• 0 Posts
  • 28 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle





  • I don’t see it as irrational. You’re thinking about it the wrong way round.

    Manufacturers buy chips from proven sources, where the chip can be traced back to the fab that made it. The entire system of trust is built on the assumption that the chip designers and fabs are trustworthy and that the shady stuff happens elsewhere in the supply chain.

    When the designers can’t be trusted, it breaks everything. Up until now it hasn’t been a problem except in extremely sensitive areas like military equipment - only governments can force a company to risk everything by compromising their own products. But take the risk away - make it cheap enough to design new microcontrollers - and what’s to stop a chip designer from taking money from (for example) the Russian mafia? IoT is huge, everywhere, and Risc-V is ideally suited for it.


  • I don’t think it’s so much “security by obscurity” as it’s an issue of a much lower bar for chip production. Intentional back doors or malware represent a huge risk for a product line, so manufacturers won’t put them in without someone like the NSA leaning on them. It’s a simple risk/benefit calculation.

    But the risk is much lower if you can snag a processor design off the 'net, make your modifications, send it off to a fab and sell it under a fly-by-night operation. If it’s ever discovered, you take the money and run.


  • I see this sort of thing all the time.

    There’s a disconnect between the time scales for industrial equipment and the time scales for IT and telecommunications. A PLC running a factory might last 30 years, but the software to program and troubleshoot it won’t run on modern operating systems or computers. The company doesn’t want to spend hundreds of thousands of dollars to upgrade it when there’s nothing wrong with it.

    Same with telecommunications - POTS worked for a century, and over the last decade we’ve seen it largely disappear, which makes fire alarm panels everywhere inoperative. We recently ran into an issue where a fire marshall refused to allow anything but POTS and all of the non-end-of-life hardware only supported IP.


  • I don’t believe so - the docs mention several ways to boot a pi but most only work for newer models.

    An option might be to boot an SD card read-only and run everything over NFS. It’s trivial to do that sort of thing with some UNIX clones (OpenBSD, for instance), but I don’t know about a modern Linux.



  • It might be too outdated to do major services, but it’s still fine for its original use - interfacing with electronic components.

    You could build a weather station, monitor temperature and humidity in your attic and crawlspace, automatically water plants, etc. You don’t need much electronics knowledge for that sort of thing.









  • In some cases it is.

    I live on an acre about 100 miles from the nearest sizable city. I’ve got a workshop, pecan trees, a pool, a smoker trailer, a bonfire pit fifteen feet across, and lots of peace and quiet. No HOA, no city ordinances, no traffic, and the only loud neighbor is a donkey that brays a few times a day.

    That would cost me at least half a million in the city. The little apartment I used to rent Pre-COVID cost me nearly as much as the house payment I pay now.

    Is it for everyone? No. There’s no excitement, limited shopping and dining options, and anywhere I want to go is at least a twenty minute drive. But it’s great for me. My job sends me all over the world so I get my fill of the city while living in hotels. Going home is a breath of fresh air.