3 ms·
We keep hearing > requiring iPhones to be made entirely in the United States. > attacking an international supply chain to compromise equipment But "Internat
by creer 2y ago
We keep hearing
> requiring iPhones to be made entirely in the United States.
> attacking an international supply chain to compromise equipment
But "International" has nothing to do with it. If Lebanon had been a powerhouse of pager manufacturing, a fake reseller could have been created just the same and the pagers re-manufactured just the same. Single iPhones or cases of routers can be delayed in local transit for a touch up (through a small bribe, appeal to patriotism, theft or whatever). And remote exploits are common enough. Seems we need much more effort put into verifiability and such, in hardware and software. Secure enclaves was an idea in the right direction: there is a lot of chip budget available and some can be put into purely security features. Patch and firmware checksums. Encrypted memory path same thing.
What's on the way? Retail scanner imaging and reference photos posted by the manufacturers?