Re:How I got a Root Shell on a Credit Card Terminal
by pabs3 on Sunday June 01, 2025 @06:06PM
(#44154088)
Have you considered using dm-verity instead of signed binaries?
[ Parent
| on HN ]
Re:How I got a Root Shell on a Credit Card Terminal
by lelanthran on Monday June 02, 2025 @08:26AM
(#44158114)
> Have you considered using dm-verity instead of signed binaries?
Why? I don't see any benefits.
In any case, the developers don't get a say in what is used to secure the terminal. The manufacturer decides that, then they get the hardware+firmware certified.
The terminals the developers get are already certified and locked down.