221–224 of 224 posts
Earlier quoted context omitted.
> how do you check that the fab didn't tamper with your ICs Same goes for deployable software. How do you know that that program is compiled from that source?
That's quite easy actually: with reproducible builds, hashes and signatures. None of this is possible or easy to do in the hardware world.
Anecdote. I swore off spinning disks for my PC years ago, but I've been a bit cheap and recently got fed up with my 500GB "storage" drive always being near full and my work VM as well :/ So I finally went onto Google to look into storage and was absolutely, postively, shocked that I somehow missed the whole m.2 nvme surge. So much so that I got a 1TB 970 EVO for just $170. Nearly 500k random IOPS with qd32, and 3.5GB…
Remember that motherboard RAID isn't RAID if your motherboard dies. You might as well do software RAID.
Edit: Oh right, probably TRIM problems.
Earlier quoted context omitted.
>producing at near zero margin :)) https://ycharts.com/companies/STX/gross_profit_margin SSDs are unsuitable for long term storage, technology is simply incapable (cells losing charge, normal usage physically degrading medium, limited number or charges per cell). We dont have anything better than spinning magnetic medium at the moment, and nothing viable on the horizon.
Then we don’t have anything at all. Hard drives are only acceptable at long term storage if they’re unplugged, and even then there is a significant risk that the data won’t be accessible in 50 years. If 5 years is considered long term, then SSDs are acceptable. If 20 years is considered long term, well, make sure you have a robust RAID.
Earlier quoted context omitted.
That's quite easy actually: with reproducible builds, hashes and signatures. None of this is possible or easy to do in the hardware world.
Suppose you have the source code for gmail: how do you know that what you're interacting with when you're on gmail.com is compiled from that?
Otherwise (android app? Browser js/html/css?) you separately compile gmail. Assuming the build is reproductible, you can check that its hash corresponds to what was sent to you.