Hacker News new | past | comments | ask | show | jobs | submit login

Yet its a free-for-all when it comes to power on?



With physical access, sure. The same could be said for shutdown with physical access. Nothing stopping the user without group membership from holding down the power button or unplugging the kettle cable.


Grumbles something about standard computer power cables (IEC 60320 C13) not being ‘kettle leads’ (IEC 60320 C15) …

Though you can use actual high-temp rated kettle leads if you like - they fit and are safe in C14 sockets.


In the UK and Ireland (and maybe elsewhere?), a kettle lead is actually C13. I guess you need a beefier cable/pins in the US, as you're drawing more current at a lower voltage.

Most kettles now have a base with an integrated cable though, so the name doesn't really correspond with the cable's most common usage any more.


>I guess you need a beefier cable/pins in the US, as you're drawing more current at a lower voltage.

No, we just accept slow-as-piss kettles.[1] (Our plugs aren't great, either, it's pretty common for a spark to jump the gap of the leads while you're plugging it in.)

High wattage appliances here have an effective max of like 1.8kW on a single-phase 120V outlet, it makes for pretty useless space heaters and kettles. You could probably beat our kettles with an induction cooktop just by virtue of the stove being able to use two phases.

Truly it's a tragedy for those of us addicted to our hot beverages.

[1]: https://www.youtube.com/watch?v=_yMMTVVJI4c


>it's pretty common for a spark to jump the gap of the leads while you're plugging it in.

how are you plugging it in? Are you plugging the mains end into the wall before you plug the kettle end? That's truly bizarre to me, and goes against everything


> it's pretty common for a spark to jump the gap of the leads while you're plugging it in

If you’re referring to seeing a spark while plugging something in, that’s just current jumping from the socket to the pin that’s entering it - it’s nowhere near possible for current to jump between the pins on a single plug (in air, at least). The distance between pins was specifically designed to prevent that possibility at the given voltages.

Not saying our plugs aren’t poorly designed, just that that’s not one of their problems.


> it's pretty common for a spark to jump the gap of the leads while you're plugging it in

Do you live underwater?


Indeed, our new cooktop in “power boost” mode boils water ridiculously fast. Our kettle is embarrassed.


I had a friend who was easily teased by this, but he was quite right, and you are wrong. Kettle leads in the U.K. have never been C13, and "kettle lead" for a C13 power lead is a misnomer just as much in the U.K. as it is elsewhere.

When kettle power cords weren't captive, as they are nowadays, they weren't C13. Non-captive kettle cords from the middle 20th century were round pin, for starters, and not like the (later) IEC standard at all. Here's a round-pin electric kettle from the 1960s, for example:

https://www.modip.ac.uk/artefact/aibdc-02510

And "hot condition" or "high current" leads for other devices are not C13 now. Here's a high current power lead from Toolstation, for example:

https://www.toolstation.com/uk-plug-to-hot-iec-lead/p21431?u...

It's mis-labelled "C13" but it's clearly a C15 with a notch. Contrast with an actual C13 lead from Toolstation:

https://www.toolstation.com/uk-plug-to-iec-lead/p29256?utm_s...

Here's a hot condition power lead from BKA, for another example, which is again a C15:

https://www.bka.co.uk/iec-c15-hot-condition-power-leads


That first link doesn't support your point. No one would claim that all kettles ever sold in the UK have C13 cables. (No one would even claim that none use C15 – after all, some companies will surely just use the same design across all markets if possible.) This particular kettle is before C13 and C15 were even standardised.

The website it's from has a fair number of kettles from the relevant time period (1980s and early 90s). These two (which seem to be variants of the same model) [1,2] have an OKish view of the power connector and look more likely to fit C13 than C15 from what I can make out (no notch). This one [3] is clearly for C15 though, but as I say it's not a surprise that some exist.

[1] https://www.modip.ac.uk/artefact/aibdc-001258

[2] https://www.modip.ac.uk/artefact/aibdc-02488

[3] https://www.modip.ac.uk/artefact/aibdc-003345


On the contrary, it supports exactly the point made in the preceding paragraph, which even pointed out that the IEC standard came later.

The phrase "Should have gone to Specsavers!" comes to mind. All three of your examples clearly have notched connectors. Two have the notches at the top, and the Russell Hobbs one has the notch at the bottom. Their kettle leads were not C13.

So to repeat: When kettle power cords weren't captive, as they are nowadays, they weren't C13. I've already given an example of a kettle preceding the standard that didn't take anything like a C13 connector, and in vainly arguing against that you've ironically produced three more examples of kettles from later decades whose kettle leads were also not C13.

Here's yet another one, where the lead itself is in the picture. It's not C13.

* https://www.worthpoint.com/worthopedia/vintage-1970s-80s-had...

If there had been examples of kettle leads that were C13, I'd have long since used them to really tease my late friend. But kettle leads in the U.K. have never been C13, and my late friend was right that "kettle lead" for a C13 power lead is a misnomer in the U.K..

* https://www.specsavers.co.uk/book/location (-:


> In the UK and Ireland (and maybe elsewhere?)

I think its just the UK and Ireland where there's a demand for "high performance" kettles. The rest of the world is condemned to waiting longer boiling periods due lower-wattage kettles. I've had a British expat audibly exasperated by my kettle.


My Japanese kettle has a MagSafe cord.


Does it have Find My Kettle?


surprisingly that would have come in handy on more than one occasion.


[flagged]


I have never posted on Reddit and barely read it.

A little fun from time to time doesn't hurt too much, does it? HN can certainly sometime bring us a smile. My "you managed to make me smile" message has been upvoted 21 times so far.

It's not a slippery slope, it has always been like this. If it were everywhere every time it would be annoying, but it's not the case.


“Please don't post comments saying that HN is turning into Reddit. It's a semi-noob illusion, as old as the hills.”

https://news.ycombinator.com/newsguidelines.html


Sorry I jumped ship from reddit 3 years ago and have been lowering the IQ ever since


As another post has commented, in Ireland we indeed use C13 cables, and it's pretty common to use this term for that here !


You mean your computer's PSU doesn't need a 120°C rated plug? Bro do you even CUDA?


When you "CUDA" the heat is the least of your problems. Did you ever see a single core copper cable become brittle like crackers?


What about wake on lan?


Poor Ian.


or type ctrl-alt-delete to start a reboot, if that's not been disabled.


I think at one point that caused a console message: "This isn't DOS"

ctrl-alt-delete has not rebooted OpenBSD in a long time.


i am not surprised.

but the irony is that i'd prefer if someone trying to shut down my computer they would use ctrl-alt-del to initiate a clean shutdown/reboot instead of just pulling the power. in fact, if my GUI is stuck somehow, i'd want that for myself too.

"This isn't DOS" is rather inconveniencing myself for the sake of purity. i have been there too when i was young.


if it is followed with the right process for shutdown, I think that message is good. (like vim telling you how to exit, if you hit ctrl-c)

does BSD have sysreq commands like Linux?


I was going to mention something about PXE, but according to Intel it has no security at all:

https://www.intel.com/content/www/us/en/developer/articles/t...

> As network technology has improved, the limitations of PXE Boot are more apparent. PXE has no mechanism for encryption or authentication, is susceptible to man-in-the-middle attacks, does not scale outside of local networks, and has reliability issues associated with TFTP time-outs and UDP packet loss.

[snip]

> One of the key issues with PXE is a lack of security. The TFTP & UDP transactions associated with PXE may be the last unencrypted traffic on your network and are trivial to intercept. This boot process goes against the “zero trust” concept applied to today’s networks.

However, UEFI to the rescue:

> The UEFI Specification introduced HTTP(S) Boot in in version 2.5. HTTP Boot combines the Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), and Hypertext Transfer Protocol (HTTP) to provide system deployment and configuration capabilities over the network. Compared to PXE Boot, HTTP Boot can handle much larger files than TFTP, and scale to much larger distances. PXE depends on UDP broadcast You can easily download multi-megabyte files, such as a Linux kernel and a root file system, from servers that are not on your local area network.

Because HTTP is now a layer of the network stack.


So now nobody on your network can boot your computer, but everybody in the internet can.

Secure by design.


Where did you get the idea that anybody on the Internet can?

The first step to network booting (PXE or UEFI boot) requires DHCP, which means a DHCP server or relay on your local broadcast domain (switched LAN, and I'm sure there are extensions for boot-over-WIFI somewhere).

Sure your computer could fetch the boot image over the Internet, if you're okay with involving the unreliability of the Internet in your boot process, but that'd require explicit configuration on your DHCP server.


So I might not be able to turn on my computer because an X.509 certificate expired ;)


Yes, but more likely because of clock skew because the battery long ago died. Not that I've ever seen that...


AMT/IPMI is more reliable than PXE and does support/require authentication


But how is the network securely going to tell the computer which https server to use? I can get a certificate for any server I put on the network.


Using DHCP, the same tool that can configure any client computer with addresses and gateways, meaning you hopefully secure that already.

Some switches give you tools to mark a few physical ports as "truster", allowing DHCP OFFER from those; and drop (or ever shutdown the port!) when such a packet is received on an untrusted port.


If you can trust DHCP, why can't you trust TFTP? Your smart switch could drop TFTP packets just like it drops DHCP packets and you're good again.

(Yes, yes, pxe doesn't check for secureboot signatures)


You've been downvoted, but you managed to make me smile.


Judging by all the downvotes and comments that there are quite a lot of people without sense of humor :-D


"Login required before powering on"


Isn't this essentially what full disk encryption demands?


Is the machine on or off at the point of the prompt?


Yes.


BeOS had this:

int32 is_computer_on(void)

    Returns 1 if the computer is on. If the computer isn't on, the value returned by this function is undefined.


SCO OpenDesktop installation manual had something to this tune about booting and drivers :D


should ping local electric company and check that the daily quota isn't filled


Power ain't free


real users get power, few get _shutdown


No, power on already requires membership of group _startup so no security problems there AFAIKS.


As well as _localpresence and _finger.


With physical access, if you can touch it, you can own it.


It was a joke (:


What do you mean? Pressing the physical power button?


Hahaha hillarious




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: