Hacker News Reader

Comment by tpmx | Hacker News Reader

I think the best approach is to never, ever connect a device like a TV, Blu-ray player, etc to the internet. That's the only way they'll survive. So far no HDMI-based attacks.

Hotglue the ethernet port?

View on HN

At least TVs on the (originally) European DVB broadcast system can pick up firmware from broadcasts.

Packets in the transport stream include the necessary firmware.

Don't know if they still do it in the USA, but about a decade ago Sony XBR TVs were able to OTA update from local PBS stations.

I don't know how useful that was. Most people hook up TVs to cable boxes.

I never hooked up my Sony to an antenna for exactly that reason. There were reports of people being unsatisfied with firmware updates. E.g. the motion interpolation algorithm changed.

This is still used for set-top boxes, at least in Belgium. It happens in the background now, but up until a few years ago when you first got one you'd only see the firmware downloader for an hour or two, with this block diagram where you could follow along: https://i.imgur.com/hh7eWZr.jpg

The worst part about that was if your signal quality wasn't great. You'd see blocks fail, and it'd take ages for them to come up again.

The boxes now ship with usable firmware preloaded, and will update in the background in the first few days usually.

That is the most LCAR upgrade screen I have ever seen...

that can't be an accident surely; i want it.

Is there anywhere I can read more about the technical details behind this? It sounds pretty interesting.

I searched for "DVB firmware", but didn't find much.

There are several Methods for this - search for OTA... One of our STB models are still using OTA via DVB-C (I’m in Denmark). Only without the the last few months are we replacing the QAM based SWUPDATE mechanism to an TCP/IP based mechanism (IP is required for using the STB in the first place even though it’s a DVB-C BOX)

EDIT Here are the standards you want to read: https://dvb.org/?standard=specification-for-system-software-...

ISDB-T has similar system and some Toshiba DVRs at some point had similar mass bootloop I remember

That doesn’t work if your BluRay player requires an internet connection. Yes, they exist.

Then return it and buy one that doesn't.

Please do name and shame.

I don’t know of any off the top of my head, but I have seen them.

Besides that though, firmware updates require an internet connection, and those updates contain keys for newer AACS versions. So if you want to play a just-released movie, you may need a player capable of AACS 72 (or whatever it’s at now), but yours may only support AACS 52 (out of the box).

MakeMKV does require an update for each new AACS version.

I have a TCL tv that has the Roku firmware on it. I have never connected it to the internet, but I made sure I could update it without the internet. When I shopped for a tv, I was adamant I needed a tv I could update via USB, and Roku’s firmware allows it.

All is not lost.

Every player whose key has been blacklisted. Owning BluRay is a poison pill.

Don't forget to lock all of your consumer electronics in Faraday cages to keep the Weefees out.

Reply on news.ycombinator.com