kfreds

17 ms·

211.
by kfreds 4y ago
> From the photo, that looks like a stock iCE40 FPGA, which does not support hardware attestation of the loaded bitstream. Which FPGA models support _attestation_ of the loaded bitstream? Do any? > How does the user verify that the FP
212.
by kfreds 4y ago
> One question, with the two-stage approach, isn’t that a security risk? App 1 gets measured and can’t change, but it needs to identify app 2 in a way that still allows it to be updatable, invalidating the whole security chain. It doesn&
213.
by kfreds 4y ago
Yes, I'm aware of it. I'm not sure if it's small enough for the Tillitis Key to be able to use it.
214.
by kfreds 4y ago
Good explanation. Thank you.
215.
by kfreds 4y ago
I'm not sure I understand your question. If you're asking about applications running on the device (Tillitis Key) the answer is measured boot. You can read more on tillitis.se.
216.
by kfreds 4y ago
> The things you have listed are indeed very nice, but they are not new kind, as they are available elsewhere. Really? I wasn't aware that there is another USB security key with measured boot-based key derivation. Please provide a l
217.
by kfreds 4y ago
Yes, except YubiHSM boots using verified boot. In the case of Tillitis Key each program gets its own secret key, which it can use to e.g. derive a key pair.
218.
by kfreds 4y ago
> Would the Tillitis Key be able to securely store a private key, then with appropriate authentication from the host, use that key for encryption and decryption? Yes. I don't think that would be very hard to do.
219.
by kfreds 4y ago
Thanks! The other news of today is that we've started a second sister company - Glasklar Teknik AB - which will focus on maintenance and development of System Transparency and Sigsum. System Transparency: Mullvad's security archit
220.
by kfreds 4y ago
1. The hardware contains a UDS (unique per device secret) which can only be read once per boot cycle. 2. Firmware in ROM does unconditional measurement of the first mutable boot stage, which is loaded from the host, over USB. The KDF used f
221.
by kfreds 4y ago
Tillitis Key’s design encourages developers to experiment with new security key applications and models in a way that makes adoption easier and less risky for end-users. You can read more on tillitis.se or in the comment I made below. Tilli
222.
by kfreds 4y ago
The Tillitis Key is a new kind of USB security key inspired by measured boot and DICE. Tillitis Key’s design encourages developers to experiment with new security key applications and models in a way that makes adoption easier and less risk
223.
by kfreds 4y ago
> IP addresses are only one minor tracking mechanism out of many which defeat obscuring originating IP by means of VPN altogether (canvas fingerprint, cookies, font/screen tracking, etc.) I agree. This is why I said "useful sta
224.
by kfreds 4y ago
Thank you. I disagree with your assessment of the use cases for a VPN. Just one example: Your IP address is often a great identifier, making a VPN or Tor a useful starting point for online privacy. This is more or less what we say on our we
225.
by kfreds 4y ago
> Why did it take so long to add monero support? It always seemed weird that you went so far for privacy, but didn't support monero. Was it just on the backlog and took a bit of time to implement? I don't work with payments and
226.
by kfreds 4y ago
Thank you.
227.
by kfreds 4y ago
> Not much more you can do in my opinion. It's definitely good enough for me! Thanks for this great service! Thank you. I happen to think there's a lot more we can do. Look forward to future blog posts. :)
228.
by kfreds 4y ago
Thank you for the compliment! We are indeed for real, but I don't expect this comment will convince you. I'd love to know what we could do that would change your mind. The same goes for anyone else reading this. Are you worried th
229.
by kfreds 5y ago
> Isn't network monitoring and logging the bigger issue for a VPN service? Great point. I have a hard time comparing the importance of the integrity of our VPN servers with monitoring and logging of network traffic happening upstrea
230.
by kfreds 5y ago
> Where will you draw the line between public and private – at the moment your consumer-facing app is on github, but less "server side" stuff (in common with many other VPN providers). All source code for all software on our VP
231.
by kfreds 5y ago
Thank you!
232.
by kfreds 5y ago
Thank you for asking. > Why are the servers located in Sweden, We have 762 servers spread across 38 countries. Less than 10% of our servers are located in Sweden [0]. > a country that's known for online surveillance My cofounder
233.
by kfreds 5y ago
System Transparency reduces your trust assumptions on us. As a VPN provider we are in an immense position of power over you. We aim to reduce your trust assumptions on us to a few things that we would need to explicitly lie about in order t
234.
by kfreds 5y ago
You are correct that System Transparency is not a universal remedy for all threat models. Indeed the word "secure" is undefined until you have a threat model. Most threat models are implied and undocumented assumptions. At some st
235.
by kfreds 5y ago
Correct! Thank you for highlighting that. Here are some additional details for those interested. We intend to make use of TPM for remote attestation of the current boot chain, reproducible builds to provide a strong link from source code to
236.
by kfreds 5y ago
> Forgive me if I have asked this before. Have you ever considered a Pay as you Go model with minimum top up fees? $50 for 50GB with no expiry you can use it for life? Yes, but I can't recall the reasons we discarded the idea. Somet
237.
by kfreds 5y ago
To be fair I think is_true's question is excellent. If anything I should have clarified where I was coming from in my first post. Ultimately I opted for keeping it shorter. I agree though, it is a real joy to lurk a HN thread on J. Ran
238.
by kfreds 5y ago
It does mean something. I can only testify to how they acted in our case of course, but what I can contribute is this: In a product category which is famous for its high-paying affiliate programs, they chose two players who are smaller and
239.
by kfreds 5y ago
Thank you!
240.
by kfreds 5y ago
Mullvad: I know it for a fact, because I'm one of the founders. IVPN: I don't know it, but I've met Nick Pestell (the founder) several times, and he's told me they don't pay for reviews. I trust him.

More ›