3 ms·

I've never understood the need for all the complexity. Security should be built from the ground up from two physical ports. One is a file storage like SD card

I've never understood the need for all the complexity. Security should be built from the ground up from two physical ports. One is a file storage like SD card and one is a hasher/checker for the blobs that are read form that storage device. One of the blobs should be the CPU microcode. The system can be expanded with additional (tag,blobs). There. Solved every solvable use case. Okay, i lied. I do understand why there is a need for all the complexity. Some sysadmins and DRM believers think the complex solution makes their lives easier by being remotely controlled and being "good enough". Because nobody could ever care enough to tinker with 'baked in' secrets and if they do its above your pay-grade.

TeMPOraL 4y ago
Nice try :). Computing built out of cryptographically secure cons cells. But no, this doesn't solve anything, because the root problem doesn't have anything to do with technology. The root problem is that people need to work together despite having conflicting goals and interests. Like, e.g., the major issue with trusted computing isn't trusted computing. Everyone would like their devices to be secure against unwanted software doing bad things. The conflict is over who owns the device in the first place. I'd like to own my PC, the very one I'm writing this comment on. So does Intel, Dell, Realtek, Microsoft, my bank, every news site, half a dozen governments, and countless criminals specialized in exploiting digital technology. Whether or not TC is good for me hinges entirely on the answer to the ownership question. As for complexity - it comes from the industry incrementally evolving technological solutions to what's a philosophical/sociological problem that doesn't have a theoretical solution yet (and might be unsolvable in general).

3 ms·

I've never understood the need for all the complexity. Security should be built from the ground up from two physical ports. One is a file storage like SD card

by athrowaway3z 4y ago

TeMPOraL 4y ago
Nice try :). Computing built out of cryptographically secure cons cells. But no, this doesn't solve anything, because the root problem doesn't have anything to do with technology. The root problem is that people need to work together despite having conflicting goals and interests. Like, e.g., the major issue with trusted computing isn't trusted computing. Everyone would like their devices to be secure against unwanted software doing bad things. The conflict is over who owns the device in the first place. I'd like to own my PC, the very one I'm writing this comment on. So does Intel, Dell, Realtek, Microsoft, my bank, every news site, half a dozen governments, and countless criminals specialized in exploiting digital technology. Whether or not TC is good for me hinges entirely on the answer to the ownership question. As for complexity - it comes from the industry incrementally evolving technological solutions to what's a philosophical/sociological problem that doesn't have a theoretical solution yet (and might be unsolvable in general).