Help - Search - Members - Calendar
Full Version: Stupid pointless wifi creates serious vulnerabilities
Dumpshock Forums > Discussion > Shadowrun
Wounded Ronin
So, one of the reasons that I never got into Shadowrun past 3rd edition was the fact that all of a sudden the characters started running around with smartphones and wifi, whereas a big part of 80s lore about the future of communications and electronics would be that everything would be physically large, visually stimulating, and trailing large fiberoptic wires.

And of course one of the things that has been discussed a lot on this forum are questions like, "why would anyone need to make a gun be hackable via wifi, just have an offline or purely mechanical gun", and things like that.

However, apparently nowadays all kinds of devices have stupid, pointless, and completely unnecessary wifi features that also make them vulnerable to malware and hacking. For example, someone just demonstrated ransomware that could affect a certain thermostat. Can you imagine someone making your heater go full blast 24/7 so your house would be like 100 degrees F, and you have to pay a ransom to be able to turn it off? Or, imagine something like that affecting the central heating system of an apartment complex, so that all apartments suddenly start heating full blast in the middle of the summer.

So, I guess that maybe the whole thing about wifi guns wasn't that far fetched after all. I mean, I can't imagine in ten thousand years why in the history of mankind we would want thermostats, refrigerators, etc. with these functions and vulnerabilities, but that doesn't mean that some manufacturers didn't think this would let them sell lots of expensive product to consumers. (Why don't the consumers THINK about these sorts of security issues!?!?!?) It makes no sense whatsoever but this is apparently something people actually do in reality!

I don't know, people. I think I really need help; that is, help understanding how people think. I mean, really. Who sees a wifi fridge and says, "BOY HOWDY! I can pay a lot more money for a formerly simple device that kept my food from spoiling, in order to add software bugs and vulnerabilities, unnecessary electronic components that represent additional possible sources of device failure, AND which make the whole thing that much more expensive and difficult to service and maintain! Furthermore, it means that the device will strictly be suitable for locations with a stable power grid, since power outages or anomalies will probably fry the circuit boards, so if I move to a rural or natural disaster prone area, or if the local power company ever starts dropping the ball, I'll basically have to either get a different fridge, or buy, maintain, and service an automatic backup generator for my house! HELL YEAH JUST WHAT I WANTED TO SPEND MY HARD EARNED MONEY ON!" If anyone understands the how and the why of people being remotely interested in such a device, please tell me. I feel like you will have solved one of the mysteries of mankind for me. And then maybe I'll be mentally ready to play late-edition Shadowrun, having finally come to terms with this mystery. wink.gif

(I mean, I would rather have an icebox from the 1950s and require regular ice delivery than have to manage a fridge like that!)

I'm starting to think this might be a question that can only be answered via initiation astral quest.....

Article that sparked this post: http://thenextweb.com/gadgets/2016/08/08/t...e-because-2016/

QUOTE
Andrew Tierney and Ken Munro – two UK-based researchers for IT security firm Pen Test Partners – demonstrated the world’s first ransomware for a smart thermostat earlier this week at the DefCon security conference in Las Vegas.

The Wi-Fi enabled thermostat that the researchers targeted is basically a Linux computer. It allows the user to upload wallpapers and configuration settings through an SD card; that’s what they use as a vehicle to install a malicious program onto the device. At this point, an attacker would have full control over the thermostat.

...

This episode illustrates the troubling fragility of Internet of Things devices. There are far too many of them that have shipped with vulnerabilities that leave their users at risk, from Wi-Fi enabled kettles that leak network passwords, to “smart fridges” that broadcast the user’s Gmail credentials in plaintext.

As the number of IoT manufacturers and users proliferate, and as the devices become mainstream household appliances, it seems probable we’ll see even more high-profile security issues.
KCKitsune
QUOTE (Wounded Ronin @ Aug 9 2016, 05:18 PM) *
... SNIP ...

I'm starting to think this might be a question that can only be answered via initiation astral quest.....

Article that sparked this post: http://thenextweb.com/gadgets/2016/08/08/t...e-because-2016/


To be honest I LOVE electronics. I have more gizmos than I regularly use. I have a cell phone, 2 tablets, 4 laptops, one Chromebook, a desktop tower, a streaming TV box, and 2 or 3 HDMI stick computers. With that said, the idea of having my front door, thermostat, or refrigerator controlled by WiFi does NOT interest me at all. The security on those things makes me cringe. I've already said this on XDA-Delevopers (paraphrasing because I don't remember exactly what I said) "You could have the most perfect security in the UNIVERSE on the device, but other end of equation is a phone that has crap for security."

Now add in this little fact, most people are idiots when it comes to computer security. They'll download the latest in garbage ware that is riddled with spyware and other drek. Also the US has pretty poor cyber security. We REGULARLY get owned by the Chinese and the Russians. Hell, we get owned by the NORTH KOREANS from time to time! While US colleges are trying to get more people to take gender studies and regularly worry about bathrooms and microagressions; the Chinese, the Russians, and the Koreans are putting their people though hard sciences and hard core cyber boot camp.

No, I would NEVER trust WiFi connections for something as vital operating my gun. In SR4, my character has cyber, but also has a full on set of cyber security and two Agents (one from the commlink and one from the Cluster of all his other cyberware that is slaved to the commlink) running full on IC. One is set for full defense and one is set for offense.

/rant:

Wounded Ronin, I'm sorry to use your thread for a rant, but feel it did fit into your disbelief about adding WiFi to things that DO NOT need it.
ShadowDragon8685
QUOTE (Wounded Ronin @ Aug 9 2016, 04:18 PM) *
Why don't the consumers THINK about these sorts of security issues!?!?!?


So, what are your password practices like?

Do you:

1: Commit an entirely-unique, 25-character-minimum password to memory for each and every individual website you use?
2: Let a password manager/auto-fill-in thingamajigie do it for you?
3: Use one of a few, easily-memorizable passwords that you've used for a decade+?

I'm willing to bet it was 2 or 3, or closer thereto, than to 1.

And that is why: because convenience is always going to trump security. And if security is engineered in such a way as to make things intentionally inconvenient to force security, the hackers and other malefactors won't have to do anything, because the users will have defeated their own security for them; see also, anyone who ever left door-wedge in a secured side door that automatically locks so they won't have to walk all the way around the building to the front door and the security checkpoint when they slip out to have a smoke.
Beta
(All of this is strictly in my opinion. I don’t claim to have studied any of this in any formal way or to have expert knowledge from inside the design industry)

To an extent is manufacturers trying to make things look more modern and cutting edge, and counting on consumers to assume that these things really will make life better. Think of the bigger and bigger fins on cars in the fifties – we’ve just replaced that sort of design feature with gratuitous electronics (and fridges look silly with fins, anyway).

To an extent I think this trend was started before smart phones became so ubiquitous. With a smart fridge you could build your shopping list right on the basic tablet built into the fridge door! Except that now you could do the same on the phone in your pocket, and have it with you at the store without having to print out the list or transfer it between devices (of course, you could also have a note pad on the fridge door accompanied by a pen on a string, but that wouldn’t look modern and fancy enough).

And to an extent there is the possibility that someday the whole smart infrastructure comes together in useful and powerful ways, and no major manufacturer wants to miss that wave. Let’s say that you have your house programmed to expect you home at 6pm—it will bring the house to your preferred temperature by that time, turn on the light in the front hall, have your preferred evening radio station playing, etc. And that morning put some frozen pork chops in a special compartment of the fridge that is programmed to thaw them for that time, set the rice maker to have rice cooked perfectly at that time, and the kettle heated up so water is hot to use in steaming some vegetables. By noon you find out that you are going to be taking clients out for dinner and won’t be home until probably 9pm and won’t be eating at home that night – you ping your house the change in plans it figures out not to thaw the meat or cook the rice or boil the water, it leaves the house cooler/warmer until later to save on power, doesn’t put on that light until later, doesn’t put the radio on at all but instead plays some soothing music.

Is any of that big deal? No, not really. But if most of your house is built that way anyway, but the rice cooker isn’t (so you come home to cold, lumped together, rice), it is annoying – so odds on you don’t buy a rice cooker that doesn’t connect into your home network, to avoid that situation.

Now, personally, I curse the power windows in my car and generally try to avoid gadgets and electronics added to my appliances because I view them as ‘just one more thing to break.’ But I’m a guy (likely to have a stronger inclination to want to directly control, manipulate, and fiddle with inanimate objects, and less apt to be juggling multiple domestic priorities), and old enough to remember the novelty of getting a remote control and VCR for the TV (i.e. didn’t grow up assuming everything can and should be remotely or automatically controlled). For someone growing up more surrounded by automation, I could imagination the main frustration being that it just doesn’t work very well yet.
Tymeaus Jalynsfein
I think a Shark Like Refrigerator (Refrigerator with Fins) would be cool... smile.gif
sk8bcn
No a Wi-Fi refrigerator! Where do I get that?


Maybe a Wi-Fi clock: "sorry boss, I'm late, got my clock hacked"
Jaid
wifi-enabled refrigerators and thermostats don't bother me *that* much (though the article you linked seems to indicate the vulnerability comes from inserting an SD card into your thermostat, so uhh... don't put your thermostat on the outside of your house in a location where someone could be hidden while uploading a virus i guess?). i mean, i don't see huge benefits to doing so, but there are some benefits and let's face it, the average random person isn't going to be a target the majority of the time.

it's when we start talking about gear that has no major benefits (who needs to be able to fire their gun when it isn't in their hand and they can't aim it? makes sense for a smart firing platform. makes sense on a drone. makes NO sense on a handheld weapon. a simple location beacon that broadcasts basic information about gun model sounds reasonable though). and it gets even more silly when we're talking about gear where the only reasonable use strongly indicates that it should be offline, like a military grade stealth suit designed for snipers or wired reflexes that are basically only ever going to be used by highly trained covert operatives (because if it's overt, it's probably cheaper and more reliable to just send more people most of the time)
Medicineman
QUOTE
I don't know, people. I think I really need help; that is, help understanding how people think. I mean, really

It's because People in General are gullible and easy to fool
Here you've got Donald Trump telling Lies and half of the US believes what he's blubbering
and in SR you've got all the Megacorps that tell 24/7 how safe ,secure and easy to use WiFi is.
Regard the WiFi "Horror" as being part of the SR Dystopia

And I don't think that the Population in SR2075/2080 is as smart as the People of todays real world

QUOTE
"BOY HOWDY! I can pay a lot more money for a formerly simple device that kept my food from spoiling, in order to add software bugs and vulnerabilities, unnecessary electronic components that represent additional possible sources of device failure, AND which make the whole thing that much more expensive and difficult to service and maintain!

Why do people buy the newest Smartphone Year after Year, standing in a Que for Days just to get the next edition.
The answer lies somewhere between Greed and Lazyness

He who won't dance with capital Sins
Medicineman
Mantis
There are blue tooth enabled pregnancy test kits available today. Think about that. Companies will put wi-fi on anything if they think it will sell and it is cheap enough to do. Increase the margins. Sell it to the suckers. At no time will the manufacturers, sales staff or anyone else in the supply chain mention the vulnerabilities adding wi-fi brings. They will only upsell it, explain how it makes your life easier and keep a positive spin. That is why people buy it. If you are never exposed to the negative or you foolishly assume the manufacturers took care to ensure a device's security, then of course you can be convinced to buy it no matter what hidden problems the device has. Think of the number of times car companies have gone ahead with faulty parts because it is cheaper to pay out death benefits than to recall the faulty vehicles.
Wounded Ronin
QUOTE (ShadowDragon8685 @ Aug 10 2016, 05:30 AM) *
So, what are your password practices like?

Do you:

1: Commit an entirely-unique, 25-character-minimum password to memory for each and every individual website you use?
2: Let a password manager/auto-fill-in thingamajigie do it for you?
3: Use one of a few, easily-memorizable passwords that you've used for a decade+?

I'm willing to bet it was 2 or 3, or closer thereto, than to 1.

And that is why: because convenience is always going to trump security. And if security is engineered in such a way as to make things intentionally inconvenient to force security, the hackers and other malefactors won't have to do anything, because the users will have defeated their own security for them; see also, anyone who ever left door-wedge in a secured side door that automatically locks so they won't have to walk all the way around the building to the front door and the security checkpoint when they slip out to have a smoke.


Good point, although my practice is a weird blend of the above. For stuff I don't consider really high security (either rightly or wrongly I suppose) I'll do #3, but for some things I prioritize, those have unique passwords, and then for some, I don't even write the passwords down, so I forget them and end up resetting them repeatedly, which I guess is technically close to #1.

But, I'm a weirdo, and yes, excellent point! smile.gif
Wounded Ronin
QUOTE (Mantis @ Aug 10 2016, 12:16 PM) *
There are blue tooth enabled pregnancy test kits available today. Think about that. Companies will put wi-fi on anything if they think it will sell and it is cheap enough to do. Increase the margins. Sell it to the suckers. At no time will the manufacturers, sales staff or anyone else in the supply chain mention the vulnerabilities adding wi-fi brings. They will only upsell it, explain how it makes your life easier and keep a positive spin. That is why people buy it. If you are never exposed to the negative or you foolishly assume the manufacturers took care to ensure a device's security, then of course you can be convinced to buy it no matter what hidden problems the device has. Think of the number of times car companies have gone ahead with faulty parts because it is cheaper to pay out death benefits than to recall the faulty vehicles.


That is just crazy! You would think that of all things, a pregnancy kit would be something you'd want to be totally offline, for maximum confidentiality and personal control of the information divulged. If I were to improve it, I would have a way to "scrub" the results from the test after viewing, like a chemical result eraser, not have a way to broadcast the results wirelessly!
Wounded Ronin
QUOTE (Jaid @ Aug 10 2016, 09:40 AM) *
wifi-enabled refrigerators and thermostats don't bother me *that* much (though the article you linked seems to indicate the vulnerability comes from inserting an SD card into your thermostat, so uhh... don't put your thermostat on the outside of your house in a location where someone could be hidden while uploading a virus i guess?). i mean, i don't see huge benefits to doing so, but there are some benefits and let's face it, the average random person isn't going to be a target the majority of the time.

it's when we start talking about gear that has no major benefits (who needs to be able to fire their gun when it isn't in their hand and they can't aim it? makes sense for a smart firing platform. makes sense on a drone. makes NO sense on a handheld weapon. a simple location beacon that broadcasts basic information about gun model sounds reasonable though). and it gets even more silly when we're talking about gear where the only reasonable use strongly indicates that it should be offline, like a military grade stealth suit designed for snipers or wired reflexes that are basically only ever going to be used by highly trained covert operatives (because if it's overt, it's probably cheaper and more reliable to just send more people most of the time)


I think the thermostat malware was more a proof of concept project, but the way I would see the thermostat being compromised would be if someone hacks a software update for the thermostat which the user then voluntarily installs, or alternately for a place like an apartment building someone who is planning to shake down the management manages to break in and install the malware at 2 AM, and then turns around and makes demands of the building management.
Wounded Ronin
QUOTE (Betx @ Aug 10 2016, 08:31 AM) *
(All of this is strictly in my opinion. I don’t claim to have studied any of this in any formal way or to have expert knowledge from inside the design industry)

To an extent is manufacturers trying to make things look more modern and cutting edge, and counting on consumers to assume that these things really will make life better. Think of the bigger and bigger fins on cars in the fifties – we’ve just replaced that sort of design feature with gratuitous electronics (and fridges look silly with fins, anyway).

To an extent I think this trend was started before smart phones became so ubiquitous. With a smart fridge you could build your shopping list right on the basic tablet built into the fridge door! Except that now you could do the same on the phone in your pocket, and have it with you at the store without having to print out the list or transfer it between devices (of course, you could also have a note pad on the fridge door accompanied by a pen on a string, but that wouldn’t look modern and fancy enough).

And to an extent there is the possibility that someday the whole smart infrastructure comes together in useful and powerful ways, and no major manufacturer wants to miss that wave. Let’s say that you have your house programmed to expect you home at 6pm—it will bring the house to your preferred temperature by that time, turn on the light in the front hall, have your preferred evening radio station playing, etc. And that morning put some frozen pork chops in a special compartment of the fridge that is programmed to thaw them for that time, set the rice maker to have rice cooked perfectly at that time, and the kettle heated up so water is hot to use in steaming some vegetables. By noon you find out that you are going to be taking clients out for dinner and won’t be home until probably 9pm and won’t be eating at home that night – you ping your house the change in plans it figures out not to thaw the meat or cook the rice or boil the water, it leaves the house cooler/warmer until later to save on power, doesn’t put on that light until later, doesn’t put the radio on at all but instead plays some soothing music.

Is any of that big deal? No, not really. But if most of your house is built that way anyway, but the rice cooker isn’t (so you come home to cold, lumped together, rice), it is annoying – so odds on you don’t buy a rice cooker that doesn’t connect into your home network, to avoid that situation.

Now, personally, I curse the power windows in my car and generally try to avoid gadgets and electronics added to my appliances because I view them as ‘just one more thing to break.’ But I’m a guy (likely to have a stronger inclination to want to directly control, manipulate, and fiddle with inanimate objects, and less apt to be juggling multiple domestic priorities), and old enough to remember the novelty of getting a remote control and VCR for the TV (i.e. didn’t grow up assuming everything can and should be remotely or automatically controlled). For someone growing up more surrounded by automation, I could imagination the main frustration being that it just doesn’t work very well yet.


1.) There's a Ray Bradbury story where such a house is portrayed as disembodied and creepy; I guess he really managed to predict the future. There Will Come Soft Rains: http://www.gs.cidsnet.de/englisch-online/o.../soft_rains.htm

2.) I'm like you, I hate unnecessary electronics and automation in cars. The next time I buy a vehicle, I want it to possibly be the last time, and I want an old pickup with minimal electronics and possibly manual transmission, that I can just keep running forever. I am so annoyed that now manufacturers throw so much stupid electronic frills into cars (that will be obsolete before the car is ready to be scrapped!) and have literally created vulnerabilities through which cars can be remotely hacked, and then they smile and want you to be happy to pay for that. It gives me a visceral sense of disgust and I'd rather drive an old manual pickup, for real.
ShadowDragon8685
Remember, people value conveniences over security, because security breaches, even in 2070, are things that, statistically, happen to "other people." The average joe has never been hacked - or if he has, he's never noticed it, because his account wasn't drained, and whatever his malefactors did on his devices left no traces. He hasn't been robbed at gunpoint, he hasn't had his car stolen and sold to a chop shop/used in an armed robbery.

I mean, sure, he could make himself secure against all of the above.
He would have to forgo:
Electronic banking entirely. This would make it entirely impossible for him to buy even basic goods like food anywhere except where certified credsticks are still accepted; he has to go into a D- zone at the edge of Redmond Barrens and do his grocery shopping at the Stuffer Shack.
Living anywhere "nice," even if he's pulling down enough money to live somewhere better, because he's going to have to forgo electronic banking, and most landlords get highly suspicious if you pay your rent in certified credsticks/refuse to take the money entirely.
Having a car that comes to get him from work and take him home at the end of the day, meaning he'll have to pay for a parking rental somewhere close to his work.
Any Matrix browsing that doesn't take place on public terminals.

Etc, etc.
If you find a guy who forgoes all of that in the name of security, congratulations; you're gonna get geeked, 'cause you've identified a Shadowrunner who's changed his identity and is laying as low as possible.

And anyway, if you wanna be secure "enough?" Think like a 'Runner.
Program your devices with simple bullshit "traps," causing them to ignore all admin/user accounts that aren't your superuser account, and to immediately disregard all wireless input until manually reset if any such accounts are created/accessed. Upgrade the electronics in them with higher-tier equipment if it's important (like your car) and has to be standalone, or slave them through a single device which is high-tier if it's not - a Rating 6 desktop machine should be a great deal cheaper than an R6 commlink, and you can hardwire your apartment's kit through it, so suddenly you've raised the bar to hack your home from the R3 (at best) node on your front door, to an R6 terminal with R6 Firewall and R6 IC actively scanning all logged-in users every combat round. Suddenly you've gone from "trivial for a chargen hacker to pwn" to "as difficult as a moderately tough beginning Run target." Script kiddies and such just got locked out, etc.

But all of that costs nuyen.gif
Sengir
QUOTE (Wounded Ronin @ Aug 9 2016, 11:18 PM) *
I mean, I can't imagine in ten thousand years why in the history of mankind we would want thermostats, refrigerators, etc. with these functions and vulnerabilities

Because the thermostat connects to the window sensor which turns it down when the window is open. Both also connect to a central node which turns down the heating while nobody is at home (adjustable via smartphone) and acts as an alarm system using the window contacts as sensors and the (also connected) smoke alarms as signal...smart home, y'know? wink.gif

From a security standpoint, it would actually be a boon if more of those things used Wifi instead of some proprietary protocol. One of the most important lessons in IT security is "don't roll your own crypto". By contrast, WLAN with WPA is a well-designed system building on known cryptographic primitives and audited to death twice over, without turning up significant flaws in the protocol itself. The biggest flaws are factory default passwords straight out of spaceballs and the stupidity that is WPS.


@Kitsune
QUOTE
Also the US has pretty poor cyber security. We REGULARLY get owned by the Chinese and the Russians.

May I remind you of things like Stuxnet, Duqu, Flame...? wink.gif

If western countries appear more vulnerable, it's mostly because in this game attackers don't declare responsibility. So news of successful attacks depend on the target admitting it, which simply does not happen in North Korea et. al. It's kinda like the Soviet space program, which had a great security record -- because any mishap was declared a state secret. They didn't even announce Gagarin's flight until he was safely back again, whereas the US announced every launch and had to live with the "Flopnik" headlines.
KarmaInferno
I have no problem believing that wifi matrix-connected versions of EVERYTHING exist in 2070s Shadowrun. Go to any retail store today and flip on you phone's wifi scanning, and you will see connection signals from damn near every type of product there.

There will always be individuals or groups that value discretion and the ability to go undetected, however. Those will always demand non-connected equipment, and there will be a segment of manufacturing that is interested in catering to those needs.



-k
Mantis
QUOTE (KarmaInferno @ Aug 11 2016, 09:39 AM) *
I have no problem believing that wifi matrix-connected versions of EVERYTHING exist in 2070s Shadowrun. Go to any retail store today and flip on you phone's wifi scanning, and you will see connection signals from damn near every type of product there.

There will always be individuals or groups that value discretion and the ability to go undetected, however. Those will always demand non-connected equipment, and there will be a segment of manufacturing that is interested in catering to those needs.



-k

Yup. Which is why it is so annoying that 5th ed doesn't provide examples of those pieces of gear. It's been said again and again but there is really no reason for stealth suits or sniper rifles to announce the users presence on the matrix. I hope Patrick and friends can look at this issue and provide some sort of sane resolution. I would ideally like to see the whole wifi always on thing turned into the intended always PAN connected rather than Matrix connected.
Jaid
fixing wireless bonuses is likely beyond the scope of what CGL would allow even if they do actually implement the freely provided errata this time.

so far as i can tell, CGL doesn't actually think it's stupid that the matrix makes your extendable baton extend faster or that you can't tell how much air you have left in your oxygen tanks without the matrix.
Iduno
Security for wireless tends to be bad, so it's a good thing then that they haven't included it on anything important.

Also, I've heard of office buildings that penetration testers were able to enter through the wireless thermostat, but I can't find an article, so take that as you will (or provide it if you know what I'm talking about).

The first story gives me an idea for an entertaining run. A white hat/whistleblower who was punished/sued/hospitalized for trying to report a problem doesn't want the public to get the short end of the stick this time. They also want revenge. The runners must get it, and use the vulnerability in a very public way. Mayhem and hooding (-ish) combine entertainingly.
Draco18s
I skipped most of this thread, but it reminded me of something:
My washing machine has its control board mounted on the bottom. Know what the washing machine had under it in case of failure? A catch basin and drain.

What so you imagine happens if the washer overflows?

That's right: it burns out is own control board because some ducktard thought electronics and water played nice. Well really, it's more that someone never put 2 and 2 together and thought about it.
Mantis
QUOTE (Draco18s @ Aug 13 2016, 05:20 AM) *
I skipped most of this thread, but it reminded me of something:
My washing machine has its control board mounted on the bottom. Know what the washing machine had under it in case of failure? A catch basin and drain.

What so you imagine happens if the washer overflows?

That's right: it burns out is own control board because some ducktard thought electronics and water played nice. Well really, it's more that someone never put 2 and 2 together and thought about it.

That's some solid engineering right there. Brilliant. Probably have something in warranty that says if you overflow the thing and the board burns out it is your fault.
Glyph
My problem with wireless in SR5 isn't that Joe Average uses it for everything, it is that shadowrunners are expected/encouraged to do so, and have their 'ware or gear gimped if they show a smidgen of common sense and refuse to do so. DNI, skinlinks, and PANs that are not connected to the Matrix should still be there. It really sucks a lot of fun from the game. Not just the crippled gear, but things that used to be fun (fiber-optic hair, nanotatts), only now you have to worry it will be hacked - or that the ignorant masses will think you are a CFD victim (another lameass metaplot - because apparently augmented characters weren't already stigmatized enough).
psychophipps
I have to agree as the hamfisted anti-wifi hacking stance (but having to be wide open to the wi-fi rape-stick to make your goodies really work) was a pretty big factor in not going to SR5.

I mean, really. If it's that bad then every 'runner would be running around with basic weapons and gear like what you see with the various tier 1 Spec Ops boys now instead of the new Gucci gee-whiz from Ares. Military/Security sales and the reputation built by those sales drives weaponry and combat cyberware sales almost exclusively. You get a rep for having hacking issues and your product will get dropped like a hot rock en masse. Look at what happened when EOTech dropped the ball on a bunch of sights with issues that only a very few civilian consumers will ever have to worry about. They had so many returns requests from their civilian sales that they had to farm it out to a secondary processing company which ended up making the situation worse.


binarywraith
QUOTE (Glyph @ Aug 14 2016, 03:07 PM) *
My problem with wireless in SR5 isn't that Joe Average uses it for everything, it is that shadowrunners are expected/encouraged to do so, and have their 'ware or gear gimped if they show a smidgen of common sense and refuse to do so. DNI, skinlinks, and PANs that are not connected to the Matrix should still be there. It really sucks a lot of fun from the game. Not just the crippled gear, but things that used to be fun (fiber-optic hair, nanotatts), only now you have to worry it will be hacked - or that the ignorant masses will think you are a CFD victim (another lameass metaplot - because apparently augmented characters weren't already stigmatized enough).



Of course they should still be there. The problems they were created to solve still exist, if not even more so than previously, so there should still be a demand for them. They didn't (until a worse, more expensive option was finally made available) not for any game-world reasons but because of the game designers' commitment to how they believe the players should be forced to interact with the game's technology.

It took what, two years before they finally said 'okay, I guess a PAN is fine' and published the internal router, while still making it cripplingly essence-expensive to keep up the ongoing Magicrun overtones?

Seriously. The internal router is .7 Essence and nuyen.gif 15k. A full Cyberskull is .75 and nuyen.gif 10k
Draco18s
QUOTE (Mantis @ Aug 13 2016, 11:26 AM) *
That's some solid engineering right there. Brilliant. Probably have something in warranty that says if you overflow the thing and the board burns out it is your fault.


I don't actually know. I don't think so, because it happened to us twice and it was more of an annoyance than anything (i.e. "couldn't wash clothes for a week" was a bigger problem than "cost of the repairs"). And that's with a catch basin that has a drain (not actually required). The catch basin is hilariously undersized too. It holds like a gallon of water, maybe two. A wash uses like five or ten. Despite the drain we've overflowed the catch basin, too.
Iduno
QUOTE (binarywraith @ Aug 14 2016, 07:24 PM) *
Seriously. The internal router is .7 Essence and nuyen.gif 15k. A full Cyberskull is .75 and nuyen.gif 10k


It's probably easiest to just go with using the PAN instead of the matrix. Or lower the internal router cost by about .7 essence and 15k nuyen.
ShadowDragon8685
QUOTE (Iduno @ Aug 15 2016, 11:53 AM) *
It's probably easiest to just go with using the PAN instead of the matrix. Or lower the internal router cost by about .7 essence and 15k nuyen.


That. After all, a great deal of the essence cost is the cost of wiring this shit up to your central nervous system. An internal PAN is one of those things that should just be assumed for any cybered character - their cyber is wired properly to themselves and to each other.
Jaid
honestly, a nuyen cost sounds perfectly reasonable (not necessarily 15 THOUSAND nuyen on top of the already high cost of many implants in the first place, but some cost at least). essence cost doesn't make much sense though. the devices can already connect to each other... you're just changing them to have a wire instead of using wifi. there's nothing about the router's functionality that justifies a huge essence hit (again, the router is pretty much already there... the main difference is that you need a port for the wire, which honestly is probably also already there since it's standard issue on every other damn thing in the world for no apparent reason, so at this point they're saying that having a cable run through the inside of your body is a massive essence cost for some reason).
binarywraith
The real pisser is that exactly the connection you're talking about has been industry standard for decades in-universe, but apparently became lost and terrible technology sometime between 2072 (20A) and 2075 (SR5).
Jaid
QUOTE (binarywraith @ Aug 16 2016, 01:34 AM) *
The real pisser is that exactly the connection you're talking about has been industry standard for decades in-universe, but apparently became lost and terrible technology sometime between 2072 (20A) and 2075 (SR5).


well yeah. you can't have a cable connecting stuff without scary, evil, dangerous nanobots that might erase your mind from existence and replace it with someone (or something) else's. that's just common knowledge. because that totally makes sense, and is definitely something new and refreshing and not completely overdone that fans felt was missing from the setting... not enough bodysnatchers, that was definitely a problem that needed solving. [/sarcasm]
Wounded Ronin
QUOTE (Jaid @ Aug 15 2016, 09:52 PM) *
honestly, a nuyen cost sounds perfectly reasonable (not necessarily 15 THOUSAND nuyen on top of the already high cost of many implants in the first place, but some cost at least). essence cost doesn't make much sense though. the devices can already connect to each other... you're just changing them to have a wire instead of using wifi. there's nothing about the router's functionality that justifies a huge essence hit (again, the router is pretty much already there... the main difference is that you need a port for the wire, which honestly is probably also already there since it's standard issue on every other damn thing in the world for no apparent reason, so at this point they're saying that having a cable run through the inside of your body is a massive essence cost for some reason).


Depending on what the system is use for, why would one even need a wire inside the body, where it would be a bit harder to service if need be? Why not just go with the wire running from, say, your temple and plugging directly into a carried or worn object? To avoid getting tangled up on things, you could even tape the wire to your skin so there would be no snags, and it could still be running down the outside of your body.
binarywraith
You mean like an oldschool smartgun plugged into a datajack?

Nah, it'd never work.
nezumi
The issue is you're looking at what can be done that you don't want. Most people look at what can be done that they do want. A smart thermostat would be brilliant. My electric company can remotely optimize so I get the same experience, but a lower bill. I can check on it while I'm on travel to make sure my cats are comfortable, but not spending too much. If I'm paying an extra $100 for automation, I'm probably saving $500 a year. Could someone hack it? Sure. In that case, I tear it out, throw it in the trash, and buy a new one for $150. It's not exactly a deal-breaker. Same with the fridge; worst case (assuming they don't leverage it to attack my home network) is I'm out the value of the contents inside the fridge--a value easily made up by the anticipated food savings, and covered by insurance.

It's easy to say you wouldn't do it for things your life depend on, like cars. But again, it all depends on the trade-off. Sure, someone MIGHT hack my car and make me crash. But the odds of that are about as high as someone pushing rocks off of overpasses. Meanwhile, an autonomous car means I absolutely CAN get out of driving my kids to school every day (saving me 90 minutes every day), that I can go to NYC to help my sister move without having to drive all the way back to get the car, that I never have to worry about finding parking, that I don't need to buy a second car for my wife, etc. The benefits are significant, measurable, and largely guaranteed. The risks (not counting cost) are serious, but the likelihood is tiny.

Shadowrunners are the exception. But most of us aren't shadowrunners (and neither are the corporations they target).
Iduno
QUOTE (nezumi @ Aug 18 2016, 08:09 AM) *
Could someone hack it? Sure. In that case, I tear it out, throw it in the trash, and buy a new one for $150. It's not exactly a deal-breaker. Same with the fridge; worst case (assuming they don't leverage it to attack my home network) is I'm out the value of the contents inside the fridge--a value easily made up by the anticipated food savings, and covered by insurance.


The problem with replacing it, is most of them would be made by one or two corporations, and would all have the same weakness. You'd spend another $150 and a few days to get a new one and replace it (then set it up with the utility again), and someone would spend 30 seconds re-applying the same hack to the new equipment.

And, as you pointed out, just messing with the temperature is unlikely to be the main goal. It's just a weak link to get to the rest of the network.
Jaid
again, one of my main problems is this silly idea that just because most people for most products will have reasons to want wifi (and i certainly can accept that; for most people, they're not likely to get hacked because nobody cares enough to hack you, just like for the most part nobody is going to smash in your windows and steal your furniture or anything like that), no products will have reasons to not want wifi.

stuff made for the general public? sure it should be wifi, provided there's a valid reason (and for almost anything, having an RFID makes finding lost stuff a lot easier, so if nothing else RFIDs being super common makes a lot of sense). but stuff where the *primary* customer is the sort of person that specifically wants no wifi is just silly. i mean, cybereyes having wifi: makes sense. they're relatively common amongst the general populace, wifi means you can use them to view the matrix and AR stuff and you can take pictures or video with them then upload that to something else, etc. wireless reflexes? the only people that should be using these are people that expect to need overwhelming force packed into small numbers of people, and there is a huge correlation with need for stealth there.
Wounded Ronin
QUOTE (nezumi @ Aug 18 2016, 09:09 AM) *
The issue is you're looking at what can be done that you don't want. Most people look at what can be done that they do want. A smart thermostat would be brilliant. My electric company can remotely optimize so I get the same experience, but a lower bill. I can check on it while I'm on travel to make sure my cats are comfortable, but not spending too much. If I'm paying an extra $100 for automation, I'm probably saving $500 a year. Could someone hack it? Sure. In that case, I tear it out, throw it in the trash, and buy a new one for $150. It's not exactly a deal-breaker. Same with the fridge; worst case (assuming they don't leverage it to attack my home network) is I'm out the value of the contents inside the fridge--a value easily made up by the anticipated food savings, and covered by insurance.

It's easy to say you wouldn't do it for things your life depend on, like cars. But again, it all depends on the trade-off. Sure, someone MIGHT hack my car and make me crash. But the odds of that are about as high as someone pushing rocks off of overpasses. Meanwhile, an autonomous car means I absolutely CAN get out of driving my kids to school every day (saving me 90 minutes every day), that I can go to NYC to help my sister move without having to drive all the way back to get the car, that I never have to worry about finding parking, that I don't need to buy a second car for my wife, etc. The benefits are significant, measurable, and largely guaranteed. The risks (not counting cost) are serious, but the likelihood is tiny.

Shadowrunners are the exception. But most of us aren't shadowrunners (and neither are the corporations they target).


That's an interesting point and has certainly given me something to think about this morning. I don't have pets and one of the reasons I don't want them is the feeling I would never be able to leave the house for days at a time, but you make the point that something like a smart thermostat, in conjunction with perhaps a few other remote technologies, would enable a pet owner to take long trips away.

In terms of the general public, though, it seems like people do get obsessed with catastrophic low probability events (i.e. fear of flying, fear of civilian-owned military pattern rifles, when cheeseburgers kill more than both), so I feel like all it would take would be one high profile vehicle hacking accident to sour people on, for example, driverless cars controlled wirelessly.

I've lived part of my life in extremely rural settings, so for me, one of my big concerns is always going to be an item's longevity. Can the item be serviced without needing highly specialized skills, tools, or parts? How long can the item go without being serviced? How does the item tolerate power outages and/or power surges? To what extent does the item use extremely common parts that can be found anywhere, as opposed to using specific parts that must be obtained from the original manufacturer? I feel like something that can be jerry rigged and kept going for years is inherently more desirable than something that implements features that were historically unnecessary, and that is a bit more fragile or hard to service as a result. I guess that I feel like a lot of market items today are frivolous traps designed to trap you in a parts and service relationship with the original manufacturer. That is to say, I don't need a smart fridge (as stated before, I could conceivably make due with an ice box, so long as ice is available in grocery stores), but the smart fridge exists and is marketed in such a way to entice me by frills that I don't need. If I give in to the temptation of the frills, I am snared by the manufacturer, upon whom I am now dependent for service and parts. Instead of my money going to support my journey of life and the things that upon consideration would be most important, a certain amount is now being siphoned off to this third party for non-essential services, as they had been planning all along.

Lots of people dream about owning a muscle car, or giant powerful truck. One dream I have is that someday I'll own an old, used, but reliable pickup from the 90s with manual transmission, with minimal electronic systems and use of computers that I can keep running forever relatively easily, which would be versatile enough to be of use in a wide variety of life situations.
binarywraith
QUOTE (Jaid @ Aug 18 2016, 10:26 AM) *
again, one of my main problems is this silly idea that just because most people for most products will have reasons to want wifi (and i certainly can accept that; for most people, they're not likely to get hacked because nobody cares enough to hack you, just like for the most part nobody is going to smash in your windows and steal your furniture or anything like that), no products will have reasons to not want wifi.

stuff made for the general public? sure it should be wifi, provided there's a valid reason (and for almost anything, having an RFID makes finding lost stuff a lot easier, so if nothing else RFIDs being super common makes a lot of sense). but stuff where the *primary* customer is the sort of person that specifically wants no wifi is just silly. i mean, cybereyes having wifi: makes sense. they're relatively common amongst the general populace, wifi means you can use them to view the matrix and AR stuff and you can take pictures or video with them then upload that to something else, etc. wireless reflexes? the only people that should be using these are people that expect to need overwhelming force packed into small numbers of people, and there is a huge correlation with need for stealth there.


Yeah, that's one of my main bones of contention here. 90% of the gear in the books is guns, armor, and cyberware whose legitimate users are heavy security forces and military. Neither of which should want anything to do with their gear talking to the wider Matrix, because it is a huge operational security hole in a setting where some Barrens kid with a knock-off deck can start turning off their guns.
ApesAmongUs
Then, the problem is less with the existence of the wifi than with the game giving substantial mechanical benefits to the use of the wifi. The idea that budget rent-a-cop firm A might have some stupid wifi on a gun thanks to a dumb lawsuit a decade in the past is reasonable. The idea that a group that seriously uses guns for important things might be tempted to use it because it makes them that much better is more of a stretch.

In-game having idiots vulnerable and others no is no more bothersome than the general idea of cyber/magic/whatever dominating mundanes. In SR there are mooks. It's just that the designers used that idea to shoehorn in the idea of hackers as mages. And with that idea in place, it becomes more of a problem when the usefulness of one character can change so dramatically depending on opposition - and not just type of opposition, but competence of opposition. So, you can be completely invaluable vs a group of mall security guards, and then absolutely worthless against corp guards - any and all corp guards.
nezumi
QUOTE (Jaid @ Aug 18 2016, 12:26 PM) *
but stuff where the *primary* customer is the sort of person that specifically wants no wifi is just silly. i mean, cybereyes having wifi: makes sense.


Silly, but also reasonable. RFID prices are hitting rock-bottom. If I'm choosing between a book for $1 and an RFID-enabled book that also tells the time for $1, why not? Next thing you know, everyone is putting RFID (or wi-fi) on, even if they haven't found a use for it yet. Next thing you know, you're doing extra work to get stuff that ISN'T enabled, and at some point, as the user, I don't care enough to avoid it.

(This doesn't address equipment with non-wireless markets, like guns to military.)


QUOTE (Wounded Ronin @ Aug 18 2016, 01:39 PM) *
I've lived part of my life in extremely rural settings, so for me, one of my big concerns is always going to be an item's longevity.


As someone who has kept his washing machine alive for fifteen years, I totally understand that. But that's planned obsolescence for you. The poor don't have the money to buy out of it, and the rich like their regular upgrades anyway. In the U.S., what you describe is basically a hobby like camping or survival prepping.
Wounded Ronin
QUOTE (nezumi @ Aug 19 2016, 01:05 PM) *
As someone who has kept his washing machine alive for fifteen years, I totally understand that. But that's planned obsolescence for you. The poor don't have the money to buy out of it, and the rich like their regular upgrades anyway. In the U.S., what you describe is basically a hobby like camping or survival prepping.


Interesting point. I wonder if there'd be room in the world for some kind of nonprofit or experimental project that would manufacture pre-computer age appliances which would be easy to keep running and sell them at low cost to poor people.
ShadowDragon8685
QUOTE (Wounded Ronin @ Aug 19 2016, 08:51 PM) *
Interesting point. I wonder if there'd be room in the world for some kind of nonprofit or experimental project that would manufacture pre-computer age appliances which would be easy to keep running and sell them at low cost to poor people.


They'd be wiped out in an instant by corporate interests. nyahnyah.gif
Draco18s
Almost certainly. But I wish someone would do it; I'd buy (I'm not poor either, I just like to have stuff that lasts longer than nine months).
binarywraith
A lot of the older stuff is still manufactured, and thanks to the Internet you can actually find the companies.

For washers and dryers specifically, Speed Queen still makes their absurdly heavy-duty and durable machines with full analog controls, and they're competitively priced as well!
Sengir
QUOTE (Wounded Ronin @ Aug 18 2016, 07:39 PM) *
I've lived part of my life in extremely rural settings, so for me, one of my big concerns is always going to be an item's longevity. Can the item be serviced without needing highly specialized skills, tools, or parts? How long can the item go without being serviced? How does the item tolerate power outages and/or power surges? To what extent does the item use extremely common parts that can be found anywhere, as opposed to using specific parts that must be obtained from the original manufacturer? I feel like something that can be jerry rigged and kept going for years is inherently more desirable than something that implements features that were historically unnecessary, and that is a bit more fragile or hard to service as a result.

A smart thermostat is nothing but an IC, an actuator, and a power supply for both. Maybe an LCD display on top of it. All of which are certainly easier to acquire than a matching reverse gear for a specific gearbox which hasn't been produced for two decades wink.gif
Sendaz
http://www.bbc.co.uk/news/technology-35311447
Blade
QUOTE (Wounded Ronin @ Aug 20 2016, 02:51 AM) *
Interesting point. I wonder if there'd be room in the world for some kind of nonprofit or experimental project that would manufacture pre-computer age appliances which would be easy to keep running and sell them at low cost to poor people.

Someone in France is working on a washing machine that's meant to last for 50 years. He's currently working on the prototype and expects to have a kickstarter next year.
Sendaz
Are you finding that those Earth Elemental dirt stains seem harder to get out than the usual grime?

Is house breaking the Hellhound leaving a permanent brimstone & ammonia smell to your home?

Does the splatter from that Blood Spirit you smoked atop the Azzie pyramid last month look just as fresh on your best armor jacket as the day you got hit by it?

What you are experiencing are elements that are ITRW or Immune To Regular Washing.

OxiClean3000® was developed using cutting edge talismongery to produce our newly patented line of mana-reactive Detereagents™ to help cut through the toughest awakened/extraplanar mess.

Available at Kong-Mart and other fine retailers.
Sengir
QUOTE (Blade @ Aug 22 2016, 11:41 AM) *
Someone in France is working on a washing machine that's meant to last for 50 years. He's currently working on the prototype and expects to have a kickstarter next year.

Well, you can get a 50 years old washing machine right now and connect it to an electricity meter to test how much of a good idea that is. wink.gif
Tymeaus Jalynsfein
QUOTE (Sengir @ Aug 22 2016, 10:15 AM) *
Well, you can get a 50 years old washing machine right now and connect it to an electricity meter to test how much of a good idea that is. wink.gif


My last washer/dryer (which I just replaced last year) lasted just over 20 years.
Wish all my appliances were that robust.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Dumpshock Forums © 2001-2012