Post #2093647
2026-04-23 18:57 UTC
The difficulty of black box over white box is the reason obscurity has benefits...
> only using my own code
You're going to write your kernel and bootloader as well? Drivers for the hardware? And a compiler for those? And an assembler to build that bootstrap compiler? Build the CPU? The second any of these are "out of your control" you lose "absolute security". The reason people say there is no "absolute security" is that it is not a useful concept to even consider. Since you have to approach it theoretically, you can easily end up stuck at the fact that every computation changes the state of the world and thus every computation can in some way be measured. It's a useless endeavor even if it were theoretically possible because it leads you to absurd solutions against absurdly powerful attackers. You want security in a well defined threat model not some "absolute".
Air gapping isn't sufficient to prevent communication either. For example there are functional TCP stacks working over audio. [Silence on the Wire](https://nostarch.com/silence.htm) is quite old at this point, but also explores esoteric exfiltration methods.
Replies (0)
No replies.