Post 1902382 by rysiek@mastodon.social
(DIR) More posts by rysiek@mastodon.social
(DIR) Post #170559 by kylerankin@mastodon.social
2018-09-24T17:28:17Z
0 likes, 1 repeats
The thing I am most excited about with the Librem Key is its integration with Heads to make detecting tampering easy. It's something that doesn't exist anywhere else and in this deep dive post I explain the technical details. #infosec https://puri.sm/posts/the-librem-key-makes-tamper-detection-easy/
(DIR) Post #1902382 by rysiek@mastodon.social
2018-09-25T08:22:19Z
0 likes, 0 repeats
@kylerankin this *is* exciting. How hard do you think would it be to integrate this with #QubesOS? Seems like a pretty natural fit.
(DIR) Post #1902383 by Wolf480pl@niu.moe
2018-09-25T13:12:29Z
0 likes, 0 repeats
@rysiek @kylerankin I think one attack which #heads doesn't prevent from, is stealing your laptop, and leaving behind a device that looks like your laptop, but instead is a thin client sending all inputs and outputs to your actual laptop laying untampered at the attackers HQ, where the attacker can MITM all your input and output.It's like the physical contact acts like DHE, but your authentication has no channel binding.
(DIR) Post #1902384 by rysiek@mastodon.social
2018-09-25T13:23:46Z
0 likes, 0 repeats
@Wolf480pl @kylerankin well if we can get the attackers to have to go through so many hoops, then I'd say we're really secure already.
(DIR) Post #1902385 by Wolf480pl@niu.moe
2018-09-25T13:24:18Z
0 likes, 0 repeats
@rysiek @kylerankin yeah, definitely.Still, I think it'd be fun to explore possibilities of securing against such an attack, too.
(DIR) Post #1902386 by wildermann@troet.cafe
2018-12-11T06:36:26Z
0 likes, 0 repeats
@Wolf480pljust... put a lot of different stickers on your laptop🤷‍♂️@rysiek @kylerankin