|
|
 Rank: Amateur level 2 Groups: Registered
Joined: 13/01/2017 Posts: 49 Points: 156 Location: Tewkesbury
|
Hi.
Question about R2’s operational software/firmware. Noticed the Domes head operation board is similar to that of a Pi microcomputer.
1. Will R2’s operational software/firmware be updated if Official fixes need to be applied?
2. Will there be any sort of open source programming available (if the above is updatable)?
I’m sure any bugs/operational issues will be sorted by the time R2 is completed but thought to ask the question
Thanks
|
|
|
|
|
The answer to your questions are below- 1/No program updates needed. 2/No open programming available. Current builds:-C57,Zero, Lamborghini Countach, Caldercraft HMS Agamemnon,Robi,R2-D2, MFH Cobra .
|
|
|
Rank: Amateur level 2 Groups: Registered
Joined: 13/01/2017 Posts: 49 Points: 156 Location: Tewkesbury
|
|
|
|
Rank: Amateur level 2 Groups: Registered
Joined: 13/07/2018 Posts: 41 Points: 141 Location: Slough
|
arpurchase wrote:1/No program updates needed. I really hope you actually mean that "No program updates [are] needed *right now*". It's always possible that bugs could be discovered, or that smartphone updates might require R2's on-board firmware to change - it doesn't happen often, but it does happen. To say that R2's firmware won't ever need to change is the same thing as saying it has a life-expectancy of about five minutes :-) I believe the OP's genuine question was, is there provision to update the firmware if it is ever needed; if what you're saying is that no, there is no provision to update it, then you'd better give us all clear details of how to make claims as a non-updatable board means that any bug in any related software could lead to the irreparable damage of R2.
|
|
|
 Rank: Beginner Level 2 Groups: Registered
Joined: 15/10/2018 Posts: 7 Points: 33 Location: Uk
|
DC-Zol. wrote:Hi.
Question about R2’s operational software/firmware. Noticed the Domes head operation board is similar to that of a Pi microcomputer. It is a Pi, i went looking and its orange Pi, one of the Pi family boards. Decent bit of kit. Im guessing the micro USB input will be to power the board. Building; R2D2
|
|
|
 Rank: Pro Groups: Registered
Joined: 20/12/2016 Posts: 138 Points: 414 Location: Plant City, FL
|
it would be interesting if someone made a new controller board for r2
most of the motor control and basic sensors are not hard to interface.
not to say that there are some hard parts but a lot of this should not be hard to build.
in fact i think a pi with some hats for servo control would get a lot of it.
but yes that would void any warranty from model space / diagostini.
|
|
|
 Rank: Newbie Groups: Registered
Joined: 20/11/2018 Posts: 2 Points: 9 Location: Billericay
|
arpurchase wrote:The answer to your questions are below-
1/No program updates needed.
2/No open programming available. Saying no updates needed is tempting fate. So I do hope when R2 is sending data: 1. All passwords are encrypted with up to date encryption methods not 10 old stuff that a 5 year old can hack. 2. All data is encrypted so no information can be read by anyone 3. Nothing is stored in plain text format. 4. Wifi keys are not stored in plain text format There has been so many cases when devices have been put on the market and they have no or even very weak security. fingers crossed
|
|
|
Rank: Amateur level 2 Groups: Registered
Joined: 13/01/2017 Posts: 49 Points: 156 Location: Tewkesbury
|
baldie wrote:arpurchase wrote:The answer to your questions are below-
1/No program updates needed.
2/No open programming available. Saying no updates needed is tempting fate. So I do hope when R2 is sending data: 1. All passwords are encrypted with up to date encryption methods not 10 old stuff that a 5 year old can hack. 2. All data is encrypted so no information can be read by anyone 3. Nothing is stored in plain text format. 4. Wifi keys are not stored in plain text format There has been so many cases when devices have been put on the market and they have no or even very weak security. fingers crossed You are on about the APP, not the Internal Software of R2, which was what I was enquiring about I don’t See how the points raised by yourself are relevant to the conversation?
|
|
|
Rank: Pro Groups: Registered
Joined: 20/12/2016 Posts: 138 Points: 414 Location: Plant City, FL
|
DC-Zol. wrote:baldie wrote:arpurchase wrote:The answer to your questions are below-
1/No program updates needed.
2/No open programming available. Saying no updates needed is tempting fate. So I do hope when R2 is sending data: 1. All passwords are encrypted with up to date encryption methods not 10 old stuff that a 5 year old can hack. 2. All data is encrypted so no information can be read by anyone 3. Nothing is stored in plain text format. 4. Wifi keys are not stored in plain text format There has been so many cases when devices have been put on the market and they have no or even very weak security. fingers crossed You are on about the APP, not the Internal Software of R2, which was what I was enquiring about I don’t See how the points raised by yourself are relevant to the conversation? not to start a big flame / war but his post is valid, the r2 will need to store data for it to know how to connect to wifi and which app / user is authorized to control that droid. so some info has to be shared between them. many ways this might be done, some of them might have security issues
|
|
|
Rank: Amateur level 2 Groups: Registered
Joined: 13/01/2017 Posts: 49 Points: 156 Location: Tewkesbury
|
figuerres wrote:DC-Zol. wrote:baldie wrote:arpurchase wrote:The answer to your questions are below-
1/No program updates needed.
2/No open programming available. Saying no updates needed is tempting fate. So I do hope when R2 is sending data: 1. All passwords are encrypted with up to date encryption methods not 10 old stuff that a 5 year old can hack. 2. All data is encrypted so no information can be read by anyone 3. Nothing is stored in plain text format. 4. Wifi keys are not stored in plain text format There has been so many cases when devices have been put on the market and they have no or even very weak security. fingers crossed You are on about the APP, not the Internal Software of R2, which was what I was enquiring about I don’t See how the points raised by yourself are relevant to the conversation? not to start a big flame / war but his post is valid, the r2 will need to store data for it to know how to connect to wifi and which app / user is authorized to control that droid. so some info has to be shared between them. many ways this might be done, some of them might have security issues Passwords & Security are different matters, not what I originally asked about. Nobody is starting a ‘flame war’ it’s just that what they were asking is different to the original series of questions about the internal software/programming, security & passwords will more likely be App/Internet driven. Is everybody paranoid somebody will steal their droid?
|
|
|
Rank: Beginner Level 2 Groups: Registered
Joined: 15/10/2018 Posts: 7 Points: 33 Location: Uk
|
DC-Zol. wrote:figuerres wrote:DC-Zol. wrote:baldie wrote:arpurchase wrote:The answer to your questions are below-
1/No program updates needed.
2/No open programming available. Saying no updates needed is tempting fate. So I do hope when R2 is sending data: 1. All passwords are encrypted with up to date encryption methods not 10 old stuff that a 5 year old can hack. 2. All data is encrypted so no information can be read by anyone 3. Nothing is stored in plain text format. 4. Wifi keys are not stored in plain text format There has been so many cases when devices have been put on the market and they have no or even very weak security. fingers crossed You are on about the APP, not the Internal Software of R2, which was what I was enquiring about I don’t See how the points raised by yourself are relevant to the conversation? not to start a big flame / war but his post is valid, the r2 will need to store data for it to know how to connect to wifi and which app / user is authorized to control that droid. so some info has to be shared between them. many ways this might be done, some of them might have security issues Passwords & Security are different matters, not what I originally asked about. Nobody is starting a ‘flame war’ it’s just that what they were asking is different to the original series of questions about the internal software/programming, security & passwords will more likely be App/Internet driven. Is everybody paranoid somebody will steal their droid? Or could be hacked to work for the imperials? Building; R2D2
|
|
|
Rank: Newbie Groups: Registered
Joined: 20/11/2018 Posts: 2 Points: 9 Location: Billericay
|
Of course Passwords & Security is relevant to your originally post as if there was a error in the coding of R2 internal orange Pi microcomputer that related to security then we would need an update. R2 will connect to WiFi so he will need to store the wifi key there has been so many device that store wifi keys and other stuff in plain txt format. There is always need to be able to update any internal security of the software/firmware. so as your original post DC-Zol. wrote:Hi.
Question about R2’s operational software/firmware. Noticed the Domes head operation board is similar to that of a Pi microcomputer.
1. Will R2’s operational software/firmware be updated if Official fixes need to be applied?
2. Will there be any sort of open source programming available (if the above is updatable)?
I’m sure any bugs/operational issues will be sorted by the time R2 is completed but thought to ask the question
Thanks If there is no way of doing any updates then that is very dangerous. I was just highlighting a possible reason why we would need a way of adding updates. (To any hackers out there. "these are not the droids you are looking for")  
|
|
|
 Rank: Vice-Master     Groups: Registered
Joined: 05/03/2017 Posts: 531 Points: 1,710 Location: Midlands, UK
|
I would have thought the orange pi has its own built in security?? I do agree though that something like this should require regular security updates as a minimum. If its connected to the internet there is a chance that it could be remotely hacked just like any device. Which could be very dangerous. Building:
Ghostbusters Ecto-1, Ford GT40, Gone in 60 seconds Eleanor mustang, Shelby Cobra
Complete:
R2D2, Red Bull RB7 RC, Battleship Bismarck, Shelby GT500 'super snake'
|
|
|
Rank: Pro Groups: Joined: 24/08/2009 Posts: 48,827 Points: -13,348
|
Just to put this matter to bed - The official word from the designer/manufacturer copied below:
The R2-D2 has no capability to be upgraded in any way in the future.
The functionality of R2-D2 is not very complicated and has been tested in different ways to ensure it will work correctly under normal conditions and within operating guidelines.
In terms of security, R2-D2 basically only stores the SSID and password of the WiFi network (not encrypted). All photos & video's are stored at the mobile device.
In terms of risk, the worst case scenario is that someone else could login to the WiFi network. However, there is no way we know of today that people can retrieve the data without physically detecting the PCB board from R2-D2 and have physical connection to the board. Even if they have direct connection to the board, it is not something they can do without having the source code from the Software house. So we are not seeing a great risk of losing valuable or sensitive information here.
The long and short of this is that the only potential risk is that someone logs into someone else’s WiFi - You don’t need R2-D2 to do that anyway and is recommended that you regularly change your Network Password.
Obviously the R2-D2 App will be updated as and when need be.
|
|
|
Rank: Amateur level 2 Groups: Registered
Joined: 13/07/2018 Posts: 41 Points: 141 Location: Slough
|
Tomick wrote:The R2-D2 has no capability to be upgraded in any way in the future. Is DeAg legally protected against claims for software bugs? Cos if there are bugs - and I guarantee there will be - and you've chosen to make it impossible to fix them, it'll be awfully expensive replacing all those boards. Quote:In terms of risk, the worst case scenario is that someone else could login to the WiFi network. However, there is no way we know of today that people can retrieve the data without physically detecting the PCB board from R2-D2 and have physical connection to the board. Even if they have direct connection to the board, it is not something they can do without having the source code from the Software house. So we are not seeing a great risk of losing valuable or sensitive information here. I don't know the software house in question or the people who've told you and DeAg this, but please, please believe me (I have more than 35 years in professional development, and I was one of the people who wrote Windows), that this is not accurate - it's trivial to obtain this data if you have any access to the system because it's held in clear text (you can examine the memory of your own system to find it, and then you know where it is on everyone's system), and if there's a way to set and access this data remotely (because that's how users will set it), then there's a way to read it remotely without a physical connection as well. No company with any kind of understanding would make such claims about needing the source code, or about not seeing a great risk because someone can access your WiFi. Quote:The long and short of this is that the only potential risk is that someone logs into someone else’s WiFi - You don’t need R2-D2 to do that anyway and is recommended that you regularly change your Network Password The risk of letting someone remotely access your WiFi is that they then have access to all the machines on your network: and security between machines within a self-contained WiFi network is virtually zero. What you're doing is allowing someone another vector to steal all your personal data; this is a *REALLY* *BAD* *PLAN* and I would STRONGLY urge you to a) encrypt this data at an ABSOLUTE MINIMUM, and b) fix it so the firmware can be updated as bugs are found. Honestly, I can't urge this enough. You're leaving yourselves open to all kinds of legal actions here as the repercussions of storing data in clear text, and being unable to fix it. The UK Data Protection Commissioner will have a field day with your GDPR compliance. Quote:Obviously the R2-D2 App will be updated as and when need be. That's never been in question, it's a good idea, and necessary.
|
|
|
Rank: Pro Groups: Joined: 24/08/2009 Posts: 48,827 Points: -13,348
|
Thanks for your comments which have been passed to the designer/manufacturer.
This topic is now locked pending update.
|
|
|
|
Guest (5)
|
US
