I don’t have ultimate trust in any software or hardware, but I get to “good enough” by deciding …
I don’t have ultimate trust in any software or hardware, but I get to “good enough” by deciding which providers I trust: * Software: Canonical, Google, Microsoft, Valve, Oracle, Dropbox. I install software from their official repos. Anything 3rd-party/unofficial/experimental/GitHub goes in a VM. * Hardware: I built my main PC from mainstream commodity components. I have no way of knowing if there are secret backdoors but I consider it unlikely. I’m also privileged enough to not be a “person of interest” so don’t feel the need to take any extraordinary precautions. Yes, I’m aware of VM escapes. Yes, I’ve read Reflections on Trusting Trust. I choose to trust regardless because life’s too short for paranoia. As Frank Drebin said: “You take a chance getting up in the morning, crossing the street, or sticking your face in a fan.”
Original discussionAsk HN: How do you trust that your personal machine is not compromised?448 source comments · at import