4 ms·

> with every single chip running auditable firmware But disks? Isn’t their firmware closed?

• voldacar 7y ago
  Ugh I guess there always has to be an exception. Maybe you could run everything in a ramdisk? It supports up to 2TB of ram after all
• justinclift 7y ago
  Maybe OpenSSD would be functional enough to use: http://openssd.io http://openssd.io http://www.openssd-project.org/wiki/The_OpenSSD_Project http://www.openssd-project.org/wiki/The_OpenSSD_Project
• tpearson-raptor 7y ago
  What you can do with a trusted CPU domain is use FDE. FDE is standard practice for anyone even remotely concerned about security in the first place. So the firmware that matters -- the firmware that can subvert the system due to privilege level, etc. -- is open. No other vendor aside from some lower end ARM toy SoCs can say that.
• throw0101a 7y ago
  > But disks? Isn’t their firmware closed? Encrypt your data in-memory with a file system feature (or something like LUKS/dm-crypt) before it's sent down the SATA cable to the disk. The NSA has gone after disk firmware: * https://www.theregister.co.uk/2015/02/17/kaspersky_labs_equation_group/ https://www.theregister.co.uk/2015/02/17/kaspersky_labs_equa...