9.8.26 | LG Spy TVs problem, Mistral raises €3B, Jellyfin 12.0

SPEAKER_1 (0:00)

Welcome to the Hacker News Highlights, where we explore the top 10 posts on Hacker News every day.

Today we dive into raising $1.4 billion, reorganizing Jellyfin while supporting books and comics, and enhancing user experience with new web client features. Let's dive in.

Title, 216M Spy TVs, The LG Smart TV Problem Video.

Source, youtube.com. The video investigates how LG Smart TVs can record and transmit audio even when turned off, highlighting vulnerabilities like microphones that can't be disabled, network data collection, and potential remote access vulnerabilities. The report claims LG devices secretly gather voice data and network information, raising concerns about privacy invasion, security flaws, and corporate misconduct. In the comments, the community largely shared suspicion and frustration about the invasive data practices of LG and other manufacturers. There was broad agreement that Smart TVs and similar devices often operate in ways that violate user privacy, with many emphasizing the need for legal action and better regulation. The dominant view was that these practices are driven by greed and corporate interest rather than security or consumer benefit, and most community members expressed a desire to avoid such devices entirely or to heavily modify or disconnect them. A recurring theme was skepticism about whether these issues could be legally challenged or practically mitigated without significant effort, with some advocating for legislative solutions and others focusing on technical work-arounds like disassembly and network blocking. Overall, the community sentiment was strongly critical of the state of consumer privacy in the realm of smart home technology.

Title, Mistral raises 3 billion euros. Source, Mistral AI. The news story reported that Mistral has secured 3 billion euros in a series defunding round, valuing the company at over 21 billion euros. This is the largest equity fundraising for a European tech firm and aims to boost research, expand infrastructure and grow internationally, supporting over 125 enterprises across 20 countries. The company's full stack open approach aims to give organizations sovereign control over their AI infrastructure and models, avoiding vendor lock-in. Investors included Samsung Electronics, various European and global funds, and existing backers like a 16Z and NVIDIA. In the comments, the community mostly discussed the company's strategic position and the challenges faced by EU-based AI firms. The dominant sentiment was skeptical about Europe's ability to catch up with US and Chinese AI labs due to funding, talent, and regulation issues. Users debated the effectiveness of regulation, the importance of sovereign AI, and the feasibility of building competitive models domestically. Many expressed doubt about the true potential of Mistral, given its relatively modest revenue and concerns about its ability to compete with more resource-rich competitors. Despite some support, the overall tone was that Europe's AI ambitions faced significant hurdles and the community often focused on the broader geopolitical and economic factors influencing AI development.

Title Jellyfin 12.0, Source Cody Rubibaro. The article announced the release of Jellyfin 12.0, highlighting major updates such as database schema changes, performance improvements, and expanded support for books and comics. It explained that upgrading from older versions requires careful preparation because the release actively rewrites data, so backups are essential. New features included episode version support, metadata enhancements, a default modern layout, and security fixes. The update also moved to a new versioning scheme, dropping the 10 inches from the name to better reflect the significance of major releases. In the comments, the community was largely positive, with many lifetime Plex users considering switching to Jellyfin, due to concerns about Plex's future actions and their own experiences. Users discussed the improved performance and ease of migration, sharing that the update was quick and painless. There were debates around security and whether exposing Jellyfin directly to the internet is risky. Most felt that with proper measures, it was manageable. Community members also shared their experiences with different clients and hardware, noting that Jellyfin's apps worked well on some platforms but still had issues on others. Several users expressed optimism about the future of Jellyfin and appreciated its open source approach, though some noted ongoing limitations like handling mixed media libraries and subtitle support.

Title. I've factored the RSA keys of a certificate authority from the 90s. Source. Matthew McFerrin. The Post describes how the author used modern hardware and software to factor the 512-bit RSA keys from a 1999 root certificate authority issued by a now-defunct Canadian company called E-Certify. The author explains the process of extracting old root certificates, finding trustable small keys, and then running the Cato NFS algorithm on a Ryzen 9 5950X to successfully factor the keys in around 32 hours and generate private keys. The story highlights how much weaker early RSA keys are compared to current standards and demonstrates the feasibility of breaking such keys with current resources. In the comments, the community mostly discussed how quickly RSA key sizes have become insecure. With estimates that factoring larger keys, like 1024 or 2048 bits, would take years or even thousands of years on current hardware. Users debated the future threat of quantum computers, noting that Shor's algorithm would make factoring trivial and discussed the technical difficulties of hacking RSA versus symmetric encryption. Some reflected on the early security assumptions and how these tiny keys were once considered acceptable, expressing surprise at how fast older RSA keys can be cracked today with off-the-shelf hardware. Overall, the tone was supportive of the technical achievement and focused on the rapid evolution of cryptographic security.