4 ms·
The size of the supply chain required for such an endeavor is so huge and spread among various countries and companies worldwide this would be a big task even f
by patrickaljord 7y ago
The size of the supply chain required for such an endeavor is so huge and spread among various countries and companies worldwide this would be a big task even for the EU. I mean, competing with the like of Broadcom and ARM from scratch. Good luck with that. Even then, the NSA would just need to pay or blackmail a single entity in the supply chain to get their backdoor in there. The EU itself would probably implement their own backdoor. Also open source doesn't mean it will be backdoor free https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_tried_to_backdoor_linux_three_times/ https://www.reddit.com/r/linux/comments/54in5s/the_nsa_has_t...
- zrm 7y agoYou don't have to refuse to take an ARM license (although RISC-V is also a thing). You may not even have to design your own chips at all -- they could just pay an existing manufacturer for design specifications and then both audit the design and develop and publish open source firmware for it. Supply chain security is an independent problem. First you have to know exactly what the design is supposed to be, only then can you verify that it actually is.