beardedwizard
Joined 7 years ago
Joined 7 years ago
amen brother.
The second best part is either getting really good at patching every single thing, or playing the POA&M game.
We did an analysis across all the HSM hardware vendors and found, unsurprisingly in hindsight, that all of these hardware vendors had all the same awful security practices as every other enterprise hardware vendor, and each had vulnerabilities that leaked private key material.
The conclusion was that cloud providers fronting managed HSM had more to lose than the hardware vendors did, and would be more likely to patch and address these kinds of issues.
What surprised me was my own reaction, I thought for sure managing our own HSM hardware had to be a better guarantee over the key material, but like many things, it turned out to be unscalable security theater.
Let's skip the strange purity tests and engage in good faith discussion.
There have been hundreds of MUD clients and many of them were not purely text based at all. Many had images and map screens built in.
A line follower with 5 photodiodes and a simple loop steering towards bright or dark lines (pid or not) works, just like the example of following light with two neurons.
When I did hobby robotics competition, some would train neural nets for this, many just had crude for loops, and most often it was PID.