Potential Hazards and Solutions

Ethical Issues:

Misuse of the Modular MIDI Controller can include:

• Making modular units for the base controller that can tamper with the rest of the keyboard as well as the host that it is connected to.

  • • • • Since the Modular MIDI Controller is an Open-Source Hardware (OSH) Project, the community is allowed to reproduce our base controller and make modular units for it, since this is supposed to foster growth and accessibility for the controller. However this comes at the cost of malicious individuals making aftermarket modules or base controllers that can upload viruses such as spyware, ransomware, or trojans to the host computer. This is possible because the MIDI controller communicates with the host via serial communication over a USB, and the host will recognize it as a trusted MIDI controller. This means the host will always think the information being given and received is solely MIDI data, so an infected modular unit or base controller can send malicious instructions under the guise of being trusted MIDI data. 

• Making some type of intrusive device (remote microphone, explosive, camera) that is marketed as a modular unit for the controller.

  • • • • As well as harming the computer, the modular units themselves could be used for concealing malicious devices. Since we are trusting the community to create these aftermarket units, they could encase harmful gadgets like cameras, microphones, or explosives to spy on or harm users. Since the modular unit will draw power it will be able to power these devices and the casing of the unit would conceal any malicious gadgets inside of it.

Preventative Measures Include:

• Including a checking algorithm in our MIDI interface software to make sure bitstream is in fact sending and receiving MIDI data.

  • • • • Since we will be using the MIDIInterface Library as our interface for serial communication, the MIDIInterface Library contains all the bit-codes that represent MIDI data. By compiling common MIDI packets like sending a note, we can check every packet that is sent against these common MIDI packets to make sure that what is being sent is in fact a MIDI command and not some malicious instruction. This will help the controller by preventing against non-MIDI information being sent or received, and can also help in the event of bugs sending corrupted MIDI packets.

• Requiring modules to have clear cases to avoid any malicious devices being hidden inside of modules.

  • • • • Avoiding microphones, cameras, or explosives from being implanted in community made modular devices is difficult to do while making Open Source Hardware technology, as most methods would remove the community made aspect of the project. However, we believe the least intrusive way to protect against maliciously made modular devices is to mandate that modular devices must be made with some kind of translucent casing so the user can see if there are any harmful devices inside of the mod. While this does remove some freedom from the community, we believe it still allows for the community to develop new modules for each other while also protecting the community against anyone with ill intent.

Product Liability:

There are many attributes that can change during the MIDI controllers lifetime that need to be accounted for including:

• Electrical hazards: Electrical components, such as the power supply and electronic circuits that make up the modular MIDI controller, can pose a hazard if they are not designed or installed properly. We must ensure that the power supply and electronic circuits are safely designed, installed, and grounded.

• Physical hazards: The physical design of the controller can also pose a hazard. Sharp edges, exposed wiring, and improper handling can lead to cuts, bruises, or electrocution. In addition, bad ergonomics could lead to users developing long term injuries in the handling of the device, such as tunnel carpal syndrome and other related repeated-use injuries. We must ensure that the design is ergonomic and does not pose any physical hazards.

• Environmental hazards: The modular MIDI controller will likely be used in different environments and conditions. We must consider how the controller will perform at different temperatures, humidity levels, and under other environmental factors that could impact its performance.

• Wear and tear: Components of the controller may degrade over time, potentially leading to failure or malfunction. It is important to ensure that components will not fail catastrophically and cause damage to the users after long term use. Components should be durable and withstand repeated use and stress.

• Compatibility issues: MIDI controllers rely on software to interface with other devices, so it's important to ensure that the controller is compatible with the software and hardware it will be used with. Additionally, firmware updates and changes in technology could impact the controller's compatibility over time.

The following are steps that could be taken to mitigate these liability issues:

• Have a quality insurance procedure during the manufacturing of the main MIDI component and the modular additions. This insurance procedure should certify the assembly of the various components in a safe and proper manner that is in accordance with electronic safety protections as standardized by the NIST (National Institute of Standards and Technology).

• The iterative design process in combination with customer interviews and studies should help to nail down the most ergonomic design for users of all capabilities and use cases. By constantly redesigning the modular MIDI with feedback and real observations from users we can find the most ergonomic design for the device while also identifying potential liabilities, hazards, and unforeseen issues from the design phase before large scale manufacturing and production of the device. 

• The software that the modular MIDI is interfacing with is constantly changing and being updated with better technology and more useful features. It is therefore important to make sure that users will always have the ability to interface with the software of their choice without much hassle and problems so as to maintain the reputation of the product and maintain user satisfaction. To this end, we plan to have regular firmware updates that keep the modular MIDI and its subsequent iterations fully up to date with the current music production software and we will provide this firmware support free of charge to customers of the MIDI device.
  
  

Social Impact:

The end of the MIDI Controller's lifespan must be accounted for proper disposal from these harmful parts:

• The MIDI controller may pose risk towards the end of its lifespan in terms of software vulnerabilities. With new vulnerabilities being discovered in every day in devices, the MIDI Controller would not be immune to this due to hardware components that would be able to be fixed until a new revision is developed.

  • • • • With the safety of the individual in mind, software vulnerabilities are important to mitigate with the sensitive data that is kept online. If a major vulnerability is discovered, it poses harm to the livelihood of many individuals from professionals to hobbyists. 

• Many of the harmful and problematic components that need to be considered for proper disposal are the electronics. With a bigger unit, a power supply is harmful in regards to its handling. When disposed of improperly, a power supply can harm the environment with its decay and chemically damage the environment. More so, these chemicals can also be exposed to workers that are unknowingly rupturing the enclosure and also releasing the chemicals faster than expected.

  • • • • •  In terms of human health, the chemicals of power supplies and batteries can have long term and life altering effects such as skin and eye damage with chemical burns. In extreme cases, the harm power supplies and batteries can cause cancer as the chemicals and materials are carcinogenic in nature. 

          • Additionally the plastics that comprise the casing have been shown to break down into microplastics. The severity of Microplastics is still being researched but preliminary data shows very dangerous consequences when organisms ingest high quantities. 

The following are methods to mitigate the social impact:

• MIDI Controller Revisions: As the use of firmware updates were mentioned before, the updates can also be used to mitigate harmful vulnerabilities as well as improve product use in compatibility for another mitigation tactic, reuse. For any discovered vulnerabilities that can be mitigated through software, a firmware update will be pushed and can be sent to users via pop-up to ensure the protection of their devices.

  • • • • • Physical vulnerabilities with the hardware can be recalled, traded for a revised version, or at the very least inform the user of the danger they face if they choose to waive these options. While doing a hardware revision is not the best choice as it may take a long time to develop, it does maintain safety and gives the option to recall older devices that would otherwise could potentially be disposed of incorrectly.

• Warning Symbols: As a regulatory standard, a warning label about the electrical components must be included. As these components can potentially pose a threat that is not obvious to an individual, it is required. However, the warning label can aid as a reminder for proper disposal for the end of life of the product.

• Reuse: With the main focus of the Modular MIDI Controller being an OSH Project, in theory there are no restrictions given to the product. Due to this, custom firmware can be integrated at the user's discretion to transform the project into a new device such as a MIDI adapter, a replacement MIDI Controller for an existing product, or create an entirely new MIDI based device such as a low cost soundboard

  • • • • • Another method of reuse is through the secondhand market with resale that is normally done through word of mouth or from another service such as eBay. With this method, many of the preventative measures are dependent on the secondhand user as they may not receive all documentation to properly handle the devices they are given. For this, online documentation should be easy to obtain.

• Recycle:  When the hardware is unable to be reasonably reused for a user's means it can then be recycled in an electronic recycling center to collect usable materials. This also mitigates the harm that can be done in landfills and to the workers in this industry by reducing the exposure to electronic parts such as batteries. Batteries will cause harm to both the environment and the individuals exposed to them when they are ruptured and corroding.

  • • • • • To increase the potential of recycling, a notice can be included to recycle after use or to return the product for the manufacturers to handle the recycling process.