News for hackers. Stuff that matters.

A comment on BeagleV-Ahead open-source RISC-V single board computer. Parent comment

Re:BeagleV-Ahead open-source RISC-V single board computer by ori_b on Sunday October 15, 2023 @02:30PM (#37892115)
I think the requirement here is that the owner of the user account needs to be able to register their own attestation keys. The owner of the account may be an employer or an end user.

It must not be a hardware manufacturer.

[ Parent | on HN ]
Re:BeagleV-Ahead open-source RISC-V single board computer by loup-vaillant on Sunday October 15, 2023 @03:13PM (#37892497)
Yes, that I can support.
[ Parent | on HN ]
Re:BeagleV-Ahead open-source RISC-V single board computer by ori_b on Sunday October 15, 2023 @03:17PM (#37892535)
Note, this makes the system more secure, because the manufacturer is no longer a single point of failure, and a compromised key can be rotated by the account owner.
[ Parent | on HN ]
Re:BeagleV-Ahead open-source RISC-V single board computer by thinkerswell on Monday October 16, 2023 @11:12AM (#37900923)
As long as the system is fully auditable and open source, I’d be happy. Having the keys be external is a big plus, assuming that is fully auditable as well. Having no “management engine” is a big plus too.
[ Parent | on HN ]