4 ms·
> threat model is government secret services Realistically, if your threat model is government secret services, and you're using unmodified consumer grade elec
by trutannus 5y ago
> threat model is government secret services
Realistically, if your threat model is government secret services, and you're using unmodified consumer grade electronics, then you're in 'danger' no matter what. You can't effectively mitigate a threat at the state level using resources produced under the watchful eye of the same state. All they have to do is ask the producer to swap out the device they gave you with a device that comes compromised out of the box. And that's assuming the tech is perfect. Most likely they just hire someone to defeat the countermeasures. However many resources Apple has, I assure you even the most janky state has more.
- javajosh 5y agoSpecial hardware seems 007 childish to me. What's better, having a high-tech tricked-out phone/laptop, or to just have a random stock Android with an inoffensive sim card in it? It seems obvious to me that if you're being targeted, tailed and tracked and probed, you've already lost.
- trutannus 5y agoNo, I mean if you're buying a laptop off the shelf and not ripping telemetry components and whatnot (WIFI card/airgap for example). Customizing hardware to foil any out of the box attacks, rather than some sharks-and-lasers config to 'protect it'. Governments do this all the time for even slightly sensitive information. Commenter above was saying though that the device's anti-tamper tech would save you from state level attacks. I'm just getting at the fact that that's not going to work, since if a proverbial 'they' want to take you out, there's other ways to do so you can't overcome. Just a few examples that came to me about how easy it is to foil anti-tampering measures.
- mschuster91 5y agoYour "random stock Android" likely has a boatload of exploits open unless it's a Google Pixel. > It seems obvious to me that if you're being targeted, tailed and tracked and probed, you've already lost. Depends on which government agency watchlist you are. If you are some sort of Islamist terrorist, the tools that are open to the government are far more capable than if you are some sort of low level drug dealer.