Hacker News

points by hikemu 10 hours ago | 0 comments

The NSA being able to see what you can do, is not an acceptable trade off.

I agree however having a fully secure stack that you can fully audit is very challenging. I guess you could get pretty far with MIPS but even then you would have to trust the NIC/WLAN and motherboard.

So to a certain degree we're always compromising. Cloudflare is compromising a lot.

[–] greenchair 8 hours ago

to you

[–] sam345 8 hours ago

The NSA? Buying from AliExpress. I would expect the CCP.

[–] jasomill 7 hours ago

I believe they were referring to Cloudflare, not the hardware.

But yes, if nation states are part of your threat model, the safest practical way to acquire hardware is probably brick-and-mortar retail, and only after installing a sophisticated home security system, also acquired at retail, and thoroughly sweeping your house for existing bugs once it's installed.