poettering

7 ms·

1. 31.▲
   by poettering 9y ago

   > Really!? This is (one of the) reason(s) why some of us greybeards loathe systemd (and just when I was starting to become "okay" with it, too). I am not sure why you imply that there was some evil scheme behind all this. In re
2. 32.▲
   by poettering 9y ago

   trusted boot and TPMs with remote attestation exist precisely to ensure that physical access does not mean game over. It's all there, people just need to make use of it in their systems. And yes, trusted boot and TPM has issues, but wi
3. 33.▲
   by poettering 9y ago

   what would you suggest instead? numbers?
4. 34.▲
   by poettering 9y ago

   Think of cell towers or wind power turbines: they both are primary hacking targets in today's world, and they are placed in the wild, in uncontrolled and unprotected locations. This means more or less anybody can just walk by, temporar
5. 35.▲
   by poettering 9y ago

   Well, I am pretty sure IoT devices should be designed with security in mind, and that means that they need to be protected against offline modification. And that's something OSTree can't really deliver, but dm-crypt can. And casyn