That wasn't my critique. What I wrote had nothing to do with China, or copying. Also nothing to do with govt backdoors in bios chips or routers.
I don't want to install some software that exfiltrates all my passwords. Just because some hardware backdoors may already exist, how on earth does that mean I should stop caring what software I give root access to?
A basic rule of security is that no system is 100% secure, not even if it's air gapped and 1km underground. Your job is not to say "well fuckit, let's download this shady software because nothing is safe anyway." It's to prevent opening any holes you can prevent opening, and do your diligence on anything you can mitigate, because stopping 99% of threats is better than stopping 98%. Or in this case, much better than straight up allowing unknown people to root your server.
noduerme · · focus · HN ↗
[dead]
233mhz · · focus · HN ↗
Meanwhile there is an american backdoor in your bios, cpu and router
noduerme · · focus · HN ↗
I don't want to install some software that exfiltrates all my passwords. Just because some hardware backdoors may already exist, how on earth does that mean I should stop caring what software I give root access to?
A basic rule of security is that no system is 100% secure, not even if it's air gapped and 1km underground. Your job is not to say "well fuckit, let's download this shady software because nothing is safe anyway." It's to prevent opening any holes you can prevent opening, and do your diligence on anything you can mitigate, because stopping 99% of threats is better than stopping 98%. Or in this case, much better than straight up allowing unknown people to root your server.