7 ms·
Even if you trust a company not to do you harm with the information they store, there exist entities that can compel them to turn this information over. For ex
by jcdreads 15y ago
Even if you trust a company not to do you harm with the information they store, there exist entities that can compel them to turn this information over. For example, the information can be (sometimes secretly) subpoenaed by the U.S. government.
The choice between being evil and not being evil can be an easier one to make, practically speaking, than the choice between being evil and becoming the target of federal criminal prosecution.
- pyre 15y agoWhat are the chances that some random hosting company won't just do the same thing if you ran all of your services on a VPS or colo box?
- oelewapperke 15y agoActually you can prevent that using trusted computing. First the VM is started. Upon boot is asks the TPM to certify the "secure computing base", resulting in a key : a series of bytes that is the hash of all computer code that could potentially affect the execution of the program. This key is used to encrypt the real root drive, via an intermediary key. THe TPM hash reported cannot be falsified due to, well, look up why that's not possible. You select the trusted computing base the VPS provider is supposed to use, one that doesn't allow for interference except within agreed parameters, and they won't be able to interfere. If they change the key, or the kernel, they cannot get the key needed to decrypt the hard drive image, so their info is useless. (after this you obviously make sure you can't communicate with the box unencrypted) Done/done.