Re: [liberationtech] Chromebooks for Risky Situations?

2013-02-07 Thread T N
On Wed, Feb 6, 2013 at 2:16 PM, Jacob Appelbaum ja...@appelbaum.net wrote: It runs software that is in Debian, the GNU/Linux operating system. I know, I've written some of it (eg: tlsdate). They do a good job of locking things down but it is basically just another distribution of Linux. I

Re: [liberationtech] Chromebooks for Risky Situations?

2013-02-07 Thread T N
to dev mode, in which case, the machine will complain at every boot that it's mode has been switched (so you know). Trever On Thu, Feb 7, 2013 at 2:41 PM, T N trr...@gmail.com wrote: On Wed, Feb 6, 2013 at 2:16 PM, Jacob Appelbaum ja...@appelbaum.netwrote: It runs software that is in Debian

Re: [liberationtech] Chromebooks for Risky Situations?

2013-02-06 Thread T N
Just FYI: Chrome OS devices are not subject to roll back attacks because the verified boot does not allow that. Google has extensive documentation on this, and you can review the implementation by viewing the source code. Rollback attacks were an attack vector they specifically designed to

Re: [liberationtech] Chromebooks for Risky Situations?

2013-02-06 Thread T N
The word Linux doesn't refer to anything, other than maybe the kernel. Chrome OS is linux. But it's a massively stripped down distribution that has a radical design, including the fact that it will ONLY run if all of the cryptographic checks are verified from the root of trust. That root of