Thread

Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug

220 points · 92 comments · synack

Fred27 · 1789752685 · focus · HN ↗
There's always an XKCD... <a href="https://xkcd.com/538/" rel="nofollow">https://xkcd.com/538/
1. orbital-decay · 1789754205 · focus · HN ↗
  It needs to be updated. Modern evil planners don't even need a wrench since they already have most keys given to them in advance by everyone, including nerds
  1. junon · 1789756355 · focus · HN ↗
    Care to expand?
    mitxela · 1789776684 · focus · HN ↗
    Ever put your password into a website that used cloudflare? Ever registered an account with Gmail? Ever had an Android or iOS phone?
    bigiain · 1789785407 · focus · HN ↗
    That's cynical, but without doubt true for some people.
    I wouldn't want to be someone the NSA is "interested in".
    I wouldn't even want to be someone that a customer of NSO Group is interested in. (Just ask Jamal Kashoggi's family or friends)
    Hell, where I live they're about to give cops powers to let then hack your phone with a Cellebrite UFED at roadside stops. And it's not even just cops, fisheries enforcement officers Australia have been using UFEDs at least as far back as 2017 during illegal fishing investigations.
    If you're doing things that might make someone rich or powerful enough unhappy, or someone in law enforcement - you pretty much need to stop using the internet. And the bar for "how powerful" your potential threat is keeps dropping lower and lower. Just look at all the stories about local cops abusing Flock cameras to stalk ex girlfriend or people critical of them, how could anyone possibly believe those same sort of cops aren't going to use roadside phone forced data extraction tools in exactly the same petty and personal ways, and with exactly the same lack of oversight and consequences?
    mitxela · 1789785492 · focus · HN ↗
    FWIW, GrapheneOS is the only usable phone OS that is legal and Cellebrite can't hack. That's why law enforcement are so horny to ban it.
    bigiain · 1789787206 · focus · HN ↗
    It's a pity GrapheneOS is allowing AI code contributions...
    mitxela · 1789822932 · focus · HN ↗
    Weird hill to die on. My understanding is they refused to 100% ban it just because it's AI, but quality standards still apply so there won't be much.
    We need to differentiate "no AI because it's slop" and "no AI because fuck Sam Altman". The latter is never going to be practical because you won't reject a good change just because fuck Sam Altman. And the former is irrelevant because you wouldn't accept human slop either. A policy of "AI is probably slop, please don't carelessly submit any and we will ban you for submitting slop" makes sense and is what Graphene has. A policy of "fuck Sam Altman, we ban you if we think you're giving him money" does not make sense if you prioritize working software above ideology.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.