On Wed, Mar 08, 2017 at 11:42:25PM +1100, Russell Coker wrote:
> If they gain physical access to your system they can mess with you in other 
> ways, like sniffing the hardware on your keyboard.
> 
> I think that for everyone here, if the CIA becomes so interested in you that 
> they want to do an EFI based attack you have bigger problems than you can 
> deal 
> with.  Making your system resistant to a low-priority drive-by attack or a 
> widespread malware attack is a reasonable goal.  Being resistant to a full-
> scale CIA attack isn't something you can expect to succeed in, at least not 
> if 
> you want to keep using computers in anything like a normal way.
> 
> Any organisation that can make people disappear is not one that you can fight 
> head on.
> 
> One thing that works in our favor is that 0day attacks are very valuable.  
> Every time a 0day is used there is a risk of it being discovered and fixed.  
> I 
> expect that no-one here is important enough that the CIA would risk losing a 
> 0day on them.
> 
> Making your PC resistant to a full scale CIA attack is like making your home 
> resistant to a tank attack.  But it's probably more difficult to do.

I don't plan to make my system resistant to a full-scale CIA attack, but I do
like having a BIOS that isn't a complete and buggy operating system in itself.
I think reducing the attack surface is always a worthy goal.

> http://laforge.gnumonks.org/blog/20160920-openmoko_10years/
> 
> This is worth reading.

Yeah, the state of things is really bad. I did the initial port of Replicant 6
to the i9100 last year, so I'm running that on my phone. It works well enough
but I still use the compromised wi-fi blobs out of convenience. It's such a
headache that at this point I'm considering avoiding using a phone for things
other than calls and messages.

Jookia.
_______________________________________________
Free-software-melb mailing list
[email protected]
http://lists.softwarefreedom.com.au/cgi-bin/mailman/listinfo/free-software-melb


Free Software Melbourne home page: http://www.freesoftware.asn.au/melb/

Reply via email to