2 ms·

and how many of your programs can run in a guaranteed nothing environment? Can your process your sensitive data on an unknown device without leaking any secret

and how many of your programs can run in a guaranteed nothing environment? Can your process your sensitive data on an unknown device without leaking any secrets? Sure, pushing bits from one place to the other is easy. But _processing_ that data in any meaningful way is impossibly hard

pdimitar 9y ago
Do you expect a plan that covers 100% of all problematic points from the get go? As if the current technologies aren't patched to oblivion right now. We can at least avoid the problems we already know exist. That's a progress in itself, wouldn't you agree? Like with physical exercise, you start off somewhere and you discover solutions to problems you didn't know how to solve, along the way. Also, I am not sure what you mean. What part of distributing encrypted data and decrypting it with your key on arrival is hard? Admittedly, it would require a big shift in how we code apps. I am not opposed to that though.
- KaiserPro 9y ago
  I have mildly secret data that I want to process, for example a credit card transaction, how do I securely decrypt, process, re-encrypt and upload to the destination? Processing that data requires a remote CPU that can't be spied upon. In a de-centralised environment how can I get a reasonable guarantee that the person hosting the CPU isn't just listening to the secrets?
  - pdimitar 9y ago
    And how do you guarantee that in a centralized system? You don't. It's a wishful thinking based on unfounded trust. I can't answer your question directly. We simply can't rely on anyone hence we have encryption and key chains.
    - KaiserPro 9y ago
      What threat model are you looking at? I'm talking about providing enough guarentees to sign a contract with another buisness, not hide from government actors. as a normal buisness I want to process sensitive information. That is not possible in the world you describe, with current CPUs

pdimitar 9y ago

Do you expect a plan that covers 100% of all problematic points from the get go? As if the current technologies aren't patched to oblivion right now. We can at least avoid the problems we already know exist. That's a progress in itself, wouldn't you agree? Like with physical exercise, you start off somewhere and you discover solutions to problems you didn't know how to solve, along the way. Also, I am not sure what you mean. What part of distributing encrypted data and decrypting it with your key on arrival is hard? Admittedly, it would require a big shift in how we code apps. I am not opposed to that though.

KaiserPro 9y ago
I have mildly secret data that I want to process, for example a credit card transaction, how do I securely decrypt, process, re-encrypt and upload to the destination? Processing that data requires a remote CPU that can't be spied upon. In a de-centralised environment how can I get a reasonable guarantee that the person hosting the CPU isn't just listening to the secrets?
- pdimitar 9y ago
  And how do you guarantee that in a centralized system? You don't. It's a wishful thinking based on unfounded trust. I can't answer your question directly. We simply can't rely on anyone hence we have encryption and key chains.
  - KaiserPro 9y ago
    What threat model are you looking at? I'm talking about providing enough guarentees to sign a contract with another buisness, not hide from government actors. as a normal buisness I want to process sensitive information. That is not possible in the world you describe, with current CPUs