HackerTube / Video
36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware
media.ccc.de
A 36C3 talk by Bunnie Huang arguing that open source is necessary but not sufficient for trustworthy hardware, because verifying hardware is destructive and so creates a time-of-check/time-of-use gap. It surveys supply chain security and classes of hardware attacks, and presents the Betrusted approach to narrowing that gap.
HN commenters point to it whenever the question is how far hardware can be trusted, including FPGAs, supply chain attacks and firmware TPMs.
4 Hacker News mentions · 2020–2023