points by dingaling911 3 days ago | 0 comments
If you assume the machine will be compromised, is there any way around this?
[–] basilikum 3 days ago
[–] nvme0n1p1 3 days ago
Yep, physical access = game over. A tale as old as time. It doesn't matter who etched the silicon.
[–] dingaling911 3 days ago
Telegram supposedly gets around this by distributing keys over various regions.
But surely intel services are smart enough to get people in there illegally.
[–] mahemm 3 days ago
90% of Telegram chats live in cleartext on their servers; no one would need to go to those lengths to get chat data from them.
[–] rednb 3 days ago
Telegram chats not being end-to-end crypted are encrypted at rest on their servers. In this case telegram definitely controls the encryption keys but distributes them across jurisdictions to mitigate some risks.
[–] ecshafer 3 days ago
There's also no way around a $5 wrench, but you'd be hard pressed to find that wrench for $5.
Hardware security used to be a joke. Now verified boot, encrypted RAM, key storage in hardware security models and hardware and OS attestation are getting somewhere.
But if you're important enough of a target to a state actor they will magically have some workaround. For your average raid on your home they might actually work depending on the specific setup.
For really high threat models you want zero trust models with E2EE as well as staying anonymous so no one knows where the hardware (and the people which might be much more vulnerable) are located. Tor exists for a reason.