When HN users recommended it
1 HN user recommended this in 2023, in one comment.
20072026
Each tall tick is one HN user's first recommendation. A short tick is the same user again. Click a tick to jump to the comment.
1 HN user recommended this in 2023, in one comment.
Each tall tick is one HN user's first recommendation. A short tick is the same user again. Click a tick to jump to the comment.
We need crowdsourced behavioral fingerprints and open-source test suites for peripherals which may be subject to supply chain or shipment interdiction. E.g. we can measure power consumption and response latency baselines, when idle and with reference workloads.
Use the simplest USB dock with the smallest amount of ports for your use case. Simpler docks have less physical room and lower baseline power to hide malicious mods. Compare units of the same model procured via multiple supply chains: in-person pickup, online, different couriers, new/used.
e.g. this StarTech dock is about 1/2 the price of those with integrated ethernet, and can be used with a USB-ethernet adapter, which allows both the dock and ethernet adapter to be evaluated separately, https://www.amazon.com/gp/product/B09DGRJMYK/
More generally, there is ongoing work for integrity verification of devices, including PCIe device authentication [1][2], USB device authentication and SPDM for remote attestation between DICE-RoT and system firmware, before allowing a device to communicate with the system.
[1] PCIe component auth, https://pcisig.com/pcie®-component-authentication
[2] Intel PCI Express Device Security, https://www.intel.com/content/dam/www/public/us/en/documents...