Mise à jour 5.5 supprime assembleur TI-83 Premium CE & 84+CE

[Bobb]

De toute façon, le python ne pourrait jamais remplacer la programmation en ASM ou en C. Peut-être que les nouvelles fonctionnalités graphiques sont bien en terme de possibilité d'affichage, mais la rapidité d'exécution des programmes est minable, et sa taille de tas aussi, comparé aux autres marques, qui déjà, n'est pas super. Je ne veux pas remplacer l'asm par un truc de python à deux à l'heure ou je peux faire que deux programmes sans importer beaucoup de modules (façon de parler). Si le python était aussi rapide ou presque que l'asm, j'aurais surement mis à jour, mais là, la question se pose même pas.

[DrDnar]

In response to this unfortunate move, I've sent the following the letter directly to Dr. Peter Balyta, with endorsement from Adriweb and Critor.

Dear Peter Balyta,

I must admit I found the recent decision to remove third-party native code (i.e. C and assembly) support from the TI-84 Plus CE line baffling. It is true that Texas Instruments Education Technology and our programming community have somewhat different interests, but I believe that our community can offer Texas Instruments something very useful.

Without any direct contacts in Texas Instruments, I have long believed that Texas Instruments merely tolerates us. Yet, Christopher Mitchell and Adrien Bertrand have both told me that they have good relationships with you, and that you support our desire to write programs. Some of us, like Christopher, also enjoy teaching programming skills; others, like Matt Waltz, remain only interested in programming.

I recognize that your interest lies in teaching mathematics. Our passion, however, is in programming. We enjoy the challenge of writing games for hardware poorly suited to gaming; it is not the games themselves we enjoy, but rather the challenge of making them. And surely all your employees in your Education Technology division can understand that.

Removing support for third-party native code does not remove this challenge. Indeed, it adds a new, interesting challenge for us. But it is not a challenge we want to have.

From what I gather, the main argument for removing support for native code is that doing so will improve exam security. I find this argument odd because we, the senior members of the programming community, do agree that tools that defeat exam security are bad. We have already proven ourselves to be experts at finding security holes, and in the past, when we have noticed exploits that directly impact exam security, we have notified you. Conversely, even when we have resorted to hacks, we have tried to respect Test Mode, such as with Matt Waltz working with Adrien and Xavier to add code to Cesium so that even if people modify it to run in Test Mode, it will refuse to launch restricted apps and programs.

When Texas Instruments received complaints about a method for bypassing Test Mode, why did you not ask us if we had ideas on how to address the problem? I suspect the reason is that we have not made it clear that our interest is not specifically in games, but in the challenge. Identifying and fixing Test Mode bugs is also a challenge most of us could enjoy. Rather than try to thwart us, you should employ us.

True, some of us, like Brandon Wilson, have already started preparing pitchforks and torches. In fact, people I have never known to have any negative sentiment toward Texas Instruments or interest in vulnerability analysis have started already finding exploits. Others, like Christopher and me, are more inclined to stop working on any projects we had planned. And this is dangerous for Texas Instruments, because without cooler heads active in the community, people like Brandon Wilson will feel free to release tools specifically designed for cheating. After all, it is now much more difficult to say that holding back is good for the community’s relationship with Texas Instruments.

Conversely, actively inviting community feedback on exam security will encourage everyone – including the naysayers! – to work to improve exam security. Major technology giants like Microsoft and Google have found that inviting the public to hunt for security flaws makes their products better. Many even run a bug bounty program that rewards people who report problems with cash. We are not asking for money. Something as simple as a public Web page acknowledging our help fixing issues would help us feel appreciated and show people opposed to our programming community that we are actually helpful. But without support for native code, doing so would be asking us to work against our own interests.

Furthermore, to use the parlance of security experts, removing native code support actually makes your attack surface for exploits far, far larger. Previously, you only had to worry about weaknesses in specific parts of the OS and boot code that could bypass your security model. Now, every single line of code in the OS, boot code, and every application is a potential weak point that could be used to run native code. You still need to fix the old exploits, because they may allow downgrading; but now, in addition, you also need to identify and fix every other possible bug in every single line of code written for the TI-84 Plus CE series. If you do not, your claim that you have improved exam security will seem hollow.

Personally, in the past I have complained about seemingly solvable performance issues. I do not know if your engineers saw those complaints and responded to them, but I was heartened to see that Texas Instruments seems to have taken those complaints seriously, for calculators produced in 2019 now have a new architecture featuring a cache. Nonetheless, I still see serious performance bottlenecks that could be resolved. I would love to have the opportunity to talk with your engineers directly and help address such issues, and hear why some engineering decisions were made. I find such discussions fascinating, and I can think of no business reason why information such as the addition of a cache should be kept secret by a non-disclosure agreement.

And indeed, I have already identified a way to implement downgrade protection in a manner that no native code we write can bypass. Surely supporting native code and allowing your engineers to discuss freely with us the challenges they face implementing Test Mode security will benefit everyone. As the Nspire community has shown with Ndless, an adversarial relationship will frustrate everyone and benefit no one.

I hope you can explain to institutions that the downgrade tool was written by the same loose group of enthusiasts that also notified you of the Test Mode bug that Yvan Monka demonstrated, and that we followed the industry-standard (for computer security) responsible disclosure practice of not publishing our finding until you had a chance to fix it. You might also point out that the downgrade tool was written not to allow students to bypass Test Mode, but because some of us were afraid that the disabling of the Asm84CEPrgm token was a prelude to broader restrictions.

Please, tell educators that we are not motivated by a desire to promote cheating, we are motivated by creativity and a desire to confront challenges. Tell educators that you believe the best way to address their concerns about exam security is to embrace us as partners, not shun us as adversaries. Tell educators we are competent engineers, and it benefits everyone for Texas Instruments to accept us as powerful allies instead of scorning us as potent enemies.

Give us the opportunity to help. Make a public statement so we can convince people to put their pitchforks away. Let this be an opportunity for cooperation.

[samourai3745]

Et si nous faisons tous une pétition que nous enverrions chez TI, pour ça il faudrait que tous les utilisateurs et programmeurs des autres pays se joignent à nous de façon à montrer l’intérêt de l'utilisation du C et assembleur sur TI 83PCE ou TI84+ CE ?????

[Hamza.S]

Ces idiots dépourvus d'égaux ont pour consigne de ne jamais reculer. Je doute qu'une pétition changera quelque chose

[Lionel Debroux]

DrDnar: thanks for spending the time writing that message, but the other version was better

The message remains mostly good, except for the two things IMO:
* the direct singling of BrandonW. I strongly resent it, and I wouldn't be surprised other people do as well;
* both you and me know that putting the pitchforks away is not going to be possible because for well-identified non-technical reasons, the prerequisites for most people dropping the pitchforks cannot be implemented... so it's no use trying to suggest to Peter Balyta that it can be done
The only thing that might convince people to put the pitchforks away would be TI fully reversing its stance on both the availability of native code programs and the anti-downgrade protection. IOW, pretending, in the very near future, that OS 5.5.1 was a blunder that never should have existed. However, the history that both you and me are familiar with shows that TI is basically never backing off their bad moves... especially such importantly public moves as this one, with the exam regulators watching !
Knowledgeable / expert community members, and/or other security researchers, could definitely help TI - but only if users get something in return. There's got to be a carrot matching the stick.
In practice, the gloves are now permanently off, and the TI-eZ80 series castle will fall like a house of cards, since its design is far more insecure than e.g. the PS3, in which Sony did at least try to implement some protections.

In 2012, I did already warn top-level TI EdTech management about the pitfalls of excessive lockdown. To no avail.

[critor]

Et si nous faisons tous une pétition que nous enverrions chez TI, pour ça il faudrait que tous les utilisateurs et programmeurs des autres pays se joignent à nous de façon à montrer l’intérêt de l'utilisation du C et assembleur sur TI 83PCE ou TI84+ CE ?????

Il faudrait que ce soit une pétition signée essentiellement par des enseignants et institutionnels.

Ceux-là mêmes qui pensent que la suppression de l'asm va faire disparaître la fraude au mode examen, et que l'éradication de Oiram CE forcera enfin les élèves à écouter en cours.

Désolé mais cela me semble perdu d'avance.

[Bobb]

Pour faire bouger TI avec une pétition, je pense qu'il faudrait que les gens qui signent promettent de ne plus acheter de calculatrice TI tant que le support de l'ASM n'a pas été restauré. Ça leur fera sans doute peur si beaucoup de gens signent cette pétition.
Si on décide de faire ça, je ferais partie des gens qui signent

[critor]

Il n'empêche que ce sont les enseignants et institutionnels qui sont prescripteurs pour les achats en question.

En France chaque famille est certes libre d'acheter le modèle de calculatrice de son choix, même contre les recommandations de l'enseignant ou du lycée.
Mais c'est différent dans d'autres pays comme par exemple en Allemagne : le lycée choisit 1 modèle et le choix s'impose à toutes les familles.

De plus, ce n'est pas la minorité des 10-20% de passionnés de la CE qui va faire peur à TI. Ils n'ont qu'à aller se faire voir chez NumWorks.

[Bobb]

Bon alors la seule solution c'est de mettre beaucoup d'enseignants de notre côté, ce qui ne va pas être une mince affaire ! Même je pense que l'on aurait dû déjà abandonner, comme tu le dis, c'est peine perdue. Mais de toute façon, on aura du mal à perdre complètement espoir.

[critor]

Un recul de TI sur une restriction déjà sortie est en effet impossible.

Mais cela ne veut pas dire qu'il faut abandonner; il faut juste trouver autre chose.