4 ms·

It does mean we should recognize that SSL is nice for some basic privacy/security, but not perfect security.

• charcircuit 9mo ago
  Same with remote attestation. Not all implementations are actually secure. But hopefully over time those security bugs can be ironed out and the cost to extract a key be made infeasable.
  • direwolf20 9mo ago
    Hopefully not. What you have just said is a synonym for "But hopefully over time manufacturers will be able to completely prevent users from running unapproved software."
    • charcircuit 9mo ago
      In the case of video game consoles that could be the case. It turned out that being able to run unapproved software results mainly in people playing pirated games. These security measures are reactive to the actions other people have taken. We already experimented with computing being the wild west where there was little to no security. It turned out that bad actors will abuse anything they can find. Even if it's not economical some attackers will still cause abuse. There's always going to be a market for computers that can run unapproved software. I don't see that going away.
      • lazide 9mo ago
        Huh? Why should people who pay for the hardware not be able to run whatever they want? Why include them as ‘attackers’?
        • direwolf20 9mo ago
          Shareholders über alles?