3 ms·
Crypto is being used to keep owners from fully controlling their hardware. We see this with secure boot being totally under control of the manufacturers. There
by rocqua 8y ago
Crypto is being used to keep owners from fully controlling their hardware. We see this with secure boot being totally under control of the manufacturers.
There is no reason except unwillingness not to allow the owner some way to control what keys are trusted for secure boot. Secure boot, in its essence, is a good security mechanism. Yet if we let them, companies will use it against us.
Something similar is happening with cert-pinned devices. For example amazon echo uses cert pinning.
This means there is no way for a user to see what their device is sending home. For many intents and purposes, this means they aren't the owner of the device. Instead, they have a license.
Why would ought it not be possible for a user to install their own root certificates on these devices?