Hacker News new | ask | show | jobs
by pgeorgi 2377 days ago
> All electronics makers should be required by law to supply security updates and spare parts for devices for at least 10 years after the point of sale (not after the release date).

Let's start by requiring then that chip vendors sell and support their chips for at least that long?

To stick to "10 years since introduction to market" which is a much easier requirement: 2009 was the year of AMD Phenom II (EOL 2012) and Intel Nehalem (EOL around 2012), and Qualcomm MSM7227 (couldn't find EOL date, but its direct successor came out 2011).

How much stock should they keep around for the 10 extra years after 3 years on the market? (and what happens if they underprovision, will they be sued, or overprovision, throw it all in the bin? they can't sell it, or the 10 year clock starts again)

> to have a user accessible method for replacing the battery. This used to be standard with all consumer electronics until very recently.

... and then vendors sold thinner and thinner devices, and customers preferred them over the others. The only way to get the same mileage out of a thinner device is to put batteries in every nook you can find, which doesn't work so well if the battery is supposed to be a single replaceable part. Also, there are two layers of plastic (chassis, battery container) that take away space that could be better used to store energy.

3 comments

Regulation gets interesting too. What devices does this apply to? Does it apply to smart tvs, thermostats, printers, anything with software? (which will soon be everything). Components?

Can I import a device? What vetting / certification process will be applied? Who does that? What happens when devices are manufactured by subsidiaries which get folded after 3 years? What if "updates" are provided that don't actually fix any vulnerabilities? What counts as a vulnerability for the purpose of the law?

Security updates need to be supplied for anything that can connect to a network. Vulnerabilities are anything that allows remote read or write access to the device without the user's explicit consent. Companies need to open source everything needed for supplying security updates before going bankrupt (perhaps setting up a suitable insurance to make sure there is money for work needed to do so). You can't import products that don't meet these requirements, just like you can't import products that don't meet other safety requirements. If the provided updates don't actually fix the problem the manufacturer is liable for all damages. You can't sell things that depend on external servers for normal operation without also maintaining those servers (and enabling community replacement in case of bankruptcy).
A thermostat that can't be counted on to function properly for at least several times longer than ten years shouldn't be legal to sell in the first place.
I don't mean to suggest that this is a simple problem to solve. But the importance of this is far to great to ignore.

>How much stock should they keep around for the 10 extra years after 3 years on the market? (and what happens if they underprovision, will they be sued, or overprovision, throw it all in the bin? they can't sell it, or the 10 year clock starts again)

There is no reason they need to replace parts with the exact same chip they came with. If newer CPUs/chips are available they could put a new model in. There will likely need to be more standardization so individual parts can be replaced/upgraded but this is not impossible and is very common for parts like GPUs and pci cards.

There are also mountains of these parts floating around after sale. The OEM could encourage the return of unwanted electronics and then gut them for parts to use in repairs after they have been tested. Any leftovers after 10 years can be sent to recycling.

>vendors sold thinner and thinner devices, and customers preferred them over the others.

Customers preferences need to take a back seat over environmental needs. A customer can live with a 1mm thicker phone. They can't live without air and survivable weather.

None of this is trivial and it will be a massive shakeup to the status quo but there is no other alternative. In the end we will all be better off.

> There is no reason they need to replace parts with the exact same chip they came with. If newer CPUs/chips are available they could put a new model in. There will likely need to be more standardization so individual parts can be replaced/upgraded but this is not impossible and is very common for parts like GPUs and pci cards.

The tighter integration of components (instead of routing everything through pluggable buses) reduced power consumption.

Every time a data line passes through a connection (solder joint, connector) you have to crank up power a bit to make sure that the signal makes it. Every time you have to decrease clock a bit, which means more parallel connections (with higher physical requirements == more waste at some point) for the same throughput.

At some point there's a trade-off to be made between inherent eco-friendliness (because it runs on much lower power) and replacability.

> There are also mountains of these parts floating around after sale. The OEM could encourage the return of unwanted electronics and then gut them for parts to use in repairs after they have been tested. Any leftovers after 10 years can be sent to recycling.

Return programmes already exist (although they generally end up in recycling, not as reused parts), and some countries mandate them (e.g. WEEE in the EU, plus RoHS to eliminate troublesome compounds).

Reuse can be troublesome since quality control is so much harder than for parts in factory fresh condition: All the paranoia here (and elsewhere) about three letter agencies tampering with devices during shipment? Multiply that by some large number because supply chain attacks just became trivial.

I'm all for designing products in an eco-friendly way, but a 2019 laptop is so much better in that regard than a 2009 model, that the decision doesn't seem simple to me at which point the 2009 model shouldn't be refurbished any longer.

> Customers preferences need to take a back seat over environmental needs. A customer can live with a 1mm thicker phone.

I agree and a thicker phone has more room for longevity (eg. sufficient shock absorbance built into the frame simply by virtue of being larger than the components inside) than a thin one that I long for a robust device. The majority of customers seems to prefer other aspects though.

> Let's start by requiring then that chip vendors sell and support their chips for at least that long?

You should make laws as close to the desired effect as possible. The market will sort out the most efficient way to accomplish that. Manufacturers will start placing availability terms into their contracts or stockpile as necessary.