Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Yeah how (Score 1) 39

They'll probably just use the MAC for the initial password because, as you say, the device has almost certainly already got a printed label with it on and it doesn't involve any special characters, so no change to the manufacturing process at all - just a bit of code and a documentation update. Equally, a hardware reset would simply reset the password to the MAC as well as wipe any config info, so no issues with generating extra e-waste, unless the device with shit to start with (we are talking IoT afterall).

It's a start, but MACs are 6-octets, and the first three of those are the vendor-specific OUI, so a dictionary attack is definitely possible without a mandatory password change on first boot if you can fingerprint the device, work out the vendor, then look up the possible OUI(s), and anything else they may have done - like including the brand/model name as a prefix. Three non-specific octets is ~16.7mil combinations, so well within reach of a brute force attack given even a modest amount of time & bandwidth. Of course, the chances are non-zero that unless they're also forced to use something with more entropy the user will just set it to something stupidly easy to guess like "password", but that's now the user's problem.

Comment Re:Selling solar to PG&E (Score 1) 338

Don't PG&E have a cheaper rate option overnight? The math on green generator+battery combos isn't so much selling the excess for buttons, but that you used your free, locally generated, capacity as much as possible during the daytime peak rates, with any excess going into the batteries, then topped off the batteries at the cheap rate each night. Any shortfall in your demand against local generating capacity during the day is then drawn from the batteries, so (system inefficiencies aside) you're basically getting cheap rate electicity during peak rate periods.

For my UK supplier, there's around £0.20 per kWh difference in the two rates, so every 5kWh of battery capacity saves me about a £1 per day. A decent 5kWh modular battery pack can be had for around £1,500 so, allowing for some inefficiencies, RoI is around 5 years, and the battery packs are often guaranteed to last for at least 10 years, with some allowance for capacity reduction - typically to less than 80% with that kind of daily cycle pattern. The practical capacity limit on stacking the modular batteries is how much charge you can get into each stack within the cheap rate window, but you can run and charge more than one array of batteries in parallel if you know what you're doing. We currenly have a little over 20kWh of batteries installed and even with a PHEV our bill is almost entirely based on the cheaper overnight rate, rather than the daytime peak rate.

Slashdot Top Deals

One of the chief duties of the mathematician in acting as an advisor... is to discourage... from expecting too much from mathematics. -- N. Wiener

Working...