Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Assume your devices are compromised

go350.com

Post reply on HN
Print view View original

71–80 of 197 posts

Re: Assume your devices are compromised

#71

Post by aeternum »

pontifier wrote: post #66

I contemplated building an airgapped secret machine that could only communicate data with outside machines via qr codes and a webcam. The main reason to do this isn't that the airgapped computer isn't compromised, but that even if it is, I could monitor all data moving in and out of it. Even a USB drive passed back and forth could secretly transfer data I don't know about. Secret data is so small compared to the size…

Air-gapping really does seem like the only option for true security. It also makes it quite difficult to do anything of use with the machine. Since you can't control the supply-chain you should assume that the air-gapped machine is malicious/compromised and the only protection you have is the air-gap.

Thus any USB used to transfer data/software to the air-gapped machine should be destroyed immediately afterwards and you should probably use something like pen & paper as your only allowed output method.

Re: Assume your devices are compromised

#73

Post by hedora »

Hackbraten wrote: post #68
eternityforest wrote: post #60

Earlier quoted context omitted.

Or, just don't install viruses. On Linux I'm sure some AppArmor or flatpak whatever will be the norm one day, once all the kinks are worked out... but for now it seems to work surprisingly well to just not install stuff that isn't popular and trusted.

Maintainers of popular, trusted projects can get compromised. Hackers steal their publishing tokens and then publish a new, malicious version.

When did this last happen with Debian or Ubuntu? (which actively vet contributors, at least compared to pip and npm)

Re: Assume your devices are compromised

#74

Post by hanniabu »

CamelRocketFish wrote: post #45
chrisweekly wrote: post #40

Earlier quoted context omitted.

I wrote mine down and put it in an envelope containing a few other secrets in a small fire-resistant, waterproof safe which my wife knows how to open.

Which safe did you get?

Fire safes are so shitty you'd probably be better off buying a small one to keep your documents/backups in and then a larger one to put that safe in for double insulation.

Re: Assume your devices are compromised

#75

Post by hanniabu »

CamelRocketFish wrote: post #46
philjohn wrote: post #31

Earlier quoted context omitted.

Not for, eg, lastpass. Your master password is the key that decrypts your password vault. Some sort of escrow would be good, that unlocks a document with access instructions upon receipt of a valid death certificate.

Yes but lastpass contains your password to something like your bank account. You don’t need your password for your bank account if you have a death certificate is what the poster is saying.

It can contain passwords to much more and other information

Re: Assume your devices are compromised

#76

Post by hanniabu »

Hackbraten wrote: post #68
eternityforest wrote: post #60

Earlier quoted context omitted.

Or, just don't install viruses. On Linux I'm sure some AppArmor or flatpak whatever will be the norm one day, once all the kinks are worked out... but for now it seems to work surprisingly well to just not install stuff that isn't popular and trusted.

Maintainers of popular, trusted projects can get compromised. Hackers steal their publishing tokens and then publish a new, malicious version.

That's why I never update anything taps brain

Re: Assume your devices are compromised

#77

Post by hanniabu »

aeternum wrote: post #71
pontifier wrote: post #66

I contemplated building an airgapped secret machine that could only communicate data with outside machines via qr codes and a webcam. The main reason to do this isn't that the airgapped computer isn't compromised, but that even if it is, I could monitor all data moving in and out of it. Even a USB drive passed back and forth could secretly transfer data I don't know about. Secret data is so small compared to the size…

Air-gapping really does seem like the only option for true security. It also makes it quite difficult to do anything of use with the machine. Since you can't control the supply-chain you should assume that the air-gapped machine is malicious/compromised and the only protection you have is the air-gap. Thus any USB used to transfer data/software to the air-gapped machine should be destroyed immediately afterwards and…

> use something like pen & paper

Stainless steel and stamp/engraver

Re: Assume your devices are compromised

#78

Post by hedora »

aeternum wrote: post #71
pontifier wrote: post #66

I contemplated building an airgapped secret machine that could only communicate data with outside machines via qr codes and a webcam. The main reason to do this isn't that the airgapped computer isn't compromised, but that even if it is, I could monitor all data moving in and out of it. Even a USB drive passed back and forth could secretly transfer data I don't know about. Secret data is so small compared to the size…

Air-gapping really does seem like the only option for true security. It also makes it quite difficult to do anything of use with the machine. Since you can't control the supply-chain you should assume that the air-gapped machine is malicious/compromised and the only protection you have is the air-gap. Thus any USB used to transfer data/software to the air-gapped machine should be destroyed immediately afterwards and…

Air gapping doesn't really work these days. It could make noises (even with capacitors) to transmit data, or cause voltage fluctuations that something else could read.

I can imagine bootstrapping a system with trusted hardware (assuming you could get it) by typing in a bootloader + SHA implementation by hand, then using a narrow hardware interface to copy a trustworthy, audited operating system kernel (assuming that also existed) from some other host. The bootloader could check the SHA of that, and then bootstrap the system.

Re: Assume your devices are compromised

#79

Post by hedora »

vorpalhex wrote: post #17

I struggle a lot with this. Secure isn't a binary state, it's a spectrum. At the same time, what is my risk model? Are my NSFW activities THAT interesting? What about my personal notes that contain health details? I keep an inventory of stuff in my home. Is that ok to keep in Dropbox? Sure the government can access it.. but even if a remote attacker does, is that useful to them? And of course, as things get more secu…

So, the question is why current systems are architected to make an unnecessary tradeoff between privacy/security and convenience, and then how to make something that's competitive with current systems, and doesn't make that tradeoff.
Post reply on HN