davidczech

5 ms·

31.
by davidczech 2y ago
Isn't the same machine used for milkshakes? That's kind of staple of burger joints.
32.
by davidczech 2y ago
No, but the binaries executed will be available for download.
33.
by davidczech 2y ago
The OS build and cryptex binaries aligning to the hashes found in the transparency log will be made available for download. These are reconcilable with attestations signed by the SEP. The source code provided is for reference to help with d
34.
by davidczech 2y ago
> cannot protect against that because Apple is a "trusted software publisher" in the chain. That's the whole point of the transparency log. Anything published, and thus to be trusted by client devices, is publicly inspecta
35.
by davidczech 2y ago
> It is a supply-chain / MITM protection measure It is so much more than that, but you are entitled to your own opinion.
36.
by davidczech 2y ago
> How can anyone verify that all the code paths append to the log? I'm pretty sure they can just not append to the log from their ExfiltrateDataForAdvertisment() and ExfiltrateDataForGovernments() functions. I think we have differen
37.
by davidczech 2y ago
> they can choose to emit whatever logs they want into the "transparent logs" and then emit whatever else they don't want into non-transparent logs. The log is publicly accessible and append-only, so such an event would no
38.
by davidczech 2y ago
Similar, but a lot of documentation is provided, source code for cross reference, and a VM based research environment instead of applying for a physical security research device.
39.
by davidczech 2y ago
I wish that was true, but the exit and prompt return of seemingly every PC game developer back to Steam doesn't give much hope.
40.
by davidczech 2y ago
Darn, I remember checking this website everyday for new games when I had the 1st generation iPod Touch.
41.
by davidczech 2y ago
Neo
42.
by davidczech 2y ago
I've seen the problem surface in designs where a single key is shared across many devices.
43.
by davidczech 2y ago
Servers send signed statements describing its state, and clients make the yes/no determination.