3 ms·
I'm pretty sure if you offer a high enough bounty, some of the people working to deploy your infrastructure will go searching for those FPGAs. Also, I expect e
by fxtentacle 4y ago
I'm pretty sure if you offer a high enough bounty, some of the people working to deploy your infrastructure will go searching for those FPGAs.
Also, I expect enthusiast users and large companies to purchase similar devices as small telcos. Scorned network administrators are probably even better bounty hunters.
But yes, I was focusing mostly on the end-user aspect because if you want to create such a law, you need your citizens to like the idea.
- evilos 4y agoIMO proposing we "disallow remote updates" because we don't know what backdoors could be sneaked into devices is akin to proposing we outlaw fudging spreadsheets because we don't trust accountants. It's not really practical or enforceable. If a world power wants to hide something nasty in silicon or software, a bug bounty program isn't going to cut it. Maybe if the government had a genius-savant who could stare at silicon dies and find malicious circuits.