5 ms·
> Even if the owner can't control exactly what is in an update, they absolutely MUST be able to control when an update occurs. +1 for this at the consumer leve
by baby_souffle 3y ago
> Even if the owner can't control exactly what is in an update, they absolutely MUST be able to control when an update occurs.
+1 for this at the consumer level. My oven may have a critical update, but - for right now - *nothing* is more critical than finishing dinner. I'll let the update apply the day after thanksgiving when I'm doing the dishes.
There are a few connected appliances brands that do this well: updates are broken down into two classes - "critical/security" updates and "all the other updates" - and I get to pick from "do nothing, notify, notify and download, notify, schedule/auto-apply" for both channels. Unfortunately this is not common because it takes planning and more than the bare minimum to pull off.
- klausa 3y agoI think this is oversimplifying things. Is finishing the dinner more important than applying a patch that fixes actively exploited bug that locks your oven into cleaning mode and burns everything inside into ash over the next three hours? Or something that disables the safety checks and lets the oven overheat and burn your house down? (Granted, the latter shouldn't physically be possible because it should have physical temperature killswitches etc.) People always (understandably so!) consider software updates to be annoyances; but especially when you give an example like _an oven_, the potential for _catastrophic_ failures is too great.
- MarcoPerazaFCC 3y agoOne my favorite IoT botnet scenarios is an attacker taking control of thousands of ovens/air conditions/other high-wattage devices and using them to cause power outages. https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-soltan.pdf https://www.usenix.org/system/files/conference/usenixsecurit... I wonder how the impulse to connect everything to the internet will be remembered.
- deleted 3y ago[deleted]
- hot_gril 3y agoThese seem like very rare scenarios. If we're concerned about dire threats like this, the manufacturer needs a way to remotely send devices into an internet-disconnected "safe mode" before anyone's even talking about updates.
- klausa 3y agoHow do you, as a user, determine whether your oven is in "safe mode" that the manufacturer has toggled, or in "safe mode" that makes the UI look the same as the real one, but is actually a malicious code that waits until 3AM to start the cleaning mode? I agree that these scenarios are (relatively) far fetched _now_; but if we expect the future to include connecting appliances like that to the internet, then solving problems like those is table-stakes stuff. I understand that enforced software updates are annoying; but for high-stakes environments like this they strike me as a lesser of the two evils.
- hot_gril 3y agoIf the attacker has total control, then all bets are off no matter what mechanisms you put in first. Adding a safe mode would at least allow manufacturer to stop any non-total exploit without relying on the more complicated update mechanism. Also, the appliance would more likely work in a kinda normal way in the meantime.
- withinboredom 3y agoFinishing dinner can be more important than the house not burning down. A burned down house is likely insured. A dinner with a potential business client is not.
- aflag 3y agoI think it works best when the consumer gets to decide. If a car recall comes along because the seat belts in your car have been shown to actually kill people in accidents, would you blow off your weekend plans to get your car fixed as soon as possible or would you go to your thing then bring the car to the manufacturer on Monday? There will be people on both sides of that decision and, ideally, we should let them choose.
- freedomben 3y agoYou make a good point, but this kills me. I've been writing software a long time, and there's nothing I trust less to control my oven than software. God help us. I yearn for simple physical controls
- hot_gril 3y agoI'm wondering why you'd have a smart oven in the first place. Seems like all risk and no reward.
- MrDrMcCoy 3y agoProbably for some feature or astetic that's unrelated to the smart features, but is only available on the smart oven.
- galangalalgol 3y agoThis os definitely most of it. Also, someone figured out they could do something with the parameters of the convection oven and get close to an air frier. Got the mode a year later. Lastly, when the meat thermometer hits temp, I get a notification. That is actually useful.
- stevehawk 3y agoThe ability to pre-heat my oven without standing in front of it. That's really the big win. But also to be able to tell if spouse or children left it on.
- hot_gril 3y agoBut I can walk to my oven and turn it on, which wasn't a real problem even when I lived in a huge house. What am I missing?
- fragmede 3y agoThe more critical thing than finishing Thanksgiving dinner for your oven is not burning your house down.