Comment by neonihil
4 years ago
I believe we need new laws declaring that consumers can run whatever versions of software they want on devices they OWN.
This applies to iPhones, Gaming consoles, and Teslas too.
Companies must allow downgrades, and consumers must be able to permanently disable update prompts.
I agree with the idea of full ownership, but I also know it wasn't all that long ago that the user stuck on an old version of IE was the bane of most developers, and that many security vulnerabilities come from software that was patched years ago.
Users weren't running IE6 for years and years because they upgraded to something newer, and decided to go back. The solution to this problem didn't come from making upgrades a purely one-way process.
Device makers have become quite opinionated about how their things are used, and they are in a position to enforce their opinions. I don't know what exactly the right balance is, because there are genuine interests to be balanced... but when a piece of hardware is designed explicitly to allow the manufacturer to remove the device's ability to run the exact same software that it used to, we should meet any claim that this is primarily for the user's advantage with great skepticism. We should also take seriously the possibility that tilting the balance of power in this way creates issues at least as bad as the ones we are hoping to resolve.
It's like a city so fearful of petty criminals, it allows the police the ability to do as they please. And the police are directly hired by the rich people in town.
> Device makers have become quite opinionated about how their things are used
I think it’s more that they realized it makes them more money, and nobody is there to stop them.
OK then ban them from connecting to your active web services. But don't prevent their PC from booting.
That's funny. At this very moment I have a Windows VM open just so I can use Internet Explorer + Java8u65 to access the ILO on an HP server.
I'll see your HP ILO and raise you an AMI MegaRAK.
(ie6, activex)
Not too long ago I was still supporting old versions of IE because employees for large chain we built software for would not allow them to upgrade their computers
Probably because they had some other expensive software that only worked with old IE versions. The cost of fixing the other software was probably more than what it cost to pay you to support yours.
1 reply →
sounds like the government.
Why? Like I get why as a purchaser of things I would want to be able to downgrade, but under what premise is it desirable that the government should mandate how companies design and sell products?
This makes far more sense to me if the pitch is that companies must include clear terms for consumers about how they’ll handle software / what the hardware will allow the user to do in terms of software downgrades. That has precedent as an extension of truthful advertising / consumer protection.
But if a company says “we’re selling the Widget 9000, it updates it’s firmware automatically and irreversibly”, I don’t see a coherent reason for the government to say “no, you can’t sell that”. If people don’t want to pay for gear that behaves in that way, they’re free to not buy it.
> but under what premise is it desirable that the government should mandate how companies design and sell products?
The Government already does this and with great success, the ban on lead additives in paint would be one example. By that point, it's harmful effects were already known as early as 1786 (efforts to ban lead paint began around 1921) before it's ban in 1976 (US).
Perhaps the free market just needed more time?
Without government intervention, somehow I suspect we would still see lead paint continue to be bought and sold. I cannot imagine the unthinkable number of individuals that were fucked over through no fault of their own (learning disabilities, poor health, shortened lifespan) because we chose to continue to allow lead paint to be sold on the market.
> I don’t see a coherent reason for the government to say “no, you can’t sell that”.
What about the environment? By artificially reducing the lifespan of these devices, you're sending them to an early grave only to be unnecessarily replaced by a new device because the corporate overlords demand it.
It's unnecessary churn and I'm not sure that we should demand that future generations carry the burden of our poor choices simply because we would prefer to wait until the free market fixes this mess (which may never happen). How long will that take? 10 years? More?
OS updates extend the lifetime of a device, not reduce it.
Another great example is fuel economy standards - the government says "no you cannot sell a car that has fewer than X mpg after the year Y" and it has done wonders for our energy policy despite the government doing what they can to keep gas prices down.
1 reply →
How is provividing updates reducing the lifespan ofa device? Usually not having long term support of a device including security patches is seen as reducing the lifespan.
4 replies →
Lead paint has externalities that affect people other than the purchaser. What externalities does a Nintendo Switch not allowing firmware downgrades have?
> under what premise is it desirable that the government should mandate how companies design and sell products?
The premise that benefits individuals and society.
The government already mandates how companies design and sell products. This isn't a radical concept. The reason cars get safer and cleaner every year is due to government regulation. The reason that instant coffee cannot be more than 50% bugs and twigs is government regulation.
> If people don’t want to pay for gear that behaves in that way, they’re free to not buy it.
Or we could just regulate it and then this consumer-hostile issue wouldn't exist.
> Or we could just regulate it and then this consumer-hostile issue wouldn't exist.
But I specifically want a device that only runs code from another company. Why should the government say “only enterprises can establish this absolute security trust relationship with their hardware vendor”?
2 replies →
Cars and coffee are regulated in ways that improve health and safety. What is the health and safety impact of not being able to run homebrew on my Nintendo Wii?
2 replies →
> I get why as a purchaser of things I would want to <...>
That's actually all you need to say. Anything else is pro-corporate bullshit that you've been spoonfed until you regurgitate it.
The rebuttal to the rest of your comment is "just try and buy a TV that isn't actively hostile to the user". But that's a side conversation, the fundamental reality is that companies are legal fiction that don't have rights. They are allowed certain privileges we grant them, and we should not grant them the ability to screw over people that don't understand what the term firmware means.
I’d appreciate it if you’d not speculate as to my state of mind.
I as a purchaser want all kinds of things; this doesn’t mean that I want the government to mandate that companies give them to me. In part that’s because the people who run and work at businesses also have free agency, and in part it’s because I don’t believe that government interference in commerce is a viable approach to getting what I want in the long term.
People who don't know what firmware is don't care about this. Even people who do don't care. I showed this to my brother who is both a switch owner and works in tech. He didn't care. If the device works and lets them play pokemon they're content. Depressing but it's the truth.
I don't see what corporate personhood has to do with that the parent comment. They are asking if government restrictions on how Nintendo makes their product 'tamperproof' are desirable. We would have to answer the same question even if we removed 'the legal fiction of corporation' and only allowed partnerships and sole traders.
1 reply →
You can, they are just a lot more expensive. The hostile features are a revenue stream and subsidize the cost of the product. Apparently a lot of users are okay with that.
2 replies →
You are oversimplifying things. It sort of overlaps some of the vaccine requirement arguments or perhaps laws that require you lock up your guns. Not updating devices that are connected to the net can and does lead to vulnerabilities that allow huge botnets to be created and deployed against anyone else on the network.
I say do what you want with your equipment if it isn't connected to the web. But if it is, you need to have some responsibility for it being used to harm others.
> companies are legal fiction that don't have rights.
Companies are quite literally legal persons and have the same rights as any natural-born citizen. It’d be a violation of a natural person’s rights if you forbade them from exercising those rights with others, companies only simplify the legal side of asset ownership and taxes.
Virtually everything you own that was sold in the US had a wide variety of terms set by the US government on your behalf on how it was constructed, advertised, and sold. The question was never if the government should set terms it is what terms.
You are also somehow envisioning the government as a separate entity having no relationship to the people as a whole that instead of literally already setting the entire ground rules in which our society exists somehow needs a very high bar to justify any interference whatsoever.
The government is all of us and the only justification it requires is the people's interests. 99.999% of people aren't chicken farmers so if they demand cleaner chicken farms so the chicken they eat are less likely to give them the shits then cleaner farms it is and those who who don't like it can situate their farms somewhere else.
99.999% of people aren't Nintendo executives so if the people are smart enough to demand hardware they actually own then Nintendo is free to exit the entire US market.
Pray we don't alter the deal further.
I can’t speak for other governments, but the US governments (both federal and state) derive their authority and their limitations from their contract with the people. You’d be hard pressed to find a constitutional scholar who believes the US Constitution stretches to grant the US government any power that it determines is in the people’s interests.
Notably, one of the most fundamental principles of US government is specifically the notion that the majority, even a supermajority, can’t infringe on the rights of a minority. We’ve screwed this up in plenty of cases, but that doesn’t suggest that the underlying goal is invalid and we should steer into the skid.
5 replies →
The problem is when an upgrade limits or removes features from the time of first purchase - it's akin to changing the terms of an agreement after signing it.
For what it's worth, Sony were successfully sued when they tried this with OtherOS.
I don't know of any company that's been seriously challenged for disabling hacks, though.
1 reply →
> under what premise is it desirable that the government should mandate how companies design and sell products
Under all circumstances in which the profit motive does not align with societies desires. Safety, health, discrimination, consumer rights, etc.
It seems like they're being allowed a software monopoly that reduces consumer choice and increasing consumer costs.
Who is being given a software monopoly? Nintendo controlling the software that runs on their hardware is not a monopoly.
3 replies →
Steam Deck has a very similar form factor and is way more open to hacking. It seems like the free market is working. Why should the people who develop products at Nintendo have to design around some politician’s law?
I'm waiting for my Steam Deck. That said, the Deck is a drop in the ocean.
> Why should the people who develop products at Nintendo have to design around some politician’s law?
Sorry, but it must be we live in different planets. Japan has laws tailor made for the commercial interests of their gaming and media industry. Are IP protection and copyright also politician's law?
I'm all against absurd legislation and bureaucracy and I'm glad creators get paid but analyse your sentence:
"Why should the people who develop products at Nintendo have to design around some politician’s law?"
Do you notice that you are equating People=Private Company and Consumer Protection=Politician? I could understand if you are the owner of a company trying to work around some legislative moat, otherwise, it's pure brainwashing.
Perhaps a good middle ground could be that the regulation takes effect no later than when the manufacturer stops providing automated security updates.
Anything that allows a manufacturer to deliberately render a device that you paid for inoperable is not a compromise at all.
The alternative is “you can’t provide security updates because those updates might render the device useless”, which would put us back in the 90’s and would render every iPhone not made within the last 2 years a constant exercise in navigating a minefield of spyware sites looking to exploit some WebKit vulnerability.
1 reply →
I will partially disagree with this. Irreparable hardware/software changes like this should absolutely be banned, however, I disagree that we should dictate speech, with speech in this case being how the software was written. An analogy would be telling people they can't protest vs. shooting them when they try to.
But the core issue here is the company restricting users from running their own software so the analogy would be more that a company would not be allowed to tell their hitment to shoot protesters even though that is technically speech.
reading through the replies to this, perhaps it should instead be that if you create a method to prevent downgrades you must also provide documentation on how that prevention method works in great enough detail that it can be circumvented.
Were they to document a way for you to disable the fuse check, then the user could disable the fuse check and do their own downgrades, or if writing this kind of technical documentation is too laborious then they can just provide themselves a downgrade service and just point to that in the documentation.
what if the method involves paying the original company a fee to use the old version? Would that be considered acceptable?
Even if such a law was enforced, there is a workaround: rent the consoles instead of selling them. That way, you don't legally own the console/phone/car you're playing with and they still can do whatever they want. Leasing is common for expensive items, down to cars, sometimes phones, it can be used for consoles, too. https://en.wikipedia.org/wiki/Lease
Such a workaround only works with weak enough consumer protections. If it quaks like a duck the law can choose to treat it like a duck even if you insist that its actually a goose.
I think companies can get over it with licensing. They can use subscription model to force you to upgrade.
How about on the Engine Control Modules on cars other than Teslas?
I have a Tesla, and I was stupid enough to upgrade to v11 without reading up first. The UI is so broken that I now literally have hate attacks while driving the car. Oh, and the update somehow broke a window controller unit, which had to be physically replaced.
So: yes. I’d gladly go back to v10 if I could. I actually offered money to do so, but - unsurprisingly - I got refused.
Which jurisdiction are these laws?
I meant we need these new laws. (Fixed in original comment)
Yes. By the way, the parent comment highlights an important point of having lots of countries and jurisdictions which has very different view on this. My prediction is that it will be fragmented.
3 replies →
Required supporting of old versions of a OS for a gaming console seems to provide no sensible benefit.
You can allow a downgrade without actively supporting old OS versions.
And especially without deliberately sabotaging the user's device. Nintendo should be forced to fully refund every affected user in this scenario.
The reason it’s not that easy is that platform holders have contractual obligations with content providers about their content being secure. These obligations are an incentive to content production.
Actually its exactly that easy. The platform holders cannot offer something to content providers that is outside the boundaries of the law nor use a court to compel them to break the law.
Making it the law is about the only thing that would work because incentives are otherwise inherently misaligned.
And what are the boundaries of the law?
1 reply →