Live data from Hacker News

Hardware Attestation as Monopoly Enabler

grapheneos.social

331–340 of 799 posts

Re: Hardware Attestation as Monopoly Enabler

#331

Earlier quoted context omitted.

Friendly advice: please don't capitalize random common nouns like the president does. It's a marker of one's affinity toward precision (among other things).

What does 'marker of affinity toward precision' mean?

indicator of being detail oriented

Re: Hardware Attestation as Monopoly Enabler

#332
post #300

Earlier quoted context omitted.

Yes, comrade, those newsletters should be disposed because of evil foreign pяopoganda

I'm zorry, have you slept through brexit, january 6th, racist anti immigration campaigns and torture prisons? Are you just not paying attention to the dissolution of democracy or are youjust like, cool with money being the only protected thing.

What? What does it have to do with mandatory hardware attestation? You just built your strawman by tying the two with 0 proof that they are related. You can argue for any measure and then say that it's somehow to save us from some bad event, it doesn't make it true. The patriot act was a reaction to 9/11. It doesn't make that reaction valid.

Re: Hardware Attestation as Monopoly Enabler

#333
post #260

Earlier quoted context omitted.

My introduction to asymmetric cryptography had to do with protecting myself from the authorities while buying drugs on the internet. One of its first applications anywhere was protecting anti nuclear protestors from government provocateurs. We could prevent so much fraud of we could only convince the credit card companies to start using it (instead of printing a symmetric secret on the outside of the card). It's pred…

My point is that as far as I understand (not a cryptography expert) once you have the mathematical concept of asymmetric cryptography you also have the mathematical concept of a certificate, so you can't have one without the other.

Well, it goes one way, so yeah you can't have a mathematically verifiable certificate without asymmetric key-pair cryptography.

It's just that there's nothing pro-authority about making it easy for people to verify: "this data hasn't changed since the signer signed it." It's a neutral capability.

There are cases where we can and should blame technologists for building antisocial things that shouldn't exist, but I think that cryptography for the most part falls on the pro-social side of that spectrum.

Re: Hardware Attestation as Monopoly Enabler

#334

It's so obvious to me states need to create a soul bound identity system, replace social security numbers with it, and then let everyone else use cryptography on top of that (which is now cheap when you don't care about sybil attacks) to do private stuff.

We also need liability. Every time someone’s data is lost, the company losing it must be held accountable. They owe us huge amounts of money, and executives + board members should be jailed. No free pass. Let’s see then if they really want to collect all our information all the time. Right now, they take it and handle it irresponsibly because they’re free from consequences.

The dependency tree for anything in the software world is so large, that liability like you describe is not feasible. Tomorrow Anthropic's latest model will find a RCE in SYNs being sent to a server? Who is "liable" when you lose your Google account, your bank account, access to your car and all ways to prove to the government you are who you are all at the same time?

Re: Hardware Attestation as Monopoly Enabler

#335

Earlier quoted context omitted.

> having a digital ID wallet, that this needs hardware attestation (or something comparable) is somewhat of a direct consequence of existing laws/regulations regarding making IDs forgery safe How do you figure? Isn't just having the digital ID be signed by a key belonging to the issuer good enough for that?

I think they are saying the signed ID can be copied to another device. Unless such ID needs to have acces to some TPM that can be trusted, which likely requires then specific trusted hardware and software

> I think they are saying the signed ID can be copied to another device.

But that's not what a forgery is.

Re: Hardware Attestation as Monopoly Enabler

#336
post #207

Earlier quoted context omitted.

Totally with you until you brought in AI, a completely centralized and proprietary tool.

Especially considering AI bots are the whole reason google is pushing this new recaptcha.

"AI bots" are as stupid an argument as "think of the children". It's just a convenient distraction to restrict freedom and push their narrative.

Re: Hardware Attestation as Monopoly Enabler

#337
post #319

Earlier quoted context omitted.

you're being this pedantic about someone capitalizing "President"?

It’s not a proper noun, and this is HN: pedantry is par. “The president of Xyz” capitalizes the X in Xyz(pn) but not the P in president(n). However, the P in President(pn) is capitalized when it’s a Title suffixed to a Name - but that varies per country by what they title their president-equivalent locally and isn’t always translated, while the concept-slash-role label of ‘president’ in English generally does not (an…

President is a title here so Capitalization is correct use. That last one wasn’t. To be pedantic, we all know which one I was referring to.

Re: Hardware Attestation as Monopoly Enabler

#338
post #319

Earlier quoted context omitted.

you're being this pedantic about someone capitalizing "President"?

It’s not a proper noun, and this is HN: pedantry is par. “The president of Xyz” capitalizes the X in Xyz(pn) but not the P in president(n). However, the P in President(pn) is capitalized when it’s a Title suffixed to a Name - but that varies per country by what they title their president-equivalent locally and isn’t always translated, while the concept-slash-role label of ‘president’ in English generally does not (an…

> It’s not a proper noun

The President, within this context, identifies a single entity. As such, it is a proper noun.

Analogy: there are many continents. But if we're discussing Brexit, the Continent is a proper noun. I don't think it's incorrect to not capitalise. But it's certainly gramatically okay, and not in the same bucket as The Nutters who capitalise Random words it Looks like Legalese.

Re: Hardware Attestation as Monopoly Enabler

#339

Earlier quoted context omitted.

It’s not a proper noun, and this is HN: pedantry is par. “The president of Xyz” capitalizes the X in Xyz(pn) but not the P in president(n). However, the P in President(pn) is capitalized when it’s a Title suffixed to a Name - but that varies per country by what they title their president-equivalent locally and isn’t always translated, while the concept-slash-role label of ‘president’ in English generally does not (an…

> It’s not a proper noun The President, within this context, identifies a single entity. As such, it is a proper noun. Analogy: there are many continents. But if we're discussing Brexit, the Continent is a proper noun. I don't think it's in correct to not capitalise. But it's certainly gramatically okay, and not in the same bucket as The Nutters who capitalise Random words it Looks like Legalese.

> The President, within this context, identifies a single entity. As such, it is a proper noun

Yeah, no. You're just making things up to suit your position like the president does.

Re: Hardware Attestation as Monopoly Enabler

#340
The linked article only seems to cover Google and Android devices. Microsoft also have their take on this.

> "Microsoft Pluton security processor is a chip-to-cloud security technology built with Zero Trust principles at the core. Microsoft Pluton provides hardware-based root of trust, secure identity, secure attestation, and cryptographic services."

https://learn.microsoft.com/en-us/windows/security/hardware-...

Post reply on HN