News for hackers. Stuff that matters.

A comment on AMD PSP: Firmware TPM Remote Code Execution via Crafted EK Certificate. Parent comment

Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by eat_veggies on Friday January 05, 2018 @10:33PM (#16083693)
It looks like they built their own chips for their servers:

https://cloudplatform.googleblog.com/2017/08/Titan-in-depth-...

Notable quote:

"Google designed Titan's hardware logic in-house to reduce the chances of hardware backdoors. The Titan ecosystem ensures that production infrastructure boots securely using authorized and verifiable code."

This is what we need. Authorized and verifiable code, none of this opaque binary blob BS.

[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by ENOTTY on Saturday January 06, 2018 @03:46AM (#16084437)
Google's code/hardware logic is an opaque binary blob to you. What difference does it make whether the binary blob is a Google chip or a TPM?
[ Parent | on HN ]
Re:AMD PSP: Firmware TPM Remote Code Execution via Crafted E... by eat_veggies on Saturday January 06, 2018 @08:57AM (#16085247)
Sorry, what I meant to say was that we need those types of verifiable and transparent chips in our own computers rather than ME and PSP
[ Parent | on HN ]