Hello,

I'm really shocked to see that the Oculus Rift (non S) that I purchased £399 on Oculus' official online store back in July 2017 (order number 61300514128687) can't be fixed - the batteries have worked themselves loose, triggering disconnexions, and on top of that the left headset is no longer working.

Talking to Oculus' support team, there are no spare parts nor any ways of fixing it with Oculus, even at an additional cost - the product has been discountinued and is no longer supported. I can say goodbye to my £399. Or try to fix it myself, if I don't damage it / electrocute myself etc...

It's crazy to think that such an expensive item, purchased by very supportive and enthusiast early adopters, is no longer supported after a couple of years. Clearly Facebook is not playing in the same league than Sony or Microsoft - when I faced an issue with an old Xbox, Microsoft fixed it for free and I didn't even pay for any shipping fees, though the console was no longer under warranty.

I can no longer trust Oculus nor Facebook brands when it come to the hardware and technical support... If you purchase new expensive VR headsets, please take this under consideration.

A (former) VR enthusiast,
David

Your OculusSetup.exe webservers are using deprecated encryption algorithms vulnerable to DROWN attacks.

<the_source.png>
DESCRIPTION: The encryption algo being used to send installation files for oculus drivers. As you can see, it is deprecated and anyone can decrypt/ perform a man in the middle attacks. This is a zero day type of exploit.

<the_packets.png>
DESCRIPTION: This the source IP address, meaning these SSLV2 packets are coming from "31.13.70.51" anyone can download wireshark, start the oculus client wait for the download to start the connection and then begin the wireshark capture, to capture the packets.

<trace_route.png>
DESCRIPTION: I then performed a trace route on the ip address just to make sure it was indeed in fact coming from oculus servers. It is.

CONCLUSION: Whoever is allowing this, needs to be fired. This is the epitome of not hashing a usernames password. Or in fact, this is the epitome of hashing a usernames password with sslv2 certificates. I wonder how much this would cost the company if this got revealed in court, millions suffered from financial damage, such as identity theft.

I have watched Home become larger and larger over time to the point that it is now ~7.5GB DOWNLOAD.
This is completely unacceptable.

It's pretty clear that the vast majority of this is Home and the Touch Tutorial, both now officially considered Unnecessary (You have an option to disable Home in the Oculus App)

Please have a look at the Attached Image and see just how much of the overall package is what I would consider "Bloatware".

As you can see, the Touch Tutorial takes a massive 1.59GB,
while Home (the Oculus Worlds folder) takes a wopping * 10GB! *

Meanwhile, everything else is sitting at an acceptable 1.7 GB total, which is only 13% of the obscenely large 13.4GB.

Please also note that this is a Clean Install, with no additional software included!

I politely ask you to reconsider this as it is, in my opinion, ruthless and highly unreasonable to expect people to download a ~7.5GB download when the actual functionality is only 13% of that download, that's less than 1 GB even!
This is made all that much worse when you consider that we are forced to use an Online-Only Installer, whereby ANY small issue causes the ENTIRE thing to redownload!

Please can we have a change, or at the very least, a comment on why Oculus believes this is appropriate?

I was so excited when I got my Oculus as here in my country it is really expensive basically it's 1000$ when the wage here is from 500 to 700 and I saved up and I got one let's say that in the marketing there was no mention of the cables and I got an ASUS tuf gaming laptop that can run anything on it but I don't have a DUCKING DISPLAY OR MINIDISPLAY PORT so now what I am stuck with a useless headset to make myself see darkness. So you guys market that for ballers with built PCs and streamers ? Is that what it is. and now what do i do with my "perfect purchase". Support says add a User Voice idea like you are going to see this and go oh that is the 5ft or Nth person that asks for that maybe we will make it. all you are going to do is maybe say Uhh we dont support that and blow me off, or the other fan favorate you aint going to say ****.

We have several clients using the Rift-S in exhibitions. They are getting constant "Define play area" even if it's set up as static.
On my Q2 I can in developer option disable this so when cameras are 'lost' it uses the gyro, losing the 6-DoF tracking but still keeping the head rotation. As soon as cameras are seeing again, full tracking is enabled WITHOUT any notifications or need to re-calibrate.
We really need a fix for the Rift-S to replicate this as our client is struggeling using the hardware as-is.
For many uses the Rift-S is used completely stationary, so any guardian/play area is not needed at all.