3 ms·
The problem is the magic wand is a single endpoint which will also have 0-days now, and in the future. Since the endpoint is connected to the network (at least
by maqp 6y ago
The problem is the magic wand is a single endpoint which will also have 0-days now, and in the future. Since the endpoint is connected to the network (at least you don't talk about airgaps in your work), there's a bidirectional malware insertion and plaintext exfiltration channel. I don't see how this solves anything.
- nepthar 6y agoI believe the author suggested QR codes as an air gap method
- ljlolel 6y agoPlease read through the document. It clearly states in the Magic Wand section that it would be separate HW not with any wireless or wired connections including WiFi or BlueTooth.
- maqp 6y agoIn retrospect I should have read it first, I just ran a quick search on standard lingo i.e. "air gap", to see if that was the case, and I assumed it wasn't when the search yielded no results.
- xphos 6y agoI don't know the wand just aggregates the data in an offline setting, pretty hard to zero day that. Because even if you did it cant transmit the data out as its an offline device. I don't know how practical that is or if people would obey merging the data offline but if they follow the system the author has a point. Note the system totally fails and is zero day-able if you have all of the data streams merged on a non magic wand device. The separation of data seems really important to the system as a whole.
- ljlolel 6y agoIt's a different threat model. All on one device would not gain any more security on 0-days over Signal. But it would avoid dragnets on your raw messages on the wire or in messengers that have cloud backups.