The conversation

Lessons learnedExperience excerpt · English

I don’t have ultimate trust in any software or hardware, but I get to “good enough” by deciding …

I don’t have ultimate trust in any software or hardware, but I get to “good enough” by deciding which providers I trust: * Software: Canonical, Google, Microsoft, Valve, Oracle, Dropbox. I install software from their official repos. Anything 3rd-party/unofficial/experimental/GitHub goes in a VM. * Hardware: I built my main PC from mainstream commodity components. I have no way of knowing if there are secret backdoors but I consider it unlikely. I’m also privileged enough to not be a “person of interest” so don’t feel the need to take any extraordinary precautions. Yes, I’m aware of VM escapes. Yes, I’ve read Reflections on Trusting Trust. I choose to trust regardless because life’s too short for paranoia. As Frank Drebin said: “You take a chance getting up in the morning, crossing the street, or sticking your face in a fan.”

Original discussionAsk HN: How do you trust that your personal machine is not compromised?448 source comments · at import
2

What was this responding to?

Parent context · original excerpt

CO

"Compromised" meaning that malware hasn't been installed or that it's not being accessed by malicious third parties. This could be at the BIOS, firmware, OS, app or any other other level.

Full original

Community replies 0

No community replies yet. Add your perspective.

Replies from the source 2

Direct replies available in this import. Original-language excerpts.

RH

What about publicly known backdoors in your hardware? https://www.techrepublic.com/article/is-the-intel-management... There is hardware that doesn't contain those at least, but it doesn't break power records.

Full original
HU

"which providers I trust: * Software: Google, Microsoft" I trust that Google and Microsoft won't hack into my bank account and steal money, even though they could, but otherwise I assume they collect anything they want and can.

Full original
Continue on Hacker News

Respect different perspectives. Share concrete experiences.

Sign in to post, reply, repost, and quote.