3 ms·
"there's no reliable method to determine which VPN to trust. " I would suggest there is no inexpensive and reliable method to determine which VPN to trust. I
by rsync 8y ago
"there's no reliable method to determine which VPN to trust. "
I would suggest there is no inexpensive and reliable method to determine which VPN to trust.
I generally think that designing against state level adversaries is a fools errand but if one went down that road, placing a hardware device that you own into a non-shared rack that you pay for inside a United States datacenter would be a very good start.
Now the complaints / warrants / letters come to you and it is your prerogative to respond as you see fit. Further, the uptime and tamper-resistance of your systems are under your own control.
- freeflight 8y ago> placing a hardware device that you own into a non-shared rack that you pay for inside a United States datacenter would be a very good start. Why even bother a non-shared rack when you can't even guarantee the physical security of your hardware in the first place, as you've outsourced all that responsibility to a third party, the datacenter?
- rsync 8y agoBecause when you have your own rack you can put arbitrary devices and safeguards into and on it. So you're right - the datacenter can open and close and tamper with the rack as they see fit - but I can notify myself of that and even video record it. Interruption of the physical monitoring would be itself a signal. I've never done this, but I have placed many strange and arbitrary devices within, and on top of, racks I have leased and nobody notices or cares unless you're a nuisance somehow.
- aaron_m04 8y agoSince we are no longer ruling out expensive solutions, we'll just have our own chip foundry using open source IP cores and cameras everywhere.