3 ms·
Do the French make their own hardware? An encryption app is useless if you don't 100% trust the hardware. Tainted hardware could figure out, log and send your k
by JustSomeNobody 9y ago
Do the French make their own hardware? An encryption app is useless if you don't 100% trust the hardware. Tainted hardware could figure out, log and send your keystrokes from screen taps/swipes all from silicon.
- TeddyBear060 9y agoYou're totally right. But it's a step forward anyway. Perhaps that hardware will come after.
- pjc50 9y agoTThis is a rather extreme threat model given how expensive it is to carry out and very obvious once discovered. But France does have some domestic defence capability here - Thales make hardware security modules and similar products, and STMicroelectronics has chip design expertise while being partly state-owned.
- Jaepa 9y agoIts a fallacy of composition to say that better security useless unless its perfect security. This is better that it was before. More security is better. Perfect security does not and cannot realistically exist for a complex system. I do think have a reproducible binary would be a huge win. Even if you can't verify the integrity of a single build you could verify that build by consensus.
- HIPisTheAnswer 9y agoReproducible builds are what nix is good at. Synapse is already well packaged, but Riot has the problem of using electron, which was never fully packaged on `nixpkgs`. Maybe someone with the right skills will be willing to do that. Bonus: vscode and others get better support on nix. https://nixos.org/nix/ https://nixos.org/nix/
- rosser 9y agoYou aren't wrong, but most people's threat model doesn't include defense against state-level actors — because for most people there isn't a defense against state-level actors. Apparently, though, people whose threat model isn't dialed up to 11 don't deserve security or privacy?