Hacker News new | ask | show | jobs
by p-e-w 1092 days ago
Unless you are also building your entire hardware from scratch, including the CPU, and writing or auditing all firmware and device drivers, "zero trust" is a fantasy.

Zero trust means verifying everything. Not only has no living person verified the entire technology stack they are using, it is literally impossible to do so for any modern consumer device, since they all contain closed hardware and software that affects the trust model yet cannot be verified in any meaningful sense.
2 comments
News-Dog 1092 days ago
>"zero trust" is a fantasy. - Zero trust means verifying everything.

Not only has no living person verified the entire technology stack they are using,

it is literally impossible to do so for any modern consumer device..

Correct! - So the options are practice good privacy principles or totally disconnect and become a Hermit.

See; https://news.ycombinator.com/item?id=36387696

link
opportune 1092 days ago
Maybe that commenter didn’t know what zero-trust means. Zero-trust in practice just means continuing to authenticate from within your “perimeter”, ie, assume an employee or machine is already compromised.

If you need unbreakable encryption and security that even the NSA (or the various vendors it works with to find zero day exploits) can’t hack you need to get off the fucking internet

link