If you assume the machine will be compromised, is there any way around this?

basilikum an hour ago | parent | next [-]

Confidential computing and hardware security are starting to be an actual thing now. They are mostly used for DRM and I would not trust them when your adversary is three letters long.

Hardware security used to be a joke. Now verified boot, encrypted RAM, key storage in hardware security models and hardware and OS attestation are getting somewhere.

But if you're important enough of a target to a state actor they will magically have some workaround. For your average raid on your home they might actually work depending on the specific setup.

For really high threat models you want zero trust models with E2EE as well as staying anonymous so no one knows where the hardware (and the people which might be much more vulnerable) are located. Tor exists for a reason.

▲

nvme0n1p1 8 hours ago | parent | prev | next [-]

Yep, physical access = game over. A tale as old as time. It doesn't matter who etched the silicon.

▲

dingaling911 8 hours ago | parent [-]

Telegram supposedly gets around this by distributing keys over various regions.

But surely intel services are smart enough to get people in there illegally.

▲

mahemm 7 hours ago | parent [-]

90% of Telegram chats live in cleartext on their servers; no one would need to go to those lengths to get chat data from them.

	▲	rednb 4 hours ago \| parent [-]
		Telegram chats not being end-to-end crypted are encrypted at rest on their servers. In this case telegram definitely controls the encryption keys but distributes them across jurisdictions to mitigate some risks.

▲

ecshafer 6 hours ago | parent | prev [-]

There's also no way around a $5 wrench, but you'd be hard pressed to find that wrench for $5.