4 ms·

Not sure if you're serious? The fitness band doesn't store your SSH keys, but with a heartbeat sensor, GPS and an accelerometer it allows unprecedented insights

by halomru 10y ago

Not sure if you're serious? The fitness band doesn't store your SSH keys, but with a heartbeat sensor, GPS and an accelerometer it allows unprecedented insights in your daily life (your heartbeat accelerated inside the maternity ward? Just imagine the datamining possibilities). We are dealing with extremely private data here, and a consumer device should be protected accordingly.

slavik81 10y ago
As long as the firmware update requires physical access to the band and the paired computer, then it is secure. If this device is insecure just because its owner can install new software onto it, then all laptops and desktops are also insecure.
- userbinator 10y ago
  ...and that "insecurity" is a good thing, because it's insecurity that leads to freedom. Nonetheless, there are plenty of groups who want to get rid of that insecurity, which is even scarier. https://www.gnu.org/philosophy/right-to-read.en.html https://www.gnu.org/philosophy/right-to-read.en.html http://boingboing.net/2012/01/10/lockdown.html http://boingboing.net/2012/01/10/lockdown.html http://boingboing.net/2012/08/23/civilwar.html http://boingboing.net/2012/08/23/civilwar.html "Perfect security is a good idea only to those for whom freedom is worth nothing."
  - johncolanduoni 10y ago
    How are Cory's predictions going? Apple dropped their TPM (without ever even using it), UEFI Secure Boot still allows you to put your own keys even on the most vertically integrated platforms (like the Surface), you can buy plenty of consumer routers that are already running DD-WRT and can be easily flashed with whatever you fancy, Nexus devices still let you unlock the bootloader, and Apple now lets you compile and run apps for your iPhone without a developer's license. Even consumer GPUs are easily programmable now. In what way have any general purpose computers become less general purpose since the hysteria about the war on general purpose computers started?
  - drdaeman 10y ago
    It is, and it is not. The only sane way is personal security and freedom, where your device is sold to you unlocked or trivially unlockable, with vendor as default trusted party - sure, and you can arm the security to make device obey only your commands, but no one else (including device original vendor), even if you're tricked (malware-shipping wifi hotspots, fake chargers, etc) or lose physical contact with the device.
userbinator 10y ago
Unfortunately the definition of "protected" all-too-often means "against the user".
duaneb 10y ago
I guess it's a matter of taste—I consider anything requiring jailbreaking inherently broken without something to protect. I have no desire to protect my fitness data, but I do have a desire to have access to my own device without problem. Give me accessible hardware or give me something that will be trash a year from now.
- untog 10y ago
  You're not thinking broad enough. It isn't fitness data, it's historical data showing your location (and duration in that location) at all times of day.

by halomru 10y ago

slavik81 10y ago

As long as the firmware update requires physical access to the band and the paired computer, then it is secure. If this device is insecure just because its owner can install new software onto it, then all laptops and desktops are also insecure.

userbinator 10y ago
...and that "insecurity" is a good thing, because it's insecurity that leads to freedom. Nonetheless, there are plenty of groups who want to get rid of that insecurity, which is even scarier. https://www.gnu.org/philosophy/right-to-read.en.html https://www.gnu.org/philosophy/right-to-read.en.html http://boingboing.net/2012/01/10/lockdown.html http://boingboing.net/2012/01/10/lockdown.html http://boingboing.net/2012/08/23/civilwar.html http://boingboing.net/2012/08/23/civilwar.html "Perfect security is a good idea only to those for whom freedom is worth nothing."
- johncolanduoni 10y ago
  How are Cory's predictions going? Apple dropped their TPM (without ever even using it), UEFI Secure Boot still allows you to put your own keys even on the most vertically integrated platforms (like the Surface), you can buy plenty of consumer routers that are already running DD-WRT and can be easily flashed with whatever you fancy, Nexus devices still let you unlock the bootloader, and Apple now lets you compile and run apps for your iPhone without a developer's license. Even consumer GPUs are easily programmable now. In what way have any general purpose computers become less general purpose since the hysteria about the war on general purpose computers started?
- drdaeman 10y ago
  It is, and it is not. The only sane way is personal security and freedom, where your device is sold to you unlocked or trivially unlockable, with vendor as default trusted party - sure, and you can arm the security to make device obey only your commands, but no one else (including device original vendor), even if you're tricked (malware-shipping wifi hotspots, fake chargers, etc) or lose physical contact with the device.

userbinator 10y ago

Unfortunately the definition of "protected" all-too-often means "against the user".

duaneb 10y ago

I guess it's a matter of taste—I consider anything requiring jailbreaking inherently broken without something to protect. I have no desire to protect my fitness data, but I do have a desire to have access to my own device without problem. Give me accessible hardware or give me something that will be trash a year from now.

untog 10y ago
You're not thinking broad enough. It isn't fitness data, it's historical data showing your location (and duration in that location) at all times of day.