171–180 of 195 posts
Earlier quoted context omitted.
Sadly the T1/T2 are ancient now. The non-open SPARC is up to T7, which is 20nm process, 256 threads on 32 cores.
Sort of. I run the bloated Web, movies, IDE's, servers, and VM's on a Core Duo with 2 cores under 2GHz done on 65nm. I'd loose some single-threaded performance probably with an OpenSPARC T2 but otherwise it should handle my modern workload. Doesn't quite feel ancient. ;) The cool thing about open-source CPU's is one can always improve on them to, say, have an extra dozen cores on more recent nodes. Like Oracle does b…
Somebody tried to use a university department's T2 because it was unused and reasonably parallel for some experiment on hashing.
Single core SHA1 speed on a t2 was ~300KB/s or so. Even with its 32 threads I recommended going for any ancient desktop that happened not to be used for a couple of days because the experiment would finish much faster there. Those desktops were about Core Duo class and managed 50-100MB/s SHA1 throughput (I think, it's been a couple of years).
Earlier quoted context omitted.
Thank you for the feedback! This is still a desktop so if the device is grabbed the power won't stay long. You need NFC to restart and then enter your password. We are still working on opening as much as we can of the design. Bill of Material and drawings will be detailed on www.orwl.org/wiki
If your device is grabbed by the FBI from the Glen Park library, I don't think they'll be turning it off. Wouldn't they use some sort of device[0] to maintain the power supply? I assume they would also be aware a key fob was in use, at least if you were using reasonably well-known hardware like the ORWL. I noticed the campaign details indicated the power supply voltage is monitored. Will this protect against a hot-pl…
I suppose this technique could be modified for most UK pugs too, but I've no idea how you'd manage it for a recessed EU-type socket.
Earlier quoted context omitted.
We are actually talking about this. Thanks for your interest.
If you made such a phone I would buy it. I hope you guys have a great success because it seems like an awesome product.
Earlier quoted context omitted.
Does that work? Can't the evil maid install a malicious hypervisor to dump interesting pieces of memory every few minutes?
That hypervisor would have to be at the hardware level, I'd imagine. A read-only PE for boot (WORM drive) with all your typical programs pre-installed, and then a separate encrypted removable data drive would be the mitigation against that.
Earlier quoted context omitted.
He's talking about display monitors AKA the screens which can be exploited via the i2c bus over the graphical interface (e.g. HDMI). The GP is 100% correct, if you can't trust your keyboard, mouse, and the monitor the "secure computer" concept in this case is problematic, while it does reduce the attack surface somewhat it just focuses the attention of the adversary onto a different vector. If we take their "cleaning…
I'm a bit surprised that, in 2016, there is no standard way for a computer to authenticate its keyboard and monitor. Has anyone even thought about how that could be done?
If you are going to prevent physical attacks from adversaries that can circumvent basic protection (e.g. FDE) you have to make sure that every device is as secure because the system is as secure as its weakest link.
If your adversaries are just the random person that might steal your PC then any full disk encryption even a cryptographically insecure one would be sufficient because the people who end up dealing with these devices won't have the knowhow or the resources to attack even bad encryption.
Having some physical security in a OSS-hacker-compliant form factor is really quite nice. This is not going to replace a proper HSM, and almost certainly is a less secure place to store your data than an iPhone; but it's a good start for those unwilling to give up on (the performance of) PCs. It's worth noting that QubesOS, which is supported by this system, protects against e.g. USB-based attacks by running a virtua…
ORWL will go in stand-by if the user is further than 10meters away from the device, if moved when away, it will shut down. If the hardware is tampered with, or chilled, the SSD encryption key is deleted within milliseconds. iPhone or any other consumer product at this point have less or no physical protection. The physical level of protection is taken from the payment industry standard and applied to the consumer dev…
Earlier quoted context omitted.
That hypervisor would have to be at the hardware level, I'd imagine. A read-only PE for boot (WORM drive) with all your typical programs pre-installed, and then a separate encrypted removable data drive would be the mitigation against that.
And the BIOS?
Earlier quoted context omitted.
Bruce Schneier and others[1] have done the math on brute forcing 256 bit keys: even with a perfectly efficient computer using the least amount of energy possible, you would have to deplete the entire energy content of the Sun to just iterate over a 225 bit keyspace once, let alone do anything meaningful with those keys. Moore's Law doesn't really factor into it. [1] http://security.stackexchange.com/a/6149
It's estimated there are 10^80 atoms [1] in the visible universe, so 2^256 is definitely a huge number. I didn't realize 256 bit brute force was nigh feasible with only a solar system. I'm a bit surprised the quantum algorithm only gives a polynomial speedup. [1] https://en.wikipedia.org/wiki/Observable_universe#Matter_con...
2^256 = (2^10)^25.6 = 1024^25.6
These number seem very close.