2 ms·

Isn't Librem 5 USA just a hype? I mean from what I understand only a PCB and some insignificant compotents are made in the US and all the rest is sourced from a

Isn't Librem 5 USA just a hype? I mean from what I understand only a PCB and some insignificant compotents are made in the US and all the rest is sourced from around the world? Like the CPU comes from South Korea etc. So what's the difference whether it is assembled in the US and say in China? How they ensure the parts they install are not compromised? Do they only employ US and security cleared workers on the assembly line? How hard would be for the Chinese or Russians to pay an employee to slip some compromised chips to pick and place machine?

tremon 4y ago
The further you are removed from the end product, the harder it is to perform targeted attacks. Sure, they could build a backdoor into every component they produce and hope it won't go detected, but the possibility of the subversion being detected scales linearly with the occurrence rate. And if they only subvert 1 in 1000 chips, how are they going to ensure those chips end up at their intended targets? How hard would be for the Chinese or Russians to pay an employee to slip some compromised chips to pick and place machine? Probably some orders of magnitude harder than if it were assembled in China.