4 ms·
You can't cryptographically verify that the system you are using doesn't have backdoors. For this, we rely on trust. It is then only a matter of choosing who t
by incrudible 6y ago
You can't cryptographically verify that the system you are using doesn't have backdoors. For this, we rely on trust.
It is then only a matter of choosing who to trust with the backdoors into your system. You might have good reasons to prefer to trust a foreign government with the backdoors into your system, but that isn't true for the federal government.
- rasengan 6y ago> You can't cryptographically verify that the system you are using doesn't have backdoors Yes you can, there are many methods including but not limited to SGX among other things.
- incrudible 6y agoSGX has critical flaws that may or may not have been put there intentionally. How do you "cryptographically verify" that such vulnerabilities do not exist?
- rasengan 6y agoTo be able to exploit these "critical flaws" in SGX is quite difficult in the real world. That said, I agree that it could happen in extraordinary circumstances. If you fall under these extraordinary circumstances, you really shouldn't being using a computer identifiable to you in any serious kind of way nor connecting to anything you had ever historically connected to.
- incrudible 6y agoIt's not about me, it's about government infrastructure. How do you procure a system that you don't have to trust, where you can rely on cryptography alone? It's simply not possible. It's not just about CPUs, but all the hardware that goes into running a network.