When hardware goes end-of-life, companies need to open-source the software (marcia.no)

Article summary

The article argues that when hardware products reach end-of-life, companies should be forced to open-source the software to prevent electronic waste and allow users to continue using the devices. The author suggests that companies should publish a basic GitHub repo with hardware specs and connection protocols, allowing the community to build their own apps. This approach would enable users to breathe new life into abandoned devices, reducing waste and promoting sustainability. The author cites the example of a smart weight scale that became useless after the company stopped supporting it.

Main themes

• End-of-life hardware
• Open-source software
• Electronic waste
• Sustainability
• Right to repair
• Secure boot and firmware

What commenters say

• Forcing companies to release signing keys or open-source software could be a security disaster, potentially allowing malicious actors to exploit devices.
• Some argue that locked bootloaders are necessary for security, while others believe they should be completely forbidden to allow users to make changes to their devices.
• The current state of embedded device security is already an unmitigated disaster, and releasing signing keys or open-sourcing software might not make a significant difference.
• Allowing users to unlock and relock their bootloaders could be a viable solution, providing a balance between security and user freedom.
• The security model of mobile operating systems is flawed, and secure boot may not provide significant benefits to users due to the presence of untrusted manufacturer apps and drivers.
• Releasing device trees and allowing users to update their devices could provide some value to phone owners, but this is not a common practice among manufacturers.
• Some argue that the benefits of secure boot are outweighed by the limitations it imposes on users, and that alternative security measures could be more effective.
• The idea of open-sourcing software for end-of-life hardware could be beneficial, but it requires careful consideration of the potential security implications and the need for a balanced approach.