4 ms·
I often wonder if the only secure computing and communication these days is an air-gapped computer. The data can be manipulated there and then copied to anothe
by DenisM 10y ago
I often wonder if the only secure computing and communication these days is an air-gapped computer.
The data can be manipulated there and then copied to another computer using... uh... a writeable compact disk? USB drives are hard to trust given how much software is running on them, so... maybe CF cards too?
- Razengan 10y agoInstall a VM on an air-gapped computer, use a guest OS to zip & encrypt the data you want to transfer, dump that zip on a disc, and unpack/decrypt it inside another VM on the destination computer?
- nickpsecurity 10y agoOutgoing, secret data plus incoming, malicious data sharing hardware is where security problems start. Ottela keeps those separate physically. Prevents many types of attack or unnecessary complexity.
- e2e8 10y agoI read somewhere that a transmit only serial connection is a good solution.
- DenisM 10y agoHa... that might just work!
- pdkl95 10y agoYou want data diodes that physically enforce one-way-only data transfer. Tin Foil Chat[1] has a circuit for an opto-isolator based data diode and a discussion of how to use them for secure chat. It's probably not hard to modify these plans for other uses, if the specific guarantees that TFC provides are compatible with your secure computing requirements. [1] https://cs.helsinki.fi/u/oottela/tfc.pdf https://cs.helsinki.fi/u/oottela/tfc.pdf
- jacquesm 10y agoRouting the data through a central IM server is a huge problem, it would still allow one to figure out who is talking to who and when.
- nickpsecurity 10y agoIt's not hard to adapt. He regularly improved it based on our feedback at Schneier's blog. I speculated that a higher bandwidth would allow audio and video using same architecture. It's a great desigm regardless due yo strong confidentiality despite endpoint attacks.
- DenisM 10y agoVery interesting... so one machine for sending data (one-way channel) and another machine fro receiving data (also a one-way channel). That, in combination with a one-way serial port, might just suffice.
- dandelion_lover 10y ago>I often wonder if the only secure computing and communication these days is an air-gapped computer. Some security experts say air-gapping is not the best approach. Consider Qubes OS instead. "How does Qubes OS compare to using a separate physical machine?", https://www.qubes-os.org/tour/ https://www.qubes-os.org/tour/
- DenisM 10y agoNone of that will help if the on-chip (CPU) code is hostile. Once the CPU itself is compromised, preventing connections is the only way to contain the problem.