3 ms·
The trust you have in the phone company is another target of attack than the one discussed here, the fact that operators need to trust closed source blobs in th
by yholio 6y ago
The trust you have in the phone company is another target of attack than the one discussed here, the fact that operators need to trust closed source blobs in their networks, often times provided by other states with strategic interests in what goes on over their networks.
- mulmen 6y agoMaybe I wasn’t clear. Even if the government publishes the source of whatever I am interacting with how do I know the source they publish is the same source I am interacting with? Nothing stops them from adding some malicious patch before deploying the open code. It’s all still based on trust.
- yholio 6y agoYou are talking about the full chain of trust. I'm an talking about a single link of that chain, the ability of the operators to know their hardware is not under the control of some foreign state actor. This is the topic of the 5G wars. It's a necessary but clearly insufficient condition for what you ask.
- majkinetor 6y agoThere could be regular random audits by relevant gov ministry.