logoalt Hacker News

whazortoday at 12:50 PM2 repliesview on HN

I'm ok with enforcing hardware security. Both for banks and governments.

But it must not limit the ability of running custom software on a phone. And especially not enforcing every person to get a Google/Apple signed phone.

Like if I get GrapheneOS on my phone. Banking/gov apps should work. But I believe this could be possible with enforcing hardware security as well.


Replies

TingPingtoday at 1:25 PM

The chain of trust always has a software layer. I don’t believe what you want is possible.

I find the bank talking point strange, why are they special, are they even targeted more. It just feels like a boogeyman “think of your money!”

show 3 replies
Menethtoday at 1:47 PM

You can't have both. "Hardware security" means the manufacturer decides which OS can run and you can't override it.