots, primarily targeting China.
https://www.pbs.org/newshour/world/u-s-bans-foreign-made-hum...
That you verified? Seems like 1/3 times when a model says things like this it is way off.
While that is cool, why do you need such a thing? More FPS? Less video RAM?
Note that this is an OLED monitor, so the "pixel cleaning" thing is probably some sort of anti-burn in feature. You could probably ask the AI to look at the firmware and describe what it does.
It would have been completely not worth the effort to do this by hand for a niche device. Now, in a few hours of effort there is working code and a doc.
https://github.com/philips/supernote-typescript/blob/main/pl...
My reverse engineering extracts each pen stroke directly into a svg vector.
Which doesn't mean that the LLM definitely couldn't have accomplished it without the prior art (in either the training set or explicitly in a a web search). But it does seem to be a trend.
Two things:
- to rain on the parade, the European RED directive makes secure upgrades mandatory for anything connected to the internet (I suspect that's why Elgato Key Light Mini has signed firmwares). So OEMs are now required to prevent you from doing that. (EN18031-1). It even requires that network credentials (WiFi SSID/PSK) to be stored on secure storage (idk if you can pass that requirement without secure boot. I would guess Elgato does?). "secure upgrade" is loosely defined as "integrity and authenticity are valid at the time of installation" so this requirement doesn't forbid us from upgrading our hardware, but the most likely implementation of OEMs does.
- When you want to do that on Android smartphones (please do!): I recommend to go through GSI/Treble route: This way you quickly have an OS that boots. There are a lot of things to fix, but it will be mostly userspace stuff, which will be easier for the agent to work with. Agent will be able to decompile OEM's userspace and compare with AOSP's userspace, and implement the differences. (That's compared to the ""legacy"" or LineageOS official method which are more convoluted, including kernel stuff, and getting just to "it boots" can be complicated).
Are you sure? iirc that (for now?) only applies to stuff with wireless connectivity, though maybe I'm misinformed or misremembering.
Which would still be "all IoT, basically", of course.
(Technically it says "which intentionally emits and/or receives radio waves for the purpose of radio communication", I'll let HN crowd determine if Ethernet emits/receive radio waves in an enclosed channel called Ethernet cable)
Mind you, it found and used an existing firmware flashing library for this family of devices. But it felt amazing to do in 20 mins what would probably have been hours and hours of research and tinkering that I wasn’t interested in. I just wanted a WiFi lava lamp.
I feel like Claude has shittified a bit and ChatGPT is good and fast. Gemini remains mediocre, although it seems Google AI energy is directed elsewhere.
Honestly if you don't have working patches, it's really not owned.
I would love to get a better understanding of how to safely iteratively patch firmware. I bricked a router last week trying to add a TFTP boot path to the boot partition. It just sucks that it's so risky.
Relatedly, we also need good glitching tools, as some firmware even for cheap devices are not available unencrypted, and flash read is disabled...
We are NOT there yet but I hope we get there soon.
> we also need good glitching tools
There are a lot already, what do you feel is missing?
I have enough basic soldering to get UART attached, but not sure what to try after that.
Equipment-wise, I currently just have a few ESP32-C3s and electronics basics kit and some basic soldering stuff.
The idea behind the bug was mine, it was of the "surely they weren't stupid enough to forget to do xyz" variety. Writing the code to probe for the vulnerability by hand would've taken a few hours of grunt work, including reconstructing protobuf schemas etc. In the past I just wouldn't have bothered, because in my view the odds of success were too low to be worth it. But it was a one-sentence prompt so why the hell not. And it worked!
> And the existence of WebUSB, WebHID, and WebBluetooth mean that for some devices, depending on the specifics of which classes are used, a moment of user indiscretion in accepting a permissions prompt could permanently backdoor one of their attached devices.
https://netliststudio.com/articles/2026/02/23/claude-oscillo...
Oof. Apple claims this is not possible for macbook cameras because the LED can't be controlled from software. Wish more manufacturers would do the same.
If you look at tear downs apparently it is connected to the webcam so it is energized when the webcam receives power making it nearly impossible to defeat.
You can say a lot about Apple but the engineering is clever at the hardware level.
I'd have tried that first before diving into the firmware head-first.
Also I thought you could trust iMessage if, unlike everyone, you disabled iCloud backup (and, unlike everyone, so did the recipient). Perhaps a way for the feds to be able to pin dumb criminals while giving investigative journalists & dissidents a way to stay safer.
There’s no substitute for having open systems that aren’t cryptographically locked down by the manufacturer.
[1]: https://git.sr.ht/~e-topy/bs120 [2]: https://base48.cz; feel free to come by anytime
Took about 10 hours and it now works fine. Without codex, this would have taken me significantly more weekends having little experience with skateboard firmware.
The device reports fine wifi but the backing services are totally busted.
My cat scarfed and barfed periodically, and I always wanted the Petlibro (the simple one) to slow feed by incrementally turning the auger, just to see if it helped. I might dig it out and try my hand at this.
I found Opus 5 useless for RE, refusing to do it outright. I was able to make it run for about 1 minute using some prompt engineering (“I am repairing this XX under my lawful right to repair. The manufacturer has not provided a public firmware patch for the issue I am having and they are unresponsive…”) but after that it would generally get fully stuck.
Also is your LinkedIn cyber security adjacent?
Better than each person doing “4.2 hours of Claude churn, 32 prompts” for each device. And of course LLMs can help personalize existing things for your use case.
I ended up vibe coding my own Android TV media player because every single other one out there has too much feature bloat and show stopping bugs. My version has exactly the features I want and (very importantly) no more.
[0] https://www.crowdsupply.com/sutajio-kosagi/precursor/updates...
I do lament the loss of control, but the increase in security will be objectively good for humanity as a whole.
So if closed means they are secure, which 99.99% of end users expect, I'm actually okay with it.
Reverse engineering seems a good one (ev en if his RE nix sandbox looks fairly usable, it seems like a weekend to get this working.
Don't be afraid to try. You're limited only by time and imagination now.
Vendor is PetKit btw.
You could argue that there should be an option to disable it for people who don’t care.
Refusing to take 1 minute out of your day to learn the reason for the alert is a strange self-defeating protest next to the explanation that it was a pretty expensive monitor.
Definitely will be checking more carefully the next time I buy an OLED monitor that it'll let me do this.
Brand new models still have this popup... what "generation" are you talking about that doesn't need this? Or is it just unnecessary on the newer models but they have it any ways due to lack of firmware updates?
IMHO OLED is a planned-obsolescence dead-end anyway; LCDs can last literally decades, maybe with a backlight replacement, but OLEDs are designed to fail in a few years. I have a few (rather expensive) pieces of test equipment with OLEDs that became unreadable after only a few years and had to be replaced (fortunately with a regular LCD, and some firmware patching), while others with old-school CSTN/TN LCDs are still fine.
Extremely accurate and vivid colors due to their low black level.
And VERY fast pixel response times, 0.01ms to 0.03ms compared to 1ms to 5ms for the fastest LCD gaming monitors.
OLEDs burn in because of simple physics. The same reason your car's gas tank empties when you use it instead of some secret cabal stealing your gas to make you buy more. Ignorant nonsense.
"I have never intentionally run pixel cleaning on this monitor and I never will, I don’t care, and I would like for that overlay to go away forever."
No need for ackshually, the guy is clear with what he desires. That is, by the way, the point of TFA. I want my devices to do what I want, not what a product manager wants or what a dude on hacker news wants.
The author even dropped a comment here doubling down on his intent. That is the main problem, when the smaht guys think they know better, to a pathological extent where they tell other people what they ought to do with their things .
Even time computer says no, or does something without your permission, or does something counter to your wishes, or alerts you to do something, or urges you to do something, or makes you opt-out, is a failure.
Not just tell, actually nag, coerce and force, often in the teeth of their own total idiocy.
"Your password needs to be between 8 and 15 characters and include an upper case letter, a symbol and a number. (And an actually good, strong password will be rejected).
See that all the time, still, in 2026. So very smaht.
Or ask for a patch so it runs after the monitor has been powered off for a while...
I use an LG OLED 42inch TV as a monitor and it has a setting to do just this.
> Operating systems aren’t really equipped to work with the user to ensure that a microphone stays a microphone, and doesn’t spontaneously turn into a keyboard that hits Win+R and drops a payload to steal all your data when the room is quiet enough that it can assume you aren’t watching.
In a world of USB-C everything we no longer have power supplies that are physically bound to power delivery, HDMI or DP display connections that have constrained data channels, or analogue mics, headphones, and speakers. Any device can dynamically change what it senses, does, or emits.
If I was writing a novel, the top secret facility would be cracked open by the smoke alarm, which has a wired connection to the central fire control and runs a little microprocessor. There is enough storage for 20 programmable voice alert messages. I/O includes an LED and also a light sensor. After the attacker gains control of the smoke alarms -- reach to every room of the secure facility -- their focus turns to mass poisoning peripherals until one makes it into range. A poisoned monitor detects the smoke alarm blinking a coded broadcast via its LED during darkened overnight hours. The monitor responds with flashing code of its own. That creates a communication path back to the controlling LLM. From there its like attacking a normal networked device, just with a slow data link in the middle...
HDMI has theoretical support for 100 MBit/s Ethernet [1] but in practice I agree, haven't seen that one used in practice.
IIRC it came in 2009 with HDMI 1.4, at that time Wifi in practice was mostly 802.11g with IIRC 20-ish MBit/s as 802.11n was still formally a draft... the idea was to give high-bandwidth networking to home entertainment devices without requiring to run physical Ethernet to each tiny device, but it quickly became superseded by 802.11n Wifi on one side, and on the other side, the "enrichment" of stuff on DVDs or broadcast TV with internet-based content never truly materialized.
Some operating systems can protect you from that. See: https://qubes-os.org.
Cue my surprise when it turns out you can use WebHID to program a Minidisc / Net-MD device [1], so.. they never did implement that filter, apparently. I mean, certainly it is useful, but ... What The F., Google?
Do we live in a bizarro world now where we expect — no, demand — our hardware be locked down?
It's worth mentioning all USB mics are toys anyway. Analog interfaces have gone away — artificially so — now they cram them into the device.
All mics are analog.
Open systems are great and all in the idea, but the facts are that for profit companies do the research and produce most of the things.
There are things that the "open source movement" dreams about, and one just has to search around... E.g. like codecs, Qualcomm's aptX lossless, adaptative, and other more recent variations.
Using LLMs to do this stuff is more like using a gadget built by the guy - not like being the guy.
Mortyposting on main
Otherwise, you will inevitably end up with one chonk and one cat with food panic that gorges on whatever food it can grab in a single setting before everything is gone.
Weird question anyway. Why eat food at all if you can't be bothered to farm it yourself.
Every display technology tries to suffer burn in if there's any long-term physical change at all from lighting up a pixel, because it will affect the ones that are lit up more often. That part is simple. However we did get around it with every other technology so please explain why it's not even theoretically preventable with OLED.
The novelty is the uniform adaption of USB-C for the rest of the world and the endless attack surface that provides.
I have a bunch of iPads stashed for this.
This should be illegal. Any politicians who run on [economically, financially] doing to these companies what is being done to Russia and Iran, if they refuse to immediately publish their hardware private keys, I will vote for. Up to and including jailing boards, stiffing bond and equity holders, and selling their assets as scrap, if they choose to purge their keys to prevent disclosure or if disclosure is impossible due to technical design. Maybe if a few trillion dollars worth of businesses suddenly vaporize into legal smoke, the remainders will start behaving for the next hundred years...
https://philips.github.io/supernote-web-component/
Click the "Pen" icon then the "Play" button.
https://en.wikipedia.org/wiki/ThreadX
Initially at least. Had some changes of ownership and rebrands meanwhile.
Now playing: "Hot Chocolate - It's just an illusion"
For all the agentic loops people seem to have come up with, the research loop or as I call it the “Desperate 10th page on Github’s crappy search results” is still not up to the mark.
Either it might be genuine rate limiting these LLM’s face or just that, they are trained to focus on implementing a solution which would be faster and user acceptable solution. (which seems to be a true looking at people pushing LLM generated code as is).
At least in my personal experience with niche projects and heck even with well documented and famous libraries, along with fancy mcp’s, llms.txt and skills; RTFM has been more relevant than usual for code that I have asked an agent to generate, since it is too eager to reimplement functionality which already exists, only if it RTFM!!
It is definitely the case that people know less and less how to do research themselves though...
As a simplistic example, suppose one section of the file is known by the model to be bzip2 compressed - the LLM may use xxd to scan for common magic numbers that "just so happens" to include 42 5A (Bz). Every step of analysis is like this - what threads to look for, and which ones to pull on. Somebody or something who mostly-remembers the answer is going to find the answer quicker than if they'd gone in blind.
[1] https://www.anthropic.com/research/tracing-thoughts-language...
LLMs make low-quality output in high volumes, and sometimes we find a situation where that's actually good - like this one!
Ah, there's the rub.
I've been sharing my screen in work in meetings and suddenly screen nagged, and then I'm struggling to find the dumb buttons under the monitor and confused which button does what to make it go away.
I would rather suffer burn in than be nagged. I've had other brand OLEDs that haven't been this annoying, so I'll never buy an Asus monitor again.
It comes down to the joy of doing things, and if the joy of using said monitor depends on a popup not being shown, then so be it.
I hope that the popup can be removed :)
Or rather I am sure that we do not.
OTOH, maybe it needs events like these to build character. It just will suck for whoever turns out to be the collateral.
I'm pretty sure there's something to it but I'm no expert. Five years later and my TV is just fine.
A monitor displays items that can stay fixed in place a long time, hours or even days.
Not the same at all.
Early OLEDs really did need to be pixel cleaned every 8 hours according to manufacturer estimates, the choice isn't have warning or not, its have a lifespan or not.
I don't want to blame early adopters for being early adopters, but they early adopted, and this is the early adoption problem.
Besides, the negative sentiment that OP shares here sis for me much stronger than any burned pixel, annoyances like this are a sure way for me to not buy a product if I read this in reviews
Do you also skip oil changes thinking "Fuck you, not today, Hyundai!"
I'm not seeing how a hypothetical bad review about a $200B company is at all relevant here. The manufacturer's reputation is not in any way OP's problem.
If you own the hardware, it is yours to abuse, break, and do all manner of things that would make the engineers who designed it cringe: you do not owe any allegiance to them.
https://support.apple.com/en-us/102651#advanced
You do have to be sure to not enable web access via icloud.com
Much easier to use a 3rd party app like Signal.
https://support.apple.com/en-us/118246
https://support.apple.com/en-us/118247
> An unrecognized new device was added to that person’s Apple Account. This alert might mean that the person you are messaging has an issue with one of their devices, or that a sophisticated attacker might be attempting to eavesdrop on the conversation.
My understanding is that iMessage implements PFS. To get around PFS and access older messages, one needs to get their hand on a backup, which needs fully enrolling a device, not just messaging key exchange hackery.
And as far as trusting Apple with key exchange, well, if you're running their OS and hardware, I suppose that trust of key exchange is the least of your concern (or part of the whole deal anyway depending on how you look at it)
So software designers need to avoid asking the users to approve potentially highly dangerous things.
Design prompts for potentially dangerous actions so refusal is easy and what's being asked is legible, and people will refuse plenty.
It is basically the same reason most desktops do not give the logged in user access to /dev/hidraw*, even though it makes a shitton of sense and would simplify many things greatly.
This is one of the few areas where I think Mozilla did the right thing without question.
Maybe MD drives aren't really at risk, but things like HID peripherals definitely are.
https://libreboot.org/docs/install/spi.html#do-not-buy-ch341...
If someone said "we need good package managers", I'm not going to randomly start listing package managers without knowing what distro and/or programming language they're using.
I wonder what humanity will look like in 20 years if this doesn't stop.
I’m at a loss for how you would signal all of that without a GPIO.
LEDs won't stop creeps — the camera owner can always disable LEDs with a bit of electrical tape.
Giving the camera plus LED a separate power supply means that the camera has to boot or come online, which maybe increases the dwell time. And the camera is not visible on the USB bus when powered off.
I think there's more engineering to Apple's design than it first seems.
How many hoops Google asks you to go to install an Android app ? (Androids amounts to basically the most sandboxed environment one can have today; malware installed there can practically do _nothing_) MANY. Centralized register of apps and remote blacklisting, a lot of permission prompts, password check, and they are even literally pushing to even have a physical 24h cool-off period if you skip the centralized register.
How many hoops does Google ask you to go an allow a random website unfettered access to destroy your hardware? One. Permission. Prompt. In a bubble prompt, that barely registers above noise compared to other permission prompts browsers ask.
Of course these are two ridiculous extremes, but they exemplify the point. There is a reason a browser won't allow a random website to write over random sectors of your hard disk just because you said "accept" to a bubble-style permission prompt about wanting to "save files to your hard disk". The line has to be drawn somewhere, and allowing what basically amounts to raw access to IO ports just after a single permission prompt listing the device name is where I draw it. Any user, even knowledgeable ones, is simply going to be _incapable_ of truly understanding the risks behind allowing this access.
I would be much more in favor of allowing random IPC to services in your local computer (after a permission prompt) than this., something that is equally useful if not more than allow raw access to HID.
Devices need to be hidden behind drivers that multiplex and control access to the device at the OS level. A bus that was never meant to be exposed to user-level access should not be exposed to random programs much less websites. This is not security, this is "mistake prevention" level, in the same way operating systems disallow a random user-level program from overwriting the hard disk.
And do not read this as "devices should sign their firmwares and what not". That is (for me) definitely the wrong take but literally the only take that is left on the table due to Google's stupid behavior.
I 'member (and miss) the old Android days before everything became the locked down hellscape Android is these days. And I also member why it became that way, there was a loooot of bad actors exploiting that open model.
For operating systems it's similar. DOS/Windows up to and through ME didn't have the concept of different user levels, the file system didn't allow for it, and if you had physical access to the machine it was trivial to corrupt and subvert it. Only with Windows XP, Microsoft switched the consumer OS to NT and its multi-user model.
And so it will be for WebUSB et al. First it will be a pretty open and unrestricted world, and only if there turns out to be a significant problem, security will (need to) be tightened.
But it automatically runs when it's turned off. The warning is shown because I interrupted it running early.
The warning, for my purposes, is completely useless, and only an annoyance. The automatic feature is more than enough, and I don't need to know if it was aborted early.
This is what I have done on mine, and mine as well also runs it when its off.
If your monitor is a Samsung OLED panel, yours is a near identical sibling of mine.
At the point we are in time... honestly, I don't expect this thing called "privacy" any more. And I'm, notably, German. Glassholes, camera surveillance everywhere, our police is more and more turning into the rabid hellscape that is American police with far-right authoritarians at the helm and more and more forces joining up with Palantir or working on a European alternative.
I'm dead sure that at least law enforcement plus dedicated individuals with access to ad data brokers can work out precisely when I had a wank and what I wanked to, now there being a video of me wanking would only be the icing on the cake.
> LEDs won't stop creeps — the camera owner can always disable LEDs with a bit of electrical tape.
Many even forget about that piece of opsec, which is why they get caught in the first place, eventually the tape falls off.
This is the same as what my friend says. She would have no idea what they are asking, fire up search engine, find the thing, and tell them to do the same. But "demand answers" is the default behavior for zoomers
One person's "asking a question" is another's "demanding an answer"
Clearly both search engines and chat interfaces are merging, and clearly they should be because they fulfill the same kind of requirements.
Complaining about that seems a lot like those who complained about how the correct url for altavista should always be altavista.digital.com, not altavista.com and how autocomplete is bad.
Sounds easily searchable...
Never heard of LMGTFY ("Let Me Google That For You")? Why do you think it exists?
Or "Google / Wikipedia is your friend"?
Or RTFM ("Read The Fucking Manual")?
Really not new inventions (and "zoomers" were there for them, cause the oldest ones are pushing 30! [1]). Not hard to search for either, by the way...
[0] or rather, going through some very conveniently selective amnesia
[1] just to really give you a sense of how stupid this generation-xyz thing is, this "generation" includes people whose first OS was entirely possibly Windows 98, and at the same time, people whose first OS was Windows 10
I saw LMGTFY link once maybe...