News for hackers. Stuff that matters.

A comment on AMD PSP: Firmware TPM Remote Code Execution via Crafted EK Certificate. Parent comment

Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by jkolem2 on Friday January 05, 2018 @03:29PM (#16081391)
I think Intel's ME is much more complex than AMD's PSP. Does anyone know if AMD's PSP has a full network stack and the ability to interact with network hardware independent of the main CPU's OS?
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by dogma1138 on Friday January 05, 2018 @03:50PM (#16081516)
Yes, AMD's PSP runs a full OS which was made by Trustonic.
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by krylon on Friday January 05, 2018 @06:08PM (#16082591)
It must feel weird to create an operating system that runs on a CPU inside a bigger CPU.
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by dogma1138 on Friday January 05, 2018 @08:05PM (#16083164)
Technically if you count virtual machines as CPUs then every piece of Javascript etc. code runs in a CPU inside a CPU :P
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by kakarot on Friday January 05, 2018 @04:37PM (#16081914)
Trustonic is about as trustworthy a name as "Safecorp" or something similar. The name itself is just one big red flag.
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by dogma1138 on Friday January 05, 2018 @04:46PM (#16081984)
They are probably the largest TEE* supplier AFIK even bigger than Intel; they are pretty much the Java of the TEE world.

It’s a joint venture between ARM, Gemalto and a few other companies iirc.

*Trusted Execution Environment

[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by kakarot on Friday January 05, 2018 @06:44PM (#16082770)
Ahhh, okay. Thanks for the clarification!
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by moosingin3space on Friday January 05, 2018 @03:33PM (#16081422)
I had read somewhere that AMD PSP does not have Internet access.
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by dogma1138 on Friday January 05, 2018 @03:46PM (#16081493)
It does, DASH is also arguably much less secure than Intel's RMT.
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by moosingin3space on Friday January 05, 2018 @04:21PM (#16081751)
Hmm, I did not know this. Good to know!
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by rnhmjoj on Friday January 05, 2018 @06:38PM (#16082745)
Is there a documentation of what its capabilities are? I can't find anything specific about it.
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by dogma1138 on Friday January 05, 2018 @06:44PM (#16082775)
Of the remote management? Only this https://developer.amd.com/tools-for-dmtf-dash/

AMD hasn't really had any hardware for the enterprise for a long time so they are quite behind on many things.

This is their free remote admin tool : https://community.amd.com/community/devgurus/dmtf-dash/blog/...

It can basically do quite a few things, change firmware, boot an image, redirect USB input and likely quite a few of other undocumented things.

With Ryzen Pro launching soon I guess AMD would release a new suite of remote management software.

[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by rnhmjoj on Friday January 05, 2018 @07:19PM (#16082948)
Thank you.
[ Parent | on HN ]