4 ms·
That's not strictly true. At one point, my desk was next to the room that held the vault for one particular signing key. You'd have to get through the building
by dgacmu 4y ago
That's not strictly true. At one point, my desk was next to the room that held the vault for one particular signing key. You'd have to get through the building security, through a room guarded by one access control mechanism, and then into a vault secured by a second mechanism. It wasn't guards and guns but it also seemd sufficient for the task at hand.
- calvinmorrison 4y agoFor a many million dollar key, a few armored robbers with guns would solve this problem. Or to quote xkcd: get the hammer
- dgacmu 4y agoDepends on if you are concerned mostly about covert access or overt access. I'd argue the former is quite a bit more serious in the case that keys can be revoked online.
- pixl97 4y agoDepends how long they need it for. "Hi, we have your family hostage for a week and if you tell anyone we have this key we'll ship you back parts" More than enough time for a nation state backed actor to spread a lot of damage.
- bombcar 4y agoYeah covert is the main issue - you need to be sure that dgacmu didn’t wander into the office one door over and grab a copy of the keys. Some sort of read-only memory that logged how many times it had been read might help.
- calvinmorrison 4y agomore like sleeper cell agents