6 ms·
I will admit that I am not a fan of the "right to repair" movement in terms of what I've seen from it so far when it comes to actual legislative proposals, and
by xoa 9y ago
I will admit that I am not a fan of the "right to repair" movement in terms of what I've seen from it so far when it comes to actual legislative proposals, and I also find a lot of the way it talks down to current consumers and market forces distasteful and short sighted. I can absolutely see how in some areas of production narrowly tailored rules might be beneficial in terms of efforts manufacturers make to prevent repair purely for anti-competitive reasons. But there are at least two critical, legitimate benefits/tradeoffs (and in turn questions) that more broad based efforts have to address in my opinion. I'm going to use Apple as an example here given they're a legitimate example of both and also big and broadly well known.
1: Security. The fact is that there is an absolutely enormous (and growing) amount of value in a fully trusted hardware stack. Apple has taken a lot of flack from "right to repair" over issues like not being able to "repair" the Touch ID, but I haven't seen any great answers over how to allow any random 3rd party to repair Touch ID without also meaning any random malicious 3rd party (including legitimate repair shops in some scenarios) could replace it with something hostile too. I actively do not want anyone but Apple to be able to mess with the hardware authentication chain on my iPhone, even though I do support legislation to (and have written to my reps in favor of) require manufactures to allow users to additionally add their own master keys for running software on top of it. Having the option to minimize the number parties who can alter your hardware is something that has value.
I think a well crafted system might be able to square this via dual chains that an owner could pick on purchase and appropriate manufacturer liability mitigations. So for example you could choose "only Apple may ever modify the trusted core of this device" or "anyone with the key can" and in each case Apple would utilize a separate root private key. In the former case it'd be like right now where Apple never shares that, in the latter they'd offer signed leafs to anyone who asked so any 3rd party could make the repair (and sign off on it) instead. In the latter case Apple would also be relieved of all liability for any damage ever done due to a 3rd party Touch ID repair, though I suppose in practice they might still face legitimate PR damage (but that should be able to be minimized if it's clear enough that the owner willingly gave up protections).
2: Active/Dumb Matter ratios and dynamic flexibility: The other issue is that "repairability" in many of the formulations I see in HN and other tech community discussions comes with a lot of costs of its own that aren't address. A trivial, super common example is the battery. It's hard to go a single mobile phone discussion without somebody complaining about how they want the trivially replaceable batteries of yore. However, there are fundamental tradeoffs there in terms of actual basic physics. A user swappable battery has to have physical connectors capable of repeated usage. It cannot be soldered on. The battery itself must have its own safe case. The phone case must be altered to allow the swapping which requires structural compromises vs a solid piece. The battery must generally be a reasonably simple geometric shape, rather then whatever arbitrary shape the manufacturer wants to maximize volume in relation to other facts of the internal design.
All of which ultimately boils down to lots of extra matter that isn't battery or phone. There isn't any way around that with current technology. A smartphone using a non-swappable battery will always fundamentally have more single capacity, be lighter, or both, and of course can still just utilize an external battery pack if bulk is not an issue and more between-charge run time is necessary. Swappable has its own use case, but it's not a slam dunk at all nor is it a conspiracy nor are regular consumers "stupid" for preferring a different balance of trade offs.
This same sort of tradeoffs happens elsewhere, where more integration allows for fundamentally more efficient and superior performing designs at the cost of making it harder to repair. And this too is an environmental issue: across billions of phones, extra dead matter adds up all by itself.
----
I'm not saying that there isn't abuse, that complaints about John Deere and the like aren't justified, or that there is no room for better rules. But particularly with electronics a lot of these questions really do seem like they're best answered by the markets, and that legislation should first be focused purely on making those more efficient (by ensuring that externalities from total lifecycle costs are all in the price up front for example). Any legislation directly interfering should be treated cautiously and given a lot of careful consideration. I'm worried that much of the movement I've seen so far is too focused on its own narrow use cases rather then the general population, and not giving a sufficient level of thoughtfulness to how different areas of the overall world market face different use and threat scenarios. A lot of tech people have a bad habit of calling incredibly smart people "dumb" for sharing different priorities wrt technology, and failing in turn to consider whether their cases can be addressed without it being a zero-sum game. I don't want to see the proverbial baby thrown out with the bath water here is all.
- The5thElephant 9y agoOh look someone being reasonable on HN. There is a distinct pattern in the tech and engineering world of people who assume that what they want is what everyone else wants, and if they don't want that they don't know what is good for them or they've been duped. Then they get presented with a cogent argument like yours and realize their neat world view isn't so clean cut after all.
- msla 9y ago> The fact is that there is an absolutely enormous (and growing) amount of value in a fully trusted hardware stack. Apple has taken a lot of flack from "right to repair" over issues like not being able to "repair" the Touch ID, but I haven't seen any great answers over how to allow any random 3rd party to repair Touch ID without also meaning any random malicious 3rd party (including legitimate repair shops in some scenarios) could replace it with something hostile too. A trusted hardware stack isn't one that's been locked down by a company, it's one I can modify and control. In short, I trust that Apple will control any hardware I buy from them, and I trust Apple will always work in Apple's best interests. I cannot trust that Apple's best interests will always align with my own. I cannot trust that Apple's best interests currently align with my own. > I think a well crafted system might be able to square this via dual chains that an owner could pick on purchase and appropriate manufacturer liability mitigations. So for example you could choose "only Apple may ever modify the trusted core of this device" or "anyone with the key can" and in each case Apple would utilize a separate root private key. Only if I could revoke the manufacturer's ability to modify my hardware. > In the latter case Apple would also be relieved of all liability for any damage ever done due to a 3rd party Touch ID repair This is obvious. I agree with the rest of your post.
- throwaway613834 9y ago> I actively do not want anyone but Apple to be able to mess with the hardware authentication chain on my iPhone Why doesn't encryption sidestep this issue for you?
- kccqzy 9y agoHow does encryption sidestep this issue at all?