Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I read the proposal to be a way for sites to execute a hash function on my ram? It sounds like a security nightmare.


I'm not sure how you got that impression. Attestation doesn't require any sort of scans on your current memory content, only the hash of the code that was executed.

https://en.wikipedia.org/wiki/Trusted_Computing#Remote_attes...


And for us that do not run Harvard architecture computers?

https://en.m.wikipedia.org/wiki/Harvard_architecture


It could ensure that an employee laptop is not infected when connecting to the intranet which could prevent customer data leakage which would be a benefit for all of us.


It would not ensure the laptop is not infected.

It would only ensure that the laptop user does not run software that is not approved by Google or similar, a DRM, as Trojans will continue to find ways to disguise themselves and insert themselves into authorized processes.

The company would find difficult to run custom software not covered by such DRM. In time, the Web Environment Integrity API organisation would say that there are too many authorisation requests or similar and demand economic compensation from developers to be included in the authorized filter scans, at time the supposed initial objective is not accomplished, as this DRM does not ensure the laptop is not infected.


In was speaking in general about remote attestation, not about the Chrome only one.

A good example is Xbox, for which there is no known custom software, which in turn guarantees the lack of cheating software.


Such a scan would take like half an hour. You need to scan each unloaded executable. WEI won't be used for that. It will be used for blocking ad blockers and ensure Google's malware is active.

I am quite sure that the client programs need to be cooperating for the WEI to be practical.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: