Loading comment...
Readit NewsLoading parent story...
mrlambchop commented on Shipping 100 hardware units in under eight weeks farhanhossain.substack.co... · Posted by u/M_farhan_h
You mention that this is a USB HID device a few times but how are you capturing the display? Does ReplayKit broadcasting give you access? Or is the hardware also acting as an HDMI capture card or something?
Poking around at this product, it looks from the rendering like (a) USB-C based power pass through (unclear if its 2.0 BC etc... or true PD with CC pins - doesn't matter that much however if the phone range is small enough) (b) USB 2.0 device IC (STM32 or similar?) that connects to the phone over D+/D- pins. (c) power is being taken from the USB internal or external depending on what is plugged in.
I was confused by how CarPlay was working, as this requires the vehicle to be a host and the phone a device, but I'll assume it means wireless CarPlay (vs USB 2.0 CarPlay).
For the display, I wonder if the device is mimicking the assistive touch inputs via external USB PID (per the note) and using a mouse/trackpad HID can take a screenshot via assistive framework - I guess the app could see this arriving, process it and then delete? Also figure out what is being shown? would explain why the video is sped up a little, but YIKES. Also good luck stopping the app being killed in the background.
All direct USB streams require MFI auth, which might work for exactly 100 devices and could be an alternative, but requires Apple cert for bulk quantities.
I think ReplayKit can only work within an app and can't see the general output stream.
Cool use of tech and curious to see how it actually works :)
I don't know about anyone else, but when transitioning back to a shell, I HAVE to hit a bunch of enters on any prompt to clear the last output away a few lines before I can summon up the powers to enter a new command - blow away the cobwebs and all that. I love the empty enter command line :)
mrlambchop commented on Hacking a Smart Home Device (2024) jmswrnr.com/blog/hacking-... · Posted by u/walterbell
Great article - enjoyed it a lot!
re: the notes on the use of the device keys (stored in the K/V store), assuming that they are per device would seem the most obvious vs that they are global. Global keys would be written in the main app body in my experience, not the KV store (but that doesn't mean people have not done unusual things here of course!).
I also want to share some feedback on the complexity of managing per device keys these days and the risks - there are lots of easy to use tools that per device keys like this much simpler to do in 2025 than 2015 and cloud platforms that take in CSV files and return very similar messages... Typically a security model for a device such as an air purifier can be easily defined as not having device encryption enabled if it has per-device keys on as the impact of breaching a single device remains compartmentalized to a single edge component and in this case, just a purifier (vs a car or something that explodes!). Not that I agree with this, but corporate security can! Device encryption causes lots of problems in factories that are often best 'ignored' if the product can afford it.
Per another comment, god bless ESP32 developers once the EU rule kicks in in August... !
Loading parent story...
Loading comment...
Loading parent story...
Loading comment...
Loading parent story...
Loading comment...
Deleted Comment
mrlambchop commented on San Francisco homelessness: Park ranger helps one person at a time sfstandard.com/2025/02/08... · Posted by u/NaOH
I was really swept up in this article and the portrait of Amanda Barrows - what a unique and strong person and this city is incredibly lucky to have her.
Unlike some here, I came away with a deep sense of empathy, and today’s HN snark and frustration bounced off me pretty hard. The public order issues - homelessness in parks, the challenges of shared spaces—have certainly impacted me. But more than that, I struggle with how to translate the state of the world to my boys. I always remind them: every unhoused person was once a little boy or girl. We might be older now, but we’re still kids inside, and nobody dreams of growing up in these circumstances.
What struck me most was the balance of compassion and pragmatism that Amanda brings to her work. It’s easy to be frustrated with the policies and bureaucratic inefficiencies that slow down real solutions - but they are, in some ways, understandable.
The biggest frustration for me is the gap between the mental state of many unhoused individuals and the requirements needed to secure housing. The city surely understands the long-term costs of its policies, and it’s run by highly pragmatic people with limited budgets. But rules are rules, and at some point, top-down accommodations (including medical interventions...) are necessary to bridge this gap.
> 1.1 The Site is part of the platform developed and managed by Arduino, which allows users to take part in the discussions on the Arduino forum, the Arduino blog, the Arduino User Group, the Arduino Discord channel, and the Arduino Project Hub, and to access the Arduino main website, subsites, Arduino Cloud, Arduino Courses, Arduino Certifications, Arduino Docs, the Arduino EDU kit sites to release works within the Contributor License Agreement program, and to further develop the Arduino open source ecosystem (collectively, the “Platform”). The use of the Site, the Platform, and the Services is governed by these Terms including the other documents and policies made available on the Platform by Arduino.Certifications, Arduino Docs, the Arduino EDU kit sites to release works within the Contributor License Agreement program, and to further develop the Arduino open source ecosystem (collectively, the “Platform”). The use of the Site, the Platform, and the Services is governed by these Terms including the other documents and policies made available on the Platform by Arduino.
That list in 1.1 isn’t an exhaustive definition which is IMO, one of the causes of the fire. Again, "IMO", the list is an illustrative set of examples as there is no limiting language like "solely" or "only" and the clause even mixes services and purposes, which again signals it’s descriptive rather than definitive.
Saying that, whilst the list inside the definition of "the Platform" is illustrative, the category it defines seems scoped to Arduino-hosted online properties which could be argued is the intent. But its an argument alas...
Either way, ambiguous policy is being communicated by these T+C updates and that is a real problem.