News for hackers. Stuff that matters.

A comment on Titan in depth: Security in plaintext. Parent comment

Re:Titan in depth: Security in plaintext by kop316 on Thursday August 24, 2017 @08:08PM (#15095120)
Hello!

I am curious about a couple of things:

Assuming you use Intel chips, how do you manage to trust the firmware/ME from them? Do you write your own BIOS to ensure that it is safe? Or do you use ARM/PowerPC/other ISA and have an entirely open source stack?

Does the Titan assume no phyiscal access? And if you do assume someone could steal the chip/try to reverse engineer the chip, do you have anything in it to stop an adversery? I would wonder if there would be a private/nation state agency would want access to certain secrets so bad that they would try to alter it physically, rather then through root access.

[ Parent | on HN ]
Re:Titan in depth: Security in plaintext by bluegate010 on Thursday August 24, 2017 @09:20PM (#15095434)
Both the Titan chip and all software that runs on it are designed entirely in-house, so we have full control over the stack. And we do have physical tampering countermeasures in place.
[ Parent | on HN ]