• 0 Posts
  • 30 Comments
Joined 1 year ago
cake
Cake day: June 20th, 2023

help-circle
  • We’re talking about fingerprinting stuff coming in via HDMI, not stuff being played by the “smart” part of the TV itself from some source.

    You would probably not need to actually sample images if it’s the TV’s processor that’s playing something from a source, because there are probably smarter approaches for most sources (for example, for a TV channel you probably just need to know the setting of the tuner, location and the local time and then get the data from available Program Guide info (called EPG, if I remember it correctly).

    The problem is that anything might be coming over HDMI and it’s not compressed, so if they want to figure out what that is, it’s a much bigger problem.

    Your approach does sound like it would work if the Smart TV was playing some compressed video file, though.

    Mind you, I too am just “thinking out loud” rather that actually knowing what they do (or what I’m talking about ;))


  • Well that makes sense but might even be more processor intensive unless they’re using an SOC that includes an NFU or similar.

    I doubt it’s a straight forward hash because a hash database for video which includes all manner of small clips and has to somehow be able to match something missing over 90% of frames (if indeed the thing is sampling it at 2 fps, then it only sees 2 frames out of every 25) would be huge.

    A rough calculation for a system of hashes for groups of 13 frames in a row (so that at least one would be hit if sampling at 2 fps on a 25 fps system) storing just one block of 13 frame hashes per minute in a 5 byte value (so large enough to have 5 trillion distinctive values) would in 1GB store enough hashes for 136k 2h movies in hashes alone so it would be maybe feasible if the system had 2GB+ of main memory, though even then I’m not so sure the CPU speed would be enough to search it every 500ms (though if the hashes are ordered by value in a long array and there’s a matching array of clip IDs, it might be doable since there are some pretty good algorithms for that).



  • I was curious enough to check and with 2KB SRAM that thing doesn’t have anywhere enough memory to process a 320x200 RGB image much less 1080p or 4K.

    Further you definitelly don’t want to send 2 images per-second down to a server in uncompressed format (even 1080p RGB with an encoding that loses a bit of color fidelity to just use two bytes per pixel, adds up to 4MB uncompressed per image), so its either using something with hardware compression or its using processing cycles for that.

    My expectation is that it’s not the snapshoting itself that would eat CPU cycles, it’s the compression.

    That said, I think you make a good point, just with the wrong example - I would’ve gone with: a thing capable of handling video decoding at 50 fps - i.e. one frame per 20ms - (even if it’s actually using hardware video decoding) can probably handle compressing and sending over the network two frames per second, though performance might suffer if they’re using a chip without hardware compression support and are using complex compression methods like JPEG instead of something simpler like LZW or similar.


  • Server-side checks cost processing power and memory hence they need to spend more on servers.

    Client side kernel-level anti-cheat only ever consumes resources and cause problems to the actual gamers, not directly to Rockstart’s bottom line (and if it makes the game comms slightly slower on the client side it might even reduce server resource consumption).

    If Rockstar’s management theory is that gamers will endure just about any level of shit and keep on giving them money (a posture which, so far, has proven correct for just about every large game maker doing that kind of shit) then they will logically conclude that their bottom line won’t even suffer indirectly from making life harder for their existing clients whilst it will most definitelly suffer if they have more server costs due to implementing server side checks for cheating.


  • I played WoW right when it came out, on a PvP server.

    There was already a subset of the crowd just like there back then - some people rushed game progression to have higher levels as soon as possible only to then hang out in beginner areas and “pwn” significantly lower level players.

    That’s around the time when the term “griefer” was coined.

    In these things the real difference is how the servers are structured rather than the human beings: if the architecture is designed so that there is some way to filter players (smaller servers with moderation or some kind of kick voting system that bans repeat offenders), griefers end up in their own griefer instances griefing each other and the rest can actually play the game, otherwise you get a deeply beginner (or people with less time, such as working adults) unfriendly environment.

    As somebody else pointed out environments were people run their own servers tend create those conditions at least for some cases (basically if there’s some kind of moderation) whilst massive world centralized server environments tend to give free right to people whose pleasure in a multiplayer games derives mostly from making it unpleasent for others (in game-making, griefing is actually recognized as one of the 4 core types of enjoyment - along with achiving, exploring and socializing - people can derived from multiplayer games)


  • In my experience working with Designers for web and app design, they always had trouble with dynamic stuff at all levels, from program flow and elements which dynamically collapsed or expanded to using animation to illustrate things or call attention to something.

    Don’t get me wrong, as a programmer I was like a toddler next to them when it came to even just awareness of the concerns related to merelly visual organisation, not counting all sorts of other concerns in a visual design some of which I’m sure I’m even not aware exist. It’s just that when it came to dynamic elements their expertise was comparativelly non-existent and they have little or no tendency to use such capabilities, even in things such as apps where they’re reasonably easy to do.


  • This made me think that the whole unofficial production of everyday devices with explosives in Hungary was a great opportunity for well connected Hungarian criminals wanting to get their hands on what are probably military explosives which is typically highly controlled stuff hence valuable.

    I’m wondering if some of the stuff which was suppsed to have been used for this won’t pop-up elsewhere in the EU in the hands of some criminal group, possibly even used for a terror attack.

    The possible implications of this shit just keep in getting better and better.


  • The point being that sometimes things that look “clever” if you only look at the obvious primary effects are not at all clever when you also consider secondary effects.

    If only when it comes to “ease of eavesdropping” it might very well be in the best long term interest of the Israeli Security Services that the rest of the World keeps on acquiring Made In Europe and Made In US devices which this action will likely impact (one thing are accusations of “backdoors” in certain devices a whole different thing is seeing on TV a mass attack were a batch of devices all made in a nation allied with Israel contained explosives and that were detonated in all manner of arbitrary places hitting thousands of arbitrary people).

    Then there’s the possible impact on Israeli Allies’ exports of electronics given these pagers were specifically manufactured in Hungary (a very strong ally of Israel) by a company licensing the brand name - is it really a good idea for anybody in a political, state or security position in any nation not allied with Israel to buy any device with remote access capabilities from made in any nation allied with Israel or with a significant part of the supply chain passing thorugh one of those nations. If they’re willing to have explosives put in them and detonated in the middle of crowds of civilians, what else are they willing to do - it’s the same reason why buying Security Software from an Israeli company is extremelly stupid for any company (even in allied nations) only now Electronics is also included, there’s very obvious proof that they will do just about anything (rather than merelly an unproven risk of industrial espionage) and the risk also includes things sourced from nations allied with Israel.

    Time will tell just how big those two classes of secondary and tertiary effects really are.

    Mind you, as I see it anybody who gets in bed with ethno-Fascists like the Zionists deserves all the damage that comes from them having no limits whatsoever to what they’ll do.





  • There are several reports that the devices were made with the explosives built-in.

    According to the spokesperson of the Taiwanese brand in a press conference, those were all devices produced by a Hungarian licensee of the brand.

    Hungary, you know, been voting with Israel in the UN and also has a Fascist government which is massivelly racist against Arabs.

    Kind makes sense that those things were manufactured in a country very friendly of Israel and with their authorization, already with the explosis built-in.

    The interesting second and third level effects to consider of this are around the impact on things like Globalization (if having to start paying attention to the alliances of the countries the stuff you buy comes from the places which are part of a supply chain stop being irrelevant) and even brand licensing (that Taiwanese company will have their name pop-up associated with this in every single internet search from now on)

    Also curious about what will this to to “Made in EU” - Hungary might just have screwed the rest of us much more than ever before.



  • Thanks for that very complete view of things.

    Things are quite different since I last was doing hiring, which was pre-COVID.

    Yeah, my experience leading a remoted team in India also showed the importance of cultural awareness and good requirements: I ultimately got into the habit of, after the big meeting with the boss were all the work was given to the various teams, get my guys individually on the phone (so that they feared not “losing face”) and carefully coach out of them any questions or doubts since otherwise they wouldn’t voice them and just end up implementing something they misunderstood or which wasn’t explained correctly and indeed they also needed very detailed requirements which was a problem because the senior guys on the other side who ended up having to write said requirements could pretty much have done the job themselves in that time.

    This was a big Investment Bank and some top level manager in NY decided to create a division in India to outsource work to, but it definitely didn’t get the cream of the crop over there and the career structuring there was so shit that the few good techies we got would quickly end up as (bad) managers - their pay scales followed the stupid idea that “nobody can be paid more than management” so good mid level techies had to become junior managers to earn more, and they invariably were crap as managers.




  • I see. That does change the idea I had about things a bit.

    It’s been a while since I was last hiring.

    I wasn’t aware that the problem nowadays in the West (or at least the US) was an excess of people who don’t really have a natural skill for it choosing software development as a career.

    That kind of thing was one of the main problems with outsourcing to India maybe a decade ago: the profession was comparatively very well paid for the country so it attracted far too many people without the right skills resulting in a really low average quality of the programmers there - India had really good programmers just like everywhere else but then had a ton of people also working as programmers who should never had gone into it, so the experience of those having to deal with outsourced programming in India usually was pretty bad (I remotelly was a technical lead for a small outsourced team in India from London, and they were really bad whilst, curiously, the good programmers from the Indian Subcontinent I worked with had emigrated from there and were working in London and New York).


  • I think it’s even worse than just the bar for competency going up: even for a coding wizard going into the career, it’s a lot harder to squeeze through the bottleneck which is getting an entry level position nowadays unless they have some public proof out on the Net of how good they’re at coding (say, commits in open source projects, your own public projects, or even Youtube videos about it).

    This is something that will negativelly impact perfectly capable young developers who have an introvert personality type (which are most of them in my experience, even in domains such as Hacking) since some of the upsides of Introversion are a greater capacity for really focusing on on things and for detailed analysis - both things that make for the best programmers - and self publicising isn’t a part of the required skillset for good developers (though sooner or later the best ones will have to learn some “image management” if they end up in the Corporate world)

    I’m a bit torn on this since on one side salesmanship being more of a criteria determining one’s chances of getting a break at the start of one’s career as a developer is bad news (good coding and good salesmanship tend to be inverselly correlated) but on the other side a junior developer with some experience actually working with other people on real projects with real users (because they contributed to existing open source projects) has already started learning what we have to teach fresh-out-of-Uni developers to make them professionals.