News for hackers. Stuff that matters.

A comment on Ask HN: I’m an FCC Commissioner proposing regulation of IoT security updates. Parent comment

Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by Xelynega on Tuesday September 05, 2023 @02:27PM (#37395789)
As I understand that's not what's being proposed. The "keys" in this case would decrypt the encrypted source code that's available in a public repository, and there's some logical mechanism(and actual use for smart contracts) that would key the key in escrow until certain conditions are met(company doesn't renew, goes out of business, etc.) After which it will be publicly released so anyone can decrypt the already available encrypted source code
[ Parent | on HN ]
Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by kristianbrigman on Tuesday September 05, 2023 @03:43PM (#37396777)
And what happens if the server holding the keys gets compromised? I guess most manufacturers won’t care, but the more reputable ones would have things in their source they consider proprietary and would definitely not want to have to submit it.

Verification that it is, in fact, the actual shipped source might not be trivial either.

[ Parent | on HN ]
Re:Ask HN: I’m an FCC Commissioner proposing regulation of I... by bick_nyers on Tuesday September 05, 2023 @10:49PM (#37400818)
What happens when someone hacks GitHub and gains access to private repositories? That slim possibility doesn't stop the vast majority of companies from hosting their source in a private repo.
[ Parent | on HN ]