Hacker News new | ask | show | jobs
by mikhailt 3401 days ago
> Your entire argument amounts to: Trust Apple and nobody else. What makes you think that's a good idea?

I don't trust anyone, but I only want Apple to hold the keys, not all random repair stores. It is a FAR worse idea to force Apple to provide security bypasses.

If security bypasses can be provided securely as LONG as you authorize it on the spot, then heck yes, force Apple to do this. But if they cannot, then nope, they shouldn't be forced.

> Exactly. That's why it's even more important that we be able to repair it ourselves.

I don't think we're disagreeing here, I'm totally on your side that we should be able to repair everything ourselves but I cannot agree with forcing companies to provide security bypasses in a manner that may be done without your knowledge.

> There are no absolute rights. There are laws. I trust myself more than Apple and I don't think there's much you can say to convince me otherwise.

You are correct, I phrased it wrong since there is a clear technical definition of what absolute right means.

I didn't say you shouldn't have the right to repair everything yourself. I'm totally on this but I disagree again on the security components, you should be able to replace it as long as it can be securely does and with information that only you know. Forcing Apple to provide this to repair shops without explicit controls over it, is a bad idea.

> Nope. I'd rather not, thanks! That's why we're going to get this law passed.

I've edited my post after that.

1 comments

> I don't trust anyone, but I only want Apple to hold the keys, not all random repair stores. It is a FAR worse idea to force Apple to provide security bypasses.

Each customer should hold a personalized key to his own hardware. Then the customer can decide whom he trusts, and give the key to whomever he wants (Apple, some other repair store, do it himself, ...)

The problem is that as long as somebody else holds the key to something you bought, you didn't buy it, you leased it. Or borrowed it. Somebody else can still control it to a greater degree than you yourself. And that somebody now has a monopoly he can use to force thing onto you. Like set prices for repair.

That shouldn't happen.

That's okay as well, the problem is, how do you do this correctly? You cannot store it in the cloud because that's a bad idea. Where else?

If you give someone a key to the device, how does the device itself enforce a time-limited key, especially if the crypto-based components are about to be replaced?