▲ | xmprt 5 days ago | ||||||||||||||||||||||||||||||||||
I agree with the parent commenter. I think it's fair to be concerned with backdoors but this is a distributed file system which can be completely isolated from the outside world. If you're so worried, you could run it in an airgapped Faraday cage and do all your training in that environment. Just don't run it on any centrifuges. I think these kinds of concerns are more valid for storage systems which serve online traffic or have some kind of connection to the outside world. | |||||||||||||||||||||||||||||||||||
▲ | antonvs 3 days ago | parent | next [-] | ||||||||||||||||||||||||||||||||||
Attackers, whether state-level, corporate, or criminal, all rely on ignorance like this. It also probably involves denial: you want to believe your systems are safe, so you delude yourself into thinking that minimal protections are sufficient. I wrote a longer comment about this here: https://news.ycombinator.com/item?id=43745423 | |||||||||||||||||||||||||||||||||||
▲ | xpe 5 days ago | parent | prev [-] | ||||||||||||||||||||||||||||||||||
> If you're so worried, you could run it in an airgapped Faraday cage and do all your training in that environment. Just don't run it on any centrifuges. Really? More rhetoric that minimizes legitimate security concerns? Again, if someone wants to make the claim that such concerns are "low probability" that would at least be defensible. | |||||||||||||||||||||||||||||||||||
|