Hacker News Reader

> The answer here is no

That's because it's a ridiculous premise. We don't have any evidence that Tim Cook isn't robbing banks in his spare time either. I'm not saying he does.. I'm just throwing it out there because he might be.

Not to mention the fact that you can't prove a negative anyway.

View on HN

You certainly can prove that a system is cryptographically or otherwise sound. There is an entire field of formal verification. Proving that an implementation is correct is often more difficult, but not impossible.

If it’s a ridiculous premise, then why do we even try?

Apple added Contact Key Verification to eliminate one possible class of attack involving a lack of user transparency. Still trusting a whole lot of trust in the stack, but is an improvement.

What you think of as a ridiculous premise I think of as a goal to aspire to

Reply on news.ycombinator.com