>To be fair you have the burden of proof by asserting "computers connected to the internet can not be secured."
How so?
In fact, competent InfoSec folks will tell you that you should assume that "if you connect a device to the Internet, eventually it will be compromised."
That's not to say a device will be compromised, but making such an assumption, given the history of Internet connected devices is an eminently reasonable one.
I've yet to see any formal proof that computers connected to the Internet can be secured.
If you have, please link a reference. I'd love to see it.
>The burden of proof is on the claimant, not the defendant. I believe that's the point parent was addressing.
Absolutely. I was pointing out that in this specific case (whether or not devices connected to the internet can be secured), the converse is also true.
If you read that article you'll see that current approaches don't even attempt some kinds of proofs such as proof of security against side channel attacks. It goes by other names as well such as proof of code correctness:
A major problem with current attempts at proofs is you can at best create a proof based on a system specification and what you want it to be secure against, which basically means you have to already know all possible attacks including zero day attacks. So far the field has resulted in nothing practically useful as far as I know. Homomorphic encryption might be close to being practical for a limited set of problems and could be provably secure for a limited set of attacks, though I don't know if anyone has attempted such a proof yet.
How so?
In fact, competent InfoSec folks will tell you that you should assume that "if you connect a device to the Internet, eventually it will be compromised."
That's not to say a device will be compromised, but making such an assumption, given the history of Internet connected devices is an eminently reasonable one.
I've yet to see any formal proof that computers connected to the Internet can be secured.
If you have, please link a reference. I'd love to see it.