3 ms·
> Or, you know, just use a fully open device and open source software in the first place so you're not playing silly adversarial games with a device you rely on
by ummonk 5y ago
> Or, you know, just use a fully open device and open source software in the first place so you're not playing silly adversarial games with a device you rely on for everything.
Are you using open source hardware? And then how are you auditing the supply chain to ensure the hardware you're receiving matches the open sourced design?
- nybble41 5y agoFully open source hardware with an audited supply chain would be ideal, yes. We're not quite there yet, though some groups are working on it, and a device like the PinePhone is a big step in the right direction. There is still a risk that components may be unknowingly compromised but at least you're not stuck running software on "your" device which is publicly acknowledged to place the manufacturer's interests above your own. It's still a good ideal to enforce compartmentalization and privilege separation, of course. That last sentence was aimed at knowingly running untrusted proprietary software and relying on compartmentalization alone—I didn't mean to imply that one should forego proper security architecture just because the hardware and software are a bit more open.