linux-kernel - Re: [PATCH v5 00/21] EVM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 26 May 2011 12:30:07 -0700
From:	Casey Schaufler <casey@...aufler-ca.com>
To:	Pavel Machek <pavel@....cz>
CC:	David Safford <safford@...son.ibm.com>,
	Andrew Morton <akpm@...ux-foundation.org>,
	Mimi Zohar <zohar@...ux.vnet.ibm.com>,
	linux-security-module@...r.kernel.org,
	linux-kernel@...r.kernel.org, linux-fsdevel@...r.kernel.org,
	James Morris <jmorris@...ei.org>, Greg KH <greg@...ah.com>,
	Dmitry Kasatkin <dmitry.kasatkin@...ia.com>
Subject: Re: [PATCH v5 00/21] EVM

On 5/26/2011 11:38 AM, Pavel Machek wrote:
> On Thu 2011-05-26 14:11:54, David Safford wrote:
>> On Thu, 2011-05-26 at 09:34 -0700, Casey Schaufler wrote:
>>> On 5/25/2011 11:08 PM, Pavel Machek wrote:
>>>> ...
>>>> Fourthly, is it likely to find its way to the next cellphone I buy,
>>>> and will it prevent me from rooting it?
>>> That will of course depend on the phone vendor. You are certainly
>>> going to be able to vote with your checkbook (digital wallet?) but
>>> odds are pretty good that should EVM prove effective it will be
>>> ubiquitous within the next five years on embedded devices.
> Hmm. But maybe it is more effective to vote with NAKs, now? It does
> not seem to have any non-evil uses.
>
> Phone vendors will play nasty tricks on us, but... why make it easy
> for them?

For one thing, it is probable that in the not-too-distant future
the phone will not be yours. Many service providers are moving in
the direction of zero-cost phones. The subscriber will pay the
monthly charge and the phone (smart or dumb) will be included in
the package. The difference between that and what is available
today will be a teeny tiny paragraph in the contract that says
that the free phone remains the property of the service provider.
Most people will not notice the difference. Consider this a
nasty trick if you want to. I expect that the average consumer
will love it because they will be spending 5 dollars/euros/pounds
a month less. Service providers will love it because the upgrade
and control choice will be theirs.

There is nothing evil about maintaining the owner's control over
the device. The fact that the device is in a user's hand does
not transfer ownership to the user.

Welcome to computers in the 21st century.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/