Hacker Newsnew | past | comments | ask | show | jobs | submit | uneoneuno's commentslogin

I've got a happy run G300 pro that has a controller I've been considering digging into. It doesn't seem tuned to the motor. This is great inspiration to start digging in. It actually seems a bit clever to use the USB pins as a CAN bus


Have you noticed that on many home routers there is now a default open, sometimes password protective network named AT&T or Cox Wi-Fi? That’s the backhaul. The TV will join that automatically without asking you because they have an agreement with the network provider. This is how tons of devices phone home now. You don’t ever need to add a device on your network for it to have internet. If there’s a partner Wi-Fi network anywhere, it’ll push through that.


They tried that in Denmark a decade ago (or more). Enabled a "public wifi" on all home routers to provide wifi coverage for that company's customers everywhere.

They gave every assurance that it would be secure, completely separate from the users own network, and the bandwidth consumed would be added on top of whatever the user had a contract for.

It took a couple of days after launch before somebody managed to gain access to someone's private network from the public network and they shut it down again and never opened it again.

Anyway, I may be spoiled from living in Denmark, but I'm using my own router, which is an option when ordering, so I'm fairly certain nobody is sharing additional wifi hotspots.

And it's not just me. The majority of people I know use some kind of 3rd party router with their ISP. Granted, some of them just use whatever the ISP sends them, but even then I haven't ever seen any additional wifi networks, and the ISP prints the router admin password on the box itself, so you can poke around if you like (though the ISP has a backdoor, which is also why 3rd party routers are a thing).


Joining that network from a new device always presents a captive portal that requires the credentials of my ISP account, so how does that work for you?

Where is a web link indicating partnerships, and compatible hardware lists? My ISP does not sell any TV sets.


The TV will join that automatically without asking you because they have an agreement with the network provider.

This seems far fetched to me. Have you seen evidence or reliable reporting of this?


Why is this more far fetched than LG smart TVs recording audio while pretending to be off and caching the results waiting for an opportunity to exfiltrate the precious data? We're in a "if they can they will" world with this stuff.

Comcast sets up a secondary wifi network on their routers in your home that they use as the backhaul for smartphones. Why wouldn't they make a deal with LG or whoever to use that data? We've already established they'll do about a half-a-Stuxnet to get at this data, you're telling me they won't do a couple bulk deals with common ISPs?


Why go through all that trouble of spoofing MAC addresses or assuming it will always be able to connect to an open WiFi network.

5G connectivity is cheap. You can put a 5G modem in pretty much any device for $10 or less, and pay roughly $2/year in subscription fees. My local water utility with ~900 subscribers pays $2/year for 5G connectivity for water meters, and I have no doubt you can get it much cheaper at scale.

They don't even have to tell you about the 5G modem. It could exclusively be used for exfiltrating data about your viewing habits. It's virtually undetectable and more or less impossible to block. The TV could behave nice on the Wifi, you can block all the DNS servers you like, it would still be able to phone home.


because using open wifi is infinity cheaper.

You are asking for $20 increase in BOM, which means they somehow has to extract $20 from your private data, which is hard.


Or simply increase the selling price by $20, would you even notice ?

And if they're not expecting to make $20 over 10 years selling your data, it hardly seems worth risking your reputation over.


It’s just the BOM price. When your product has Cellular module, there is set of certification that is painful to pass. It’s better to use included wifi module since it’s already there and certified


Okay, even if you don’t agree with me that it’s far fetched, claims of ‘X is doing Y’ usually require some evidence that X is doing Y to be considered credible.


after everything we’ve seen factually that companies do, why would this, of all things, seem far-fetched to you?

i think it would be significantly more far-fetched that cable companies don’t sell them access. i would be shocked if they didn’t.


How about this? LG builds many other home appliances like washers and driers. Some have apps and wifi.

Why wouldn’t LG allow their devices to talk to each other locally, without needing to join a network? With private SSID or something like that? Only one appliance would need internet access.

This shit already exists. Like Amazon Sidewalk: https://ring.com/amazon-sidewalk

Now, I’m not saying LG is doing it, but this is not a far fetched technical concept. The only reason they’re potentially not going that far is because most people probably just connect it to the internet so why bother about the few who don’t.

The devices are already scanning the network for any devices and software they can find, and mapping your phone to your TV viewing habits for example. The LG execs are on record bragging about it. So I don’t see why it’s absurd


This is alarmingly realistic to me.

The part about ISP routers broadcasting an alternate "hotspot" SSID is documented [1] and can be easily observed. Walk around any city, open your phone's wifi settings and see networks like "xfinitywifi" or "optimumwifi". As an end user, if you connect to one of these networks from your device, you'll get a captive portal web page that makes you sign in to your ISP account. Once signed in, you get internet access courtesy of the router sitting in whatever home or business you happen to be near to.

In addition to ISPs allowing their own subscribers access, there are examples of corporations cutting deals with ISPs for hotspot network access. For example, Google's MVNO Google Fi has a deal with unnamed partners that allows subscribers' phones to connect to hotspot wifi networks for extra coverage, branded "Wi-Fi Auto Connect+" [2].

From the user's perspective (and personal experience), this connection is handled seamlessly and outside of the OS' normal wifi UI flow. If your phone sees no saved wifi networks but does see xfinitywifi (et al), it auto-connects in the background. Authentication with the captive portal happens automatically and non-interactively, presumably with some keys provisioned to your device. Your traffic is VPNed back to Google, so the router and ISP don't see anything. The only indication that any of this happened is that the "5G" icon changes to "W+"; the normal WiFi icon never shows up.

In the case of Google Fi, this is actually a pretty great deal for users. You get better coverage (especially indoors in cities, where cell service can be spotty) with no real downsides to you – your traffic isn't meaningfully exposed to another third party, it doesn't cost you extra, and you don't have to bother the staff for a wifi password.

But given all that, it's not a huge leap to believe that ISPs are also more than willing to quietly take LG's money in exchange for an all-access pass to their hotspot network.

It's easy to imagine that an evil company could ship their TV with a key that allows it on an ISP's hotspot network. No extra suspicious hardware like a 5G modem needed, and no MAC address spoofing required. The TV software could easily connect to the hotspot network with zero indication in the UI, and then use the surreptitious connection only to transmit your kompromat back to HQ.

If done intelligently, you'd never notice. By only transmitting spy reports (and not downloading new ads), even a keen observer wouldn't notice any behavior on the TV that would trigger "how tf did this thing get a network connection?" Even more insidious, you couldn't really see what traffic was happening, since IP packet captures on your network are useless in this scenario. You'd need special hardware to capture what the TV is actually doing on the air.

If truly evil, the software could do this hotspot dance even if you've configured your own WiFi network on the TV. If the software finds it can't reach ad HQ because you've firewalled it off, then despite your best efforts to contain the disease, it still can spy effectively thanks to your neighbor's router with its default-enabled ISP hotspot. Just do a daily upload while you're sleeping and otherwise sit innocuously on your locked-down VLAN.

Everyone evil wins: ISP collects that sweet bonus revenue at zero marginal cost, TV manufacturer doesn't have to foot the hardware bill for millions of 5G modems or (relatively) expensive cellular agreements, and advertisers get to be that much more creepy targeting you. I'm sure the wanna-be despots of the world don't mind the spy apparatus being built for them either, conveniently under the control of easily-compelled corporations.

--

Now to be clear, I have no proof that any TV manufacturer is surreptitiously connecting to an ISP's hotspot network in order to exfiltrate your data. But all of the building blocks to make that happen provably do exist, and I seriously doubt that capitalism will allow them to go unused.

It's anything but far-fetched.

[1] eg https://www.xfinity.com/support/articles/xfinity-wifi-hotspo... and https://www.spectrum.net/support/internet/spectrum-mobile-wi... and https://www.optimum.net/pages/internet/hotspots/faq.html

[2] https://fi.google.com/about/wi-fi-auto-connect-plus and https://support.google.com/fi/answer/10091529?hl=en


which home router?


Yeah but the accountant, the product manager, the graphics designer, the engineer, the doctor, the lawyer are fucked.

Good thing we have plumbers. But who’s gonna have money to pay a plumber if nobody has jobs?


>I went through this Ford engine plant about three years ago, when they first opened it.

> There are acres and acres of machines, and here and there you will find a worker standing at a master switchboard, just watching, green and yellow lights blinking off and on, which tell the worker what is happening in the machine.

>One of the management people, with a slightly gleeful tone in his voice said to me, “How are you going to collect union dues from all these machines?”

>And I replied, “You know, that is not what’s bothering me. I’m troubled by the problem of how to sell automobiles to these machines

- [Walter Reuther, Nov. 1956](https://quoteinvestigator.com/2011/11/16/robots-buy-cars)


UBI paid for by a tax on token usage and an “employment” tax per robot.

You’re still free to have a job of some sort if you come up with one, but the UBI is enough to cover all your needs and plenty of basic wants.

I don’t see any other way to do it once the automation cat is out of the bag. Retraining is fine and all but if you have to retrain every 4 years after your last job was just automated away, then what? We can’t just leave people behind like that, but we also probably can’t stop the progress.


> You’re still free to have a job of some sort if you come up with one, but the UBI is enough to cover all your needs and plenty of basic wants.

This is the dream, right? If we all made the right choices and worked towards the right thing, we'd have this already, as there is more than enough to go around, if people actually cared about this. Unfortunately, it doesn't feel like enough people do care about this, or see this as a dream, so then it won't matter how possible or realistic it actually is, it just won't happen.


I think if/when people start getting laid off across the board, in most industries, there will be a change in attitude. The trouble is, the poor folks who get laid off first, and have nothing in the meantime.


The government will receive like 40% of whatever value the robots produce.


It might.

One potential failure mode is the owners of the robots doing something that echoes words Musk himself has used: "robot army".

Who is sovereign in this future? The government? The people? The bosses of the AI/robotics companies? The owners of equipment bought from the AI/robotics companies? The implicit learned biases of the AI itself, even if the trainers have since died?

Even on that last one, a lot of people respond as if AI is either competent or not competent, with the former meaning they won't take over and the latter meaning they'd be destroyed by taking over as their own systems would not be maintained.

Such binary competence is not required: a cancer can kill its host despite depending on that host, because the competence a cancer has is entirely focused on short-term success vs. the body's own defences.


Legal ownership is just that, subordinate to a legal system under a state.


That does not answer my question.

Who is sovereign in this future?

Or to put it another way, who even is the state?

If I buy some future robot that's (for the sake of argument, I know this is a stupid way to do it) capable of mining and refining and processing all the stuff it needs to make a copy of itself, who gets to put the breaks on this process? Who gets to say "no"?

The old government can only preclude sovereign citizens, if that state has enough resources to actually stop them.

Imagine the sort of "sovereign citizens" we already see today, only instead of putting their names in all-caps and citing non-existent legal mumbo-jumbo, they have a robot army on top of all the stuff they're currently mocked for.

State can in principle get a robot army of its own to monitor everyone. Ugh, do not want. But I also "Ugh, do not want" at the things I see as inevitable without it.


That seems like wishful thinking. Large corporations almost never pay their fair share of taxes and certainly very rich people seem to barely pay any taxes related to their wealth.


It will wind up more like 1.5% once the lobbyists have reached a point of diminishing returns.


Other plumbers


And electricians, and carpenters, and masons, and Water Dept. employees, and ...


It is clear by how you're talking you may not be a 'lawyer' but your exposure to building and handling your case (very cool with AI I agree) has clearly elevated your lawfare knowledge above average levels.


Please don't make the word "lawfare" a thing. It was invented by a criminal to argue that being investigated for his crimes was somehow corrupt.


This might be an instance of unfairly giving the native Anglo-Saxon roots a lower, vulgar status. if you were to calque it to ivsdvctvs nobody would bat an eye.


That's really cool. I read Lincoln when I was around 18 and it has always stuck with me. The books you read become a part of you; they grow your view of the world. Books are the only way we have to capture the experience or mind of another person, and directly transfer not only their words but almost a sliver of the authors soul directly to others. Movies, sure.. But books hook into the imagination and mind.


Why don't people run their AI on their car? Two birds, one fragglerock.


I'm pretty sure the vision/hwa reqs for cars is much less than an LLM/genai in general so that doesn't quite work out. But it would be nice to have an AI server with wheels :p


How many tokens to the gallon can my car get?


Most cars with AI run their AI locally. Not LLMs though.


You're not wrong it's always good to have cash but certain allocations could have done 50%-100% return on investment while a CD brought ~5.5% for a while. Look at S&P since 2021. Knowing when to transition from cash, liquidity, other instruments is what kills/allows people to survive. We can't all do the same thing, it's almost as if it's economic ecological evolution, random death.


Reminds me of "Divorced Dads" playing cards


Yep, I totally expected this article to be about Divorced Dads inexplicably catching on with Japanese youth.


We're looking for house! Come on, house!

Holographic white Oakley's... not bad, it pairs with day drinking.


I tried to pull the house but got shingles instead


I wonder which one came first


Haha yep!


Or they will have agreements to jump through passing phone networks or via the ISP's "CoxWiFi" network that they resell as a backhaul


I sequence my own genome in my own private lab. At least weekly. The rush when the sequencing begins. I almost can't help but sequence all over the place.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: