News for hackers. Stuff that matters.

A comment on AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a Cost. Parent comment

Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by p1mrx on Wednesday September 09, 2020 @03:24AM (#24418257)
They could blow the key to an "insecure" state, and then have a jumper on the motherboard to allow insecure booting.
[ Parent | on HN ]
Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by soneil on Wednesday September 09, 2020 @04:13AM (#24418612)
That’s about the only way I see out of this, yeah. No fuses blown is obviously a specific state (works as expected everywhere). All-fuses blown needs to be a specific state too (say the trustroot is dead and it’s now “just a cpu”).

You couldn’t just fail to that state (it’d be inappropriate for its primary use-case), as long as there’s some way to get there.

[ Parent | on HN ]