I want to summarize my response to our weekly meet group because I think itâs important.
First, I love Roon. I love Roon more when they show transparency like this. Thank you. Long live Roon Labs!
Now, onto my rantâŚ
We, we as in you and me, are using a shared resource to make Roon function. If your actions contribute to a Roon outage then you impact the we. I donât think anyone here wants to contribute to a Roon outage but, sadly, some people inadvertently are. And, your actions are not isolated to just Roon but a whole host of services across this shared resource we call The Internet and The Cloud.
Not just Roon, but every application you use relies on these âindustry-standard protocolsâ. Most applications donât actually know how to âtalk to the Internetâ. They ask the operating system âhey, I need this thing to get to this thing out on the Internetâ and the operating system takes the data from the application and figures it out.
That works great because application developers donât need to know anything about The Internet or how it functions. They literally hand the data to the operating system.
But, letâs think about that relationship for a moment⌠The Internet is a hostile place and getting more hostile. Iâm talking about security. We all have a duty, as good netizens, to help protect this shared resource. Now, a lot of us fulfill this duty by simply keeping our operating systems up to date. When an exploit, at the network layer, is identified thatâs solved by updating your OS. Remember, applications just hand data to the OS to move it around The Internet. As soon as weâve updated our operating system all our applications are now protected because they all rely on the OS to provide this service.
Iâm simplifying things greatly here but I need to get to this point:
Hifi manufacturers are, for the most part, terrible netizens.
Streamers / digital transports are computers. Your receiver, plugged into your network, is a computer. Anything in your hifi, that youâve plugged into your network, has compute resources in it. And, to be a good netizen, you need to be using âindustry-standard protocols for network communicationâ. Those standards change. The security mechanisms and trust mechanisms change. That 6 year old bit of hifi kit that hasnât had itâs operating system updated in the past 6 years? Itâs out of date and we should all be upset you still have it connected to The Internet (donât worry Iâm guilty of this too). Your opening up a vulnerability in our shared resource (maybe). Shame on you 
But, honestly, itâs not your fault. We expect our Hifi to be lifetime purchases. We must get out of this mindset for things connected to The Internet. We must do better and we must demand accountability from our manufacturers. Hereâs how to do that:
- When you buy a device ask to see their lifecycle for updates, security patches, support, etc⌠That is, get in writing:
- What is the date for end of life for updates?
- What is the date for end of life for security patches?
- What is the date for end of life for support, both hardware and software?
- Unplug and replace these devices once you can no longer get security updates or sooner.
Now, most Hifi manufacturers wonât have answers to these questions because they are terrible at software. Most should outright tell you that they have zero plan for security updates at all. Meaning, the thing is already end of life sitting on your Hifi dealers shelves. Donât buy this stuff if you want to be a good netizen.
Now, should Roon continue to provide workarounds for the 0.01% who got caught-up in bad manufacturers practices of abandoning their software? Does it make us all just a little more vulnerable on our shared resource? Probably not this time⌠but things change quickly and Iâm seeing more and more where deployments break non-updated operating systems. Iâm also seeing services reduce support trying to accommodate either because of resources or real security concerns. This issue will only get worse if we donât demand real lifecycle plans from manufacturers.
Anyway, thatâs my rant. Key take awayâŚ
- Anything plugged into The Internet is not a buy-once lifetime product no matter how expensive it is.
- Stop buying connected things from manufacturers who have no plan to keep the underlying operating system updated.
- For stuff you already own from these âbadâ manufacturers, sorry, but it really is time to unplug and replace them.
- and, nowhere did I mention the age of hardware. This problem is related to age of underlying operating system and a manufacturers, or your, ability to keep it updated to ever revolving industry standards.
thanks for reading.