Glacier has been written and tested around these specific equipment recommendations.
Eternally quarantined hardware: Set 1
- Factory-sealed computer with 2 USB ports and a camera: 2016 Dell Inspiron 11.6”
- Two factory-sealed USB drives (2GB+) from the same manufacturer: SanDisk Cruzer 8GB.
We’ll be using two USB drives at the same time. If the computer has only one USB port, you’d need to use a USB hub, which is a separate piece of USB hardware subject to malware infection of its firmware.
We’ll use the camera for reading QR codes.
Eternally quarantined hardware: Set 2
- Factory-sealed computer from a different manufacturer, also with 2 USB ports and a camera: Acer Aspire One Cloudbook 11”
- Two factory-sealed USB drives (2GB+) from the same manufacturer, but a different manufacturer than the drives for Set 1: Verbatim 2GB
Used/existing computing equipment
- Two computers with Internet connectivity, administrator access, and about 2GB of free disk space. Each computer must be running Windows 10, macOS, or Linux One of these two computers should be a computer that you do not own (unless purchased brand new), or that has spent much time on your home or office network.
- Smartphone with a working camera
- Two factory-sealed USB drives (2GB+): Verbatim 2GB
- Precision screwdrivers, for removing WiFi cards from laptops
- Electrical tape
- Casino-grade six-sided dice. Regular dice are insufficient.
- Faraday bag. Used to prevent smartphone malware from stealing sensitive data using radio frequencies.
- Table fan. White noise can prevent malware on nearby devices from stealing sensitive data using sound.
- Home safe. Consider bolting it to your floor to deter theft.
- TerraSlate paper. Waterproof, heat resistant, and tear-resistant.
- Cardboard envelopes, for opacity
- Tamper-resistant seals
Standard software algorithms that generate random numbers, such as those used to generate Bitcoin private keys, are vulnerable to exploitation, either due to malware or algorithmic weakness (i.e. they often provide numbers that are not truly random). Dice offer something closer to true randomness.
Casino dice are created specifically to remove any potential dice bias (square corners, filled in pips, low manufacturing tolerance, etc.) That’s why casinos use them!