all 3 comments

sorted by: hot top controversial new old
[–] 7 points 1 year ago (2 children)

The communication channel between the main processor and the TPM is the easiest point of attack. The Chip Whisperer has been able to do this for years. Once someone gets their hands on the hardware, all bets are off.

Don't see how this is new?

  • source
  • hideshow 2 child comments
  • [–] 3 points 1 year ago (1 child)
  • [–] 1 point 1 year ago

    Well not only, there are still industry solutions relying on this infra, going "state actors in our data center are not a threat".....

    From Signal Messenger of all places....

    I remember one intel technology was pretty thoroughly tested and field proven, (and had significant memory constraints since almost everything happened on-chip as far as I remember) what came after (with similar AMD/IBM/ARM tech) was quite controversial as far as I remember. I think it was SGX 1 vs 2 or maybe Intel-TE that was marked tamper resistant, because everything happened on die, but I could misremember.

    On the other hand: Reddit thread about SGX from 5 years ago. I think the talking point even back then was "state actors in our data center are not a concern".

  • source
  • parent
  • 1 comment in c/hardware@programming.dev view that post
    [–] 1 point 1 year ago

    What a non-issue. From Microsoft's immutable laws of security, written decades ago:

    Law #3: If a bad actor has unrestricted physical access to your computer, it's not your computer anymore.

    The classic example was an attacker can simply take a baseball bat to your system if they have physical access

  • source