Has anyone ever established or tried building trust model with any of these producers? It's rather hard to invent that wheel. I've heard that setting up a foundry is quite a bit of work. And in today's environment it is a significant advantage to produce community vetted hardware. So we might be able to get a solid business model behind this. On 6/17/2015 3:27 AM, grarpamp wrote:
On Wed, Jun 17, 2015 at 12:25 AM, Troy Benjegerdes <hozer@hozed.org> wrote:
PCB layout of the server(s) that got hacked. The gate counts in the chips moots the PCB.
'IP' and such ... because there will be more than just me talking about why we need full-disclosure hardware that you can X-ray and compare to an image signed and hosted by multiple independent and competing nation-state or multinational-corporate level security agencies. ... If your Intel motherboard matches the image signed by IBM, Private xraying to validate an individual chip is fine, but does nothing for everyone else. If you already have and are validating the [somehow open] image, you might as well open-source and open-up the entire fab. That way you know everything rolling off the line is good. While you may trust the chip to image in your hand, do you trust Intel, Huawei, Qualcomm, TSMC?