3 ms·

> digital signing of components I'm okay with cryptographic requirements as long as it's a potential vector for an attacker. What do you think about things li

> digital signing of components I'm okay with cryptographic requirements as long as it's a potential vector for an attacker. What do you think about things like the use of glue? It makes things harder to repair, but certainly not impossible. And a well glued device can feel better in the hand than one that flexes and creaks and is almost certainly easier to manufacture. I'm more bothered by things like solid state storage being soldered to the motherboard. That's a component that will fail eventually. Usually long before the device isn't useful. Also, short OS support cycles need to be ended. Any device that connects to anything else should require a ten year security update cycle. If the manufacturer does not or cannot fix the device in that window, retailers should be forced to accept returns for 100% refunds.

JohnFen 3y ago
> I'm okay with cryptographic requirements as long as it's a potential vector for an attacker. Yeah, I'm not. I don't for a moment believe that it was implemented to prevent this, considering that it's an attack vector that is incredibly rare. It was implemented to prevent anyone but Apple from repairing things. The cost/benefit ratio of this is extremely unfavorable. The glue thing is problematic to me, but for environmental reasons rather than reparability reasons. It does make fixing things more of a pain, but it doesn't prevent fixing things. Solid state storage (as well as other things, such as soldering in batteries and such) being soldered onto the mainboard is similar. It doesn't prevent replacing those components, but it does make it more of a hassle. I think that it would be better to make consumables in a device so that end-users can easily replace them without electronics skills would be ideal, and I do hope the industry finds a way back to when that was standard. But, strictly speaking, that speaks to convenience of maintenance, not the ability to perform maintenance.

JohnFen 3y ago

> I'm okay with cryptographic requirements as long as it's a potential vector for an attacker. Yeah, I'm not. I don't for a moment believe that it was implemented to prevent this, considering that it's an attack vector that is incredibly rare. It was implemented to prevent anyone but Apple from repairing things. The cost/benefit ratio of this is extremely unfavorable. The glue thing is problematic to me, but for environmental reasons rather than reparability reasons. It does make fixing things more of a pain, but it doesn't prevent fixing things. Solid state storage (as well as other things, such as soldering in batteries and such) being soldered onto the mainboard is similar. It doesn't prevent replacing those components, but it does make it more of a hassle. I think that it would be better to make consumables in a device so that end-users can easily replace them without electronics skills would be ideal, and I do hope the industry finds a way back to when that was standard. But, strictly speaking, that speaks to convenience of maintenance, not the ability to perform maintenance.