3 ms·

Trust is a human problem, not a technical one, and it all comes down to the root. Provenance matters more than all else. You could provide me with detailed sche

Trust is a human problem, not a technical one, and it all comes down to the root. Provenance matters more than all else. You could provide me with detailed schematics of your entire board, and the literal VHDL files for every chip it runs, and I still wouldn't "trust" you if that trust hasn't been earned elsewise. You could be giving me absolutely anything. And sure, I could verify it... but then that's no longer trust.

JohnFen 3y ago
You hit the nail on the head. > I still wouldn't "trust" you if that trust hasn't been earned elsewise. And since a large swath of the tech industry (and most of the consumer tech industry) has spent years actively demonstrating that they can't be trusted, even if by some miracle they all suddenly decided to start being decent, it will take decades to even get back to the neutral point on the trust scale.
haskellandchill 3y ago
from https://en.wikipedia.org/wiki/Trusted_system https://en.wikipedia.org/wiki/Trusted_system: The word "trust" is critical, as it does not carry the meaning that might be expected in everyday usage. A trusted system is one that the user feels safe to use, and trusts to perform tasks without secretly executing harmful or unauthorized programs; trusted computing refers to whether programs can trust the platform to be unmodified from the expected, and whether or not those programs are innocent or malicious or whether they execute tasks that are undesired by the user.
worksonmine 3y ago
> And sure, I could verify it... but then that's no longer trust That is the common trust in the open-source software community, but AFAIK not practical in hardware hence impossible. In software we can build from source and verify the checksum to make sure the binaries aren't manipulated, but not for the hardware. We know we can't trust humans so we use software to protect us.

JohnFen 3y ago

You hit the nail on the head. > I still wouldn't "trust" you if that trust hasn't been earned elsewise. And since a large swath of the tech industry (and most of the consumer tech industry) has spent years actively demonstrating that they can't be trusted, even if by some miracle they all suddenly decided to start being decent, it will take decades to even get back to the neutral point on the trust scale.

haskellandchill 3y ago

from https://en.wikipedia.org/wiki/Trusted_system https://en.wikipedia.org/wiki/Trusted_system: The word "trust" is critical, as it does not carry the meaning that might be expected in everyday usage. A trusted system is one that the user feels safe to use, and trusts to perform tasks without secretly executing harmful or unauthorized programs; trusted computing refers to whether programs can trust the platform to be unmodified from the expected, and whether or not those programs are innocent or malicious or whether they execute tasks that are undesired by the user.

worksonmine 3y ago

> And sure, I could verify it... but then that's no longer trust That is the common trust in the open-source software community, but AFAIK not practical in hardware hence impossible. In software we can build from source and verify the checksum to make sure the binaries aren't manipulated, but not for the hardware. We know we can't trust humans so we use software to protect us.