undefined | Better HN

0 pointsAnthonyMouse9mo ago0 comments

How is it any different? You install the hash of the boot loader when you issue the machine, then use the trusted system to update the hash if necessary.

Also, the concern is that the system comes from the factory with private keys the owner doesn't have access to, allowing the device to defect by informing on them to a third party. Keys installed by the owner rather than the manufacturer are fine, and then such keys also wouldn't be trusting random third party code either.

0 comments

mschuster919mo ago

> How is it any different? You install the hash of the boot loader when you issue the machine, then use the trusted system to update the hash if necessary.

With your private CA you can skip the "update the hash" part, removing a crucial step that one might forget in a hurry or that simply might go wrong because of whatever sort of bug or power outage... and brick thousands of machines as a result.

AnthonyMouseOP9mo ago

The "update hash" part is the counterpart to the "sign the binary" part, so if you forget to do it you're going to have problems either way. Also, this is the sort of thing that large organizations would have automated tooling to do anyway.

mjg599mo ago

If a device is running code you control, how does it defect?

AnthonyMouseOP9mo ago

If you can't make it do something you don't want it to do, someone else can't pressure you to do it.

j / k navigate · click thread line to collapse

0 pointsAnthonyMouse9mo ago0 comments

How is it any different? You install the hash of the boot loader when you issue the machine, then use the trusted system to update the hash if necessary.

0 comments

mschuster919mo ago

> How is it any different? You install the hash of the boot loader when you issue the machine, then use the trusted system to update the hash if necessary.

AnthonyMouseOP9mo ago

mjg599mo ago

If a device is running code you control, how does it defect?

AnthonyMouseOP9mo ago

If you can't make it do something you don't want it to do, someone else can't pressure you to do it.

j / k navigate · click thread line to collapse