Hacker News Reader

You aren't building your own silicon (Google is), so you haven't exactly solved that problem. You're trusting that Google is doing what you want.

Besides, they haven't exactly replaced their supply chain and brought everything in house. Much of their hardware is coming from the same sources as their competitors.

View on HN

If you aren't auditing your dependencies, you don't know security. But we don't do that either, we outsource it.

This a reasonable thing to outsource: let someone qualified build their own.

But their custom silicon allows them to mitigate many of the risks.

Reply on news.ycombinator.com