Re:The Windows installer of ImageMagick will no longer be si...
by mike_hearn on Tuesday October 31, 2023 @05:54AM
(#38082377)
So you're going to find these people anonymously, now? How? You'll have to ask a lot of people before someone agrees to actually set up a fake company for you, you'll also have to find ways to pay them without losing your anonymity, and they will have to explain at some point to the tax authority where this unexpected income came from and what the company they've set up actually does.
If it was that easy to hide your tracks police would never catch criminals, but they do. Every time you increase the complexity of the scheme the chance for mistakes goes up.
> that type of consumer hardware has been consistently riddled with vulnerabilities
USB signing devices aren't really consumer hardware, are they? I don't recall vulns in HSMs being a major source of leaks previously, but I'm sure the game will move there sooner or later.
> Intel essentially gave up on SGX because they couldn't make it work
Intel are selling SGX today, have built new features on top of it, it works fine and all their competitors have been investing heavily into catching up.
But they don't know who you are, because you're a scammer who is lying to everyone including them.
> Also, there are a lot of laws you can end up breaking with severe penalties in the course of trying to hide your identity for company registration purposes (it enters the world of anti-money laundering).
So is credit card fraud or CFAA violations, which is the thing this is ostensibly to prevent. Criminals don't follow laws.
> It's harder than it sounds, which is why malware authors prefer to steal keys than set up fake companies. Hence the new hardware requirements.
It's not actually that hard, it's just that stealing keys is really easy. And it's not obvious that the new hardware requirements are going to do any good, because that type of consumer hardware has been consistently riddled with vulnerabilities -- Intel essentially gave up on SGX because they couldn't make it work.