36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware
13K views • 6 years ago
media.ccc.de
A 36C3 talk by Bunnie Huang arguing that open source is necessary but not sufficient for trustworthy hardware, because verifying hardware is destructive and so creates a time-of-check/time-of-use gap. It surveys supply chain security and classes of hardware attacks, and presents the Betrusted approach to narrowing that gap.
