News for hackers. Stuff that matters.

A comment on Yubico: Secure Hardware vs. Open Source. Parent comment

Re:Yubico: Secure Hardware vs. Open Source by davideous on Tuesday May 17, 2016 @12:10AM (#11711302)
Yes, it would technically meet the Open Source Initiative's definition (https://opensource.org/osd), but if there was no way to re-flash the device, no way to verify the binary on the device, or possibly even no way build a binary (which may require proprietary tools under NDA from the chip manufacturer) -- I think a lot of critics would still be critics, but I could be wrong.

If Yubico did this it would be very interesting to see the reaction.

[ Parent | on HN ]
Re:Yubico: Secure Hardware vs. Open Source by jevinskie on Tuesday May 17, 2016 @01:28AM (#11711508)
It would allow a third party to discover a vulnerability similar to the one in the Neo just by just reading the code.
[ Parent | on HN ]
Re:Yubico: Secure Hardware vs. Open Source by mavhc on Tuesday May 17, 2016 @01:49AM (#11711564)
The general issue is when all hardware has software in, in the end it has to be open source. Going even further: The distinction between hardware, firmware, and software is logically irrelevant in terms of trust.
[ Parent | on HN ]