• 6 Posts
  • 57 Comments
Joined 2 years ago
cake
Cake day: June 18th, 2023

help-circle

  • I don’t think is is a backdoor. At the moment I wouldn’t consider this article any more than FUD.

    It’s unclear to me if the security company has actually said what the vuln is or not, but if it’s what was presented in the slides linked in the article this is at worst something that can be “attacked” from a computer connected via USB (and I’m pretty sure it would also require special software already on the ESP32), where the attack is sending out possibly invalid bluetooth messages to try to attack other devices or flashing new firmware to the ESP itself. It’s not a general “backdoor” in the ESP32 itself. At least that’s the best interpretation I’ve been able to make. Happy to be corrected if anyone finds more info.








  • It has definitely changed, I don’t know when, but it’s been like this for at least the last decade.

    Though, in my experience (NB: I’m a software engineer, which is a notoriously lax field.) only what the piece of paper says has changed. Hell, most of my employee handbooks have claimed that “full time” is 50 hours a week. They get away with it because I’m classified as a “computer employee” (lol) and make more than $35k/year (super lol) which means my employment is exempted from minimum wage and overtime pay laws.

    Nobody that I know actually works that consistently. Most people I know don’t even do 40. I do 9-5 (or 8:30-4:30 usually), I take breaks when I need them and nobody has ever complained to me about the amount I’m working.

    My only guess for why it’s this way is that having that be the official working time means it’s easier to fire anyone for no reason because they’re not working their “contractually obligated” amount of time.





  • At work we have a contractual design deliverable that was due yesterday, I still can’t get anybody to tell me what I’m supposed to be designing/building. I’ve got the contract, but its so vague that it’s more unhelpful than it is helpful and there’s apparently been 9 months of conversations with the customer, none of which have included engineering, nor has anything from them been written down. So we’re designing something just based on rumors.

    So we’re in crunch mode, but also we don’t know what we’re trying to accomplish… 😩