Comment on Undocumented 'Backdoor' Found In Chinese Bluetooth Chip Used By a Billion Devices.

• ChaoticNeutralCzech@feddit.org ⁨5⁩ ⁨weeks⁩ ago

  No. I’m saying you cannot have a complete list because the chip is user friendly. Look at all the “ESP32 project” results in the search engine of your choice if you want an incomplete list. Unlike say the Apple M1 processor, you don’t need a contract with the manufacturer to make a device with the chip so not even Espressif has a list of commercial products that ship with their chip.

  Anyway, there is no use of a list resulting from this news. Suppose I told you “LOOK! This device’s firmware was compiled before they knew the program might be .1% more efficient with this instruction discovered in 2025!” – would that really change how you feel about the device? Most software has way higher overhead that could be optimized away.

  However, lots of people will fail to realize that, again, this is not an exploit so I’ll enjoy lower ESP32 prices for future home automation projects.

  source

  • RememberTheApollo_@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

    Dude, do I really need to pedantically qualify my question with “I would like a list of manufactured devices produced for sale with the chip already integrated, not hobbyist or ersatz devices in limited quantity? Nobody needs that, and a reasonable person would understand I’m not interested in what joe schmoe built in is garage.

    C’mon, it’s like you’re looking for an argument. No shit we can’t have a list of every device based on your criteria, but we can reasonably expect to know what manufactured large-run devices do have it, and I think that’s a reasonable take on my question.

    source

    • ChaoticNeutralCzech@feddit.org ⁨5⁩ ⁨weeks⁩ ago

      I agree that a list would be cool but I need to make sure that people know this is not a “WARNING! Avoid these bugged devices:” situation.

      Am I oddly curious about the cheapest/most expensive/most popular retail ESP32 device? Yes.

      Does this news increase/decrease the benefit of making such a list? No, it’s still way below the cost.

      source