3 ms·

>Let me tell you a secret, there is nothing truly secure in the world. My VCR is pretty secure. CRT monitor, too. Even my headphones are nicely secure. >The i

>Let me tell you a secret, there is nothing truly secure in the world. My VCR is pretty secure. CRT monitor, too. Even my headphones are nicely secure. >The important sense that matters is Intel ME has been found vulnerable (highly vulnerable in fact). The T2 hasn’t. There's your fallacy. Just because the T2 hasn't doesn't mean it can't or won't. You even just said it. 'Only things which haven’t had a vulnerability found for it.'. The problem is that proprietary embedded hardware of a dynamic nature leads to irreversible possibilities of exploitation at a hardware level. ME is a very, very good reason to not trust. >I don’t know about you, but the “main principle of cryptography” is to prevent unauthorized parties from knowing the contents of the data to me. Cryptography is not about obfuscation layers on top of cryptography. Cryptographic security is a math, not a logic. Anything further is about hiding intentions making the cost of entry to finding exploitation higher. The cost of entry makes it hard for white hats to find exploits before the market does. >Your password is part of the process, the extra stuff done in the T2 is just that, extra. Or is it? Have you looked at the firmware? you nor I can, so you cannot claim what it's actually doing. But we do know that it's a proprietary chip capable of lots of fun. Also user passwords are trivial to get, and there's always the possibility that the chip is storing the user password itself. Again, can't know, that's up for the black hats now.

pwinnski 8y ago
A long time ago, I was told a story by a Navy Radioman--a specialty which no longer exists. As a demonstration of TEMPEST, someone parked a van at the end of a pier and after a few hours presented to the crew of the ship a log of everything that had been done electronically on the ship. Not just the transmitted traffic, either, but things that they had apparently been able to construct from the CRT displays in use at the time. At a distance. I don't think your VCR, CRT monitor, or headphones are nearly as secure as you think they are. You might not care about their vulnerability to a sufficiently-motivated actor, but someone else might.
- Someone 8y ago
  https://en.wikipedia.org/wiki/Van_Eck_phreaking https://en.wikipedia.org/wiki/Van_Eck_phreaking: ”In the paper, Van Eck reports that in February 1985 a successful test of this concept was carried out with the cooperation of the BBC. Using a van filled with electronic equipment and equipped with a VHF antenna array, they were able to eavesdrop from a "large distance". There is no evidence that the BBC's TV detector vans actually used this technology, although the BBC will not reveal whether or not they are a hoax. Van Eck phreaking and protecting a CRT display from it was demonstrated on an episode of Tech TV's The Screen Savers on December 18, 2003.”
jsjohnst 8y ago
> My VCR is pretty secure. What happens when a sufficient power surge comes in and it catches fire and burns down your house. Still secure? > CRT monitor, too. You sure? There are known viruses than can destroy some old CRTs. Still secure? > Even my headphones are nicely secure. Sure, so is my wind up grandfather clock too. How is that relevant?

pwinnski 8y ago

A long time ago, I was told a story by a Navy Radioman--a specialty which no longer exists. As a demonstration of TEMPEST, someone parked a van at the end of a pier and after a few hours presented to the crew of the ship a log of everything that had been done electronically on the ship. Not just the transmitted traffic, either, but things that they had apparently been able to construct from the CRT displays in use at the time. At a distance. I don't think your VCR, CRT monitor, or headphones are nearly as secure as you think they are. You might not care about their vulnerability to a sufficiently-motivated actor, but someone else might.

Someone 8y ago
https://en.wikipedia.org/wiki/Van_Eck_phreaking https://en.wikipedia.org/wiki/Van_Eck_phreaking: ”In the paper, Van Eck reports that in February 1985 a successful test of this concept was carried out with the cooperation of the BBC. Using a van filled with electronic equipment and equipped with a VHF antenna array, they were able to eavesdrop from a "large distance". There is no evidence that the BBC's TV detector vans actually used this technology, although the BBC will not reveal whether or not they are a hoax. Van Eck phreaking and protecting a CRT display from it was demonstrated on an episode of Tech TV's The Screen Savers on December 18, 2003.”

jsjohnst 8y ago

> My VCR is pretty secure. What happens when a sufficient power surge comes in and it catches fire and burns down your house. Still secure? > CRT monitor, too. You sure? There are known viruses than can destroy some old CRTs. Still secure? > Even my headphones are nicely secure. Sure, so is my wind up grandfather clock too. How is that relevant?