3 ms·
Counterpoint re security issues: If the function of these separate computes like the HDD controller were running on the main CPU, they would have to be integrat
by moring 4y ago
Counterpoint re security issues: If the function of these separate computes like the HDD controller were running on the main CPU, they would have to be integrated in the same software stack; maybe as a driver in the OS, maybe as CPU-internal firmware, whatever. This doesn't just grow a software stack that is already insanely huge, it also introduces new issues because the HDD controller has to perform hard real-time tasks, adding even more complexity. It's also competing for time on the same processor, adding timing channels and other side-channels.
I can't take this beyond a gut feeling, but that gut feeling tells me that separate "computers" are actually a good thing for security.
- tim333 4y agoIf you are really worried about security like you have a private key protecting millions of dollars of bitcoin say, you are better really putting that on a separate 'computer' called a hardware wallet that isolates it from the general mess.
- 95014_refugee 4y agoI think “can be” rather than necessarily “are”, but yes; delegation like this enables more robust separation of concerns, in addition to explicit time / space separation. “Can be” because you have to be intentional about it. As the author implies, it’s easy to build multiple insecure computers, and when you call it “firmware” and hire people with “firmware” experience, this tends to negatively correlate with the security mindset…