|
|
|
| Authored by: Anonymous on Sunday, April 14 2013 @ 01:25 PM EDT |
Tails: Boot from CD, do stuff, and never go back to that particular location.
Great idea, but doesn't go far enough.
Problem:
Suppose I am the FBI, and there have been an awful lot of "commiest
manifestos" coming out of San Francisco cybercafes authored by "Marx
and Lenin" (Groucho and John, that is). Amnesia is a function of being
able to trust the underlying hardware, so a new BIOS gets flashed in with a
keylogger in the BIOS, in the form of a small VM that catches the hardware reads
that return the scan codes.
Now, a record of everything gets made and sent to the FBI. Groucho and John are
now legal toast.
The paranoid vision I have is more along the lines of Android: I just
downloaded this strange program that claims it does X, and I want to be sure
that it contains no "easter eggs" or virus-type attachments. Further,
if there are, I want to be the "man in the middle", telling the
program random lies when it gathers info it should not have access to, and
intercepting its outbound communications.
Building from source doesn't do it, because there's a few million more lines of
source code than I can inspect.
Taking the Android idea further (it's the program and/or device drivers I don't
trust, not the end-user) is the route I want to take.
(Christenson)[ Reply to This | Parent | # ]
|
|
|
|
|
