4 ms·

Is being assembled in the USA a positive thing for security? The USA is the only country I'm aware of for which there's publicly visible evidence of sabotage co

by Youden 3y ago

Is being assembled in the USA a positive thing for security? The USA is the only country I'm aware of for which there's publicly visible evidence of sabotage committed by the state [0]. Wouldn't it be better to be assembled in a friendly country with a better track record? Maybe somewhere in Europe? [0]: https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...

fsflover 3y ago
It depends on your threat model. They say China is also spying on everyone they can. Also, it's not just made in USA: it's made on Purism's own factory, so they can ensure that nobody else can tamper with it.
- anonymousnotme 3y ago
  I thought that I read (not too long after the snowden stuff) that the US government sometimes intercepts parcels of electronic equipment then will tamper with it so that they can spy on the recipient of the equipment. Not sure how librem can prevent that or how one would know. Also, if somebody places an order and US government asks librem to place some spyware on it via a court order (because say that have a phone tap on the individual), would any customers know about it? Now if one can go the factory and pick up it, then that cuts one avenue of attack by the government.
  - blendergeek 3y ago
    Purism has thought of this and offers an "anti-interdiction" service to counter it [0]. This includes tamper evident seals and glitter paint on the screws (for laptops). [0] https://puri.sm/posts/anti-interdiction-services/ https://puri.sm/posts/anti-interdiction-services/
    - anonymousnotme 3y ago
      Thank you; good to know that they have that. My assumption would still be that if the intelligence services want access to your private information or communication on the device that they will get it (without it be evident); whether it is a OS zero day or other means. I also read through the link you provided on the anti-interdiction server, it only says laptop. I assume that this has expanded to the phone. (Did not go through the phone order process to find out.) Also, looks like one negotiates via PGP email on what one wants; so that is why I assume that there is no pricing on it.
      - blendergeek 3y ago
        You can do anti-interdiction for phones as well. It costs $199 at checkout.
thomastjeffery 3y ago
It's a bullshit claim that only buries the sensible ones; but it's a popular one, so they probably figured it would help the sales pitch.

by Youden 3y ago

fsflover 3y ago

It depends on your threat model. They say China is also spying on everyone they can. Also, it's not just made in USA: it's made on Purism's own factory, so they can ensure that nobody else can tamper with it.

anonymousnotme 3y ago
I thought that I read (not too long after the snowden stuff) that the US government sometimes intercepts parcels of electronic equipment then will tamper with it so that they can spy on the recipient of the equipment. Not sure how librem can prevent that or how one would know. Also, if somebody places an order and US government asks librem to place some spyware on it via a court order (because say that have a phone tap on the individual), would any customers know about it? Now if one can go the factory and pick up it, then that cuts one avenue of attack by the government.
- blendergeek 3y ago
  Purism has thought of this and offers an "anti-interdiction" service to counter it [0]. This includes tamper evident seals and glitter paint on the screws (for laptops). [0] https://puri.sm/posts/anti-interdiction-services/ https://puri.sm/posts/anti-interdiction-services/
  - anonymousnotme 3y ago
    Thank you; good to know that they have that. My assumption would still be that if the intelligence services want access to your private information or communication on the device that they will get it (without it be evident); whether it is a OS zero day or other means. I also read through the link you provided on the anti-interdiction server, it only says laptop. I assume that this has expanded to the phone. (Did not go through the phone order process to find out.) Also, looks like one negotiates via PGP email on what one wants; so that is why I assume that there is no pricing on it.
    - blendergeek 3y ago
      You can do anti-interdiction for phones as well. It costs $199 at checkout.

thomastjeffery 3y ago

It's a bullshit claim that only buries the sensible ones; but it's a popular one, so they probably figured it would help the sales pitch.