2
Do governments know which AMD processors are spychips (read: have a PSP)? If yes, can an open data request force disclosure? (lemmy.sdf.org)
submitted 3 months ago by to c/infosec@infosec.pub
3 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.sdf.org/post/57025341

I set out to determine which AMD processors do not contain the PSP (which actually compromises your security). Started down this rabbit hole. It’s turned into a shitshow of non-determinism.

So, wouldn’t nation states research which processors are spychips and which are not -- in the interest of national security? If yes, is it just a matter of requesting the info?

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 3 months ago (2 children)

Unless I missed it nothing is saying what PSP is and why its bad...

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 2 points 3 months ago*

    It's based on ARM TrustZone tech, and is (probably amongst other things) a tpm2 implementation within the SoC that also gates silicon initialisation (the x86 cores will not spin up without it).

    I'm not sure it could be thought of as equivalent to Intel Management Engine in terms of it's overall capability, however.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 0 points 3 months ago* (last edited 3 months ago)

    It's a security processor built into the main CPU. The AMD and Intel concepts are going to be similar enough that this talk will do:

    MINIX is likely the most used OS on earth because it's running inside the x86 processor. tl;dr the processor presented to your operating system isn't the real core of the computer; it's just a virtual machine.

    EDIT: I knew there was more, but it's been so long I'd forgotten: https://www.youtube.com/watch?v=jmTwlEh8L7g

  • permalink
  • fedilink
  • source
  • parent