Re: How to obtain serial number in linux
On Thu, 2007-06-21 at 13:48 +0800, David Woodhouse wrote: On Thu, 2007-06-21 at 00:50 -0400, Ivan Krstić wrote: David Woodhouse wrote: I remember a lot of noise and pointless paranoia, but no actual _mess_. A lot of noise and pointless paranoia over something with no practical benefits and plenty of abuse potential sure as hell qualifies as a mess in my book. There was a tremendous amount of consumer and media backlash including a request for a formal FTC investigation. Well, it was an Intel chip. Of _course_ it was a mess :) But 'consumer and media backlash' happens over a lot of pointless and irrelevant things, while simultaneously _not_ happening in other situations where it really should. Media fuss isn't really a good metric of anything but media fuss. Are we going to hide MAC addresses too? I've heard some of the tinfoil hat contingent witter about how those could lead the black helicopters to you too¹. Good point, MAC address is available to anyone AFAIK. It's also a nice way of getting a constant UID (after hashing it of course). Dan ___ Devel mailing list Devel@lists.laptop.org http://lists.laptop.org/listinfo/devel
Re: How to obtain serial number in linux
Jim Gettys wrote: Serial number is/should be easily available; after all, it's printed on the machine. This is a complete non-sequitur. Remember the bloody mess that was PSN? http://www.cdt.org/privacy/issues/pentium3/ That a machine's SN# can be identified by opening its battery compartment by absolutely no means implies the number should be available to userspace applications. While it is true that our recent kernels will expose the SN and UUID information, they will do so only to a privileged and closely audited security service that can broker the information for the user's benefit, such as for backups and authentication to the OpenID identity provider. In those cases, the data will follow the Bitfrost requirement of no unencrypted authentication, meaning the security service will only use the data to respond to a cryptographic challenge rather than send it over the wire directly, and any such uses will be tightly-controlled and whitelisted only after we determine that extensive assurances can be provided of the user's privacy not being adversely affected. -- Ivan Krstić [EMAIL PROTECTED] | GPG: 0x147C722D ___ Devel mailing list Devel@lists.laptop.org http://lists.laptop.org/listinfo/devel
Re: How to obtain serial number in linux
On Wed, 2007-06-20 at 16:52 -0400, Ivan Krstić wrote: This is a complete non-sequitur. Remember the bloody mess that was PSN? I remember a lot of noise and pointless paranoia, but no actual _mess_. But I don't own a tinfoil hat -- so maybe someone's controlling my brain to make me not see the problem. -- dwmw2 ___ Devel mailing list Devel@lists.laptop.org http://lists.laptop.org/listinfo/devel
Re: How to obtain serial number in linux
David Woodhouse wrote: I remember a lot of noise and pointless paranoia, but no actual _mess_. A lot of noise and pointless paranoia over something with no practical benefits and plenty of abuse potential sure as hell qualifies as a mess in my book. There was a tremendous amount of consumer and media backlash including a request for a formal FTC investigation. But I don't own a tinfoil hat -- so maybe someone's controlling my brain to make me not see the problem. Everyone knows tinfoil hats are a government conspiracy: http://people.csail.mit.edu/rahimi/helmet/ I expect more of you, Dave. The Truth Is Out There! -- Ivan Krstić [EMAIL PROTECTED] | GPG: 0x147C722D ___ Devel mailing list Devel@lists.laptop.org http://lists.laptop.org/listinfo/devel
