« ALEA Home | Email msg. | Reply to msg. | Post new | Board info. Previous | Home | Next

Re: Software security

By: 4321 in ALEA | Recommend this post (0)
Fri, 12 Jul 13 3:18 AM | 31 view(s)
Boardmark this board | The Trust Matrix
Msg. 14003 of 54959
(This msg. is a reply to 14002 by Cactus Flower)

Jump:
Jump to board:
Jump to msg. #

Alea,

It's not about back doors although I'm sure that capability exists in some technology.

With the TPM is about the keys for the encryption and where they are stored.

If they are stored on the device in software they are easily hackable. If they are in a TPM CHIP it takes more effort. If they are held in a HSM they are really difficult to get at but not impossible.

The best system is to have the encryption keys never reside on the device.

Even with that I'm sure there is a way that the brightest of the bright will find a way.

Raise the bar and make it so the crook does not just walk right through the front door.

That's what the industry is doing and look at the new business models being created, some quickly and some not so quickly.


- - - - -
View Replies (1) »



» You can also:
- - - - -
The above is a reply to the following message:
Re: Software security
By: Cactus Flower
in ALEA
Fri, 12 Jul 13 3:07 AM
Msg. 14002 of 54959

Hi 4321,

When this thing started out, MS and everyone else assured the world there are no back doors in the system.

Now, of course, it turns out MS is the US government's tool for back door entry.

If every sovereign can have access to the system via some remote server, then the system itself isn't viable.

If it cannot protect corporate and national secrets from the US and China, why bother moving stuff into it?

The only way to create a workable commercial system is to make it actually secure in a network setting. At least secure unless it is physically stolen.

Most folks don't want the NSA spying on them. Thank you, Mr Snowden.


« ALEA Home | Email msg. | Reply to msg. | Post new | Board info. Previous | Home | Next