News for hackers. Stuff that matters.
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by TheSpiceIsLife on Thursday October 04, 2018 @06:30AM (#18138636)
> One country in particular has an advantage executing this kind of attack: China, which by some estimates makes 75 percent of the world’s mobile phones and 90 percent of its PCs.

Intel and AMD are both USA based companies.

Is it conceivable their processors contain backdoors in a similar vein?

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by squaredpants on Thursday October 04, 2018 @06:39AM (#18138670)
I'm pretty certain they do. AMD's PSP and Intel's ME are really shady and are still enabled in every CPU sold today (and full of disclosed and undisclosed flaws for that matter).
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by jake_the_third on Thursday October 04, 2018 @08:45AM (#18139356)
Not to mention that these back doors can be easily disabled, e.g intels high assurance mode, but normal "owners" are specifically not allowed to disable them.

The whole thing is a fucking mess.

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by chx on Thursday October 04, 2018 @06:45AM (#18138701)
No, it is totally inconceivable AMD and Intel CPUs are backdoored this way. Inserting a microcontroller somewhere on the Ethernet traces and then using IPMI is not as sophisticated as this article wants to describe. Sophistication is necessary from the payload to be stealthy but not the hardware.

There are at least two problems with China messing with CPUs: a) they are not made there. TSMC is Taiwan, the Asian parts of Global Foundries are in Singapore, Intel is manufacturing CPUs mostly in the USA with some in Ireland and Israel, only 3DNAND / 3DXPoint ICs are made in China. b) the hardware knowledge to change here, well, think of it, the microcontroller on the motherboard is on the few millimetres scale, the parts here are on the few ten nanometres scale so as a rough but not unjust quantifications would say it's 100 000 times harder.

Whether the platforms are hackable / hacked, that's harder to say thanks Intel ME and such but the CPUs aren't.

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by simias on Thursday October 04, 2018 @07:32AM (#18138923)
I don't think the parent was talking about this specific type of attacks but other types of hardware backdoors. I think the answer to that is very obviously yes, and given what we know about intelligence agencies I'm even willing to go as far as saying that it is likely (or at least, if you have reasons to be worried about Uncle Sam getting to your stuff you should consider it a very real possibility).

Modern ASICs are so complex that I'm sure that sneaking a tiny backdoor into the behemoth that's a modern CPU or embedded SoC would be almost trivial. They'd also have great plausible deniability in case they're found, if something like SPECTRE was an intentional backdoor how would you ever prove it for instance?

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by wepple on Thursday October 04, 2018 @09:18AM (#18139590)
> Modern ASICs are so complex that I'm sure that sneaking a tiny backdoor into the behemoth that's a modern CPU or embedded SoC would be almost trivial.

I suspect putting in a backdoor would be difficult because they are complex. Wouldn’t it be far too easy for the backdoor to inadvertently cause reliability or performance issues? And the bug would have to be useful enough to warrant potentially destroying the semiconductor business of a nation, not just some difficult to trigger side channel.

[dead]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by dang on Sunday October 07, 2018 @05:00AM (#18159577)
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by wepple on Friday October 05, 2018 @07:16AM (#18147192)
Welcome to HN. You’ll find that kind of negative comment which doesn’t really add to the discussion isn’t valued here.

It wasn’t wild nor uneducated; I have some experience with FPGAs and the challenges of complex circuit design - regardless, I was posing a question rather than stating fact.

Do you disagree with what I suggested? Educate me, correct my speculation.

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by TheSpiceIsLife on Thursday October 04, 2018 @07:33AM (#18138928)
> No, it is totally inconceivable AMD and Intel CPUs are backdoored this way.

That’s a fairly strong statement.

It could be argued it is conceivable as evidenced by the fact we are here talking about it.

Also, I’ve read that it’s impossible for any one person to fully comprehend the circuit diagram of a modern CPU. In light of that it seems conceviable any number of wayward circuits could be hidden.

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by baq on Thursday October 04, 2018 @06:52AM (#18138729)
can you be sure that fabs haven't been infiltrated and masks changed between design and production in any factory, be it tsmc, samsung, glofo or intel?
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by paulie_a on Thursday October 04, 2018 @02:10PM (#18142192)
The US did that in the late 70's or early 80's to the USSR and it resulted in one of the largest non nuclear explosions in history.
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by aaaaaaaaaab on Thursday October 04, 2018 @08:41PM (#18144824)
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by TheSpiceIsLife on Thursday October 04, 2018 @07:15AM (#18138847)
Presumably the organisations responsible for hard coding backdoors in chip designs know how to test to confirm their presence.

Presumably some adversarial nation-states have moles inside these organisations > know how to remove them prior to fab.

Presumably these adversaries export genuine chips to their adversaries, thereby tricking them in to thinking the backdoors made it through the fab process, and only use chips that have the backdoors removed in their own critical infrastructure.

Presumably.

I’ve always had this fantasy of being a hextuple agent involved in this type of deep espionage.

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by hoppelhase on Thursday October 04, 2018 @06:57AM (#18138756)
And how about the software that runs on these things?
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by JohnHaugeland on Saturday October 06, 2018 @10:00AM (#18155146)
they're up front and open that they do

also, they're not that hard to dig out

https://www.youtube.com/watch?v=_eSAF_qT_FY