Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't see how certification solves anything that just not doing OTA updates doesn't also solve.


It reduces the attack surface to places that have been verified to be following security obligations. Otherwise a physical attack becomes much easier because you just need to work at an auto-shop that doesn't pay much attention to you. The same sort of attack is still possible with certs but it's more difficult because it would require compromising both the shop and the person who vets their practices.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: