Show HN: Kryptonite – a new home for your SSH private key

Re:Show HN: Kryptonite – a new home for your SSH private key by Sir_Cmpwn on Tuesday May 02, 2017 @12:13PM (#14247650)

I trust Google, but I don't trust vendors. I expect vendors to make compromises left and right to deal with shitty hardware (oh, the radio doesn't work with this security feature enabled? Meh, we don't need it).

However, I'll admit that you seem more knowledgable than me on the subject, so I won't spout FUD if you say so.

[ Parent | on HN ]

Re:Show HN: Kryptonite – a new home for your SSH private key by tptacek on Tuesday May 02, 2017 @12:27PM (#14247806)

This is a valid concern for off-brand Android phones. Google's Android security team is on top of this stuff with their hardware vendors. Nobody in the industry does hardware security better right now than Apple. In neither case is the Boing Boing narrative of "bug on the baseband means you own the whole phone" true. I'm sure there's an Android phone on the market where it is true, but there are a lot of crappy Android phones.

For those of you playing along at home, it's this "there are a lot of crappy Android phones" thing that dominates our concerns about Android, and is the reason we recommend to laypeople (lawyers, reporters, NGOs) to get iPhones and avoid Android phones.

[ Parent | on HN ]