AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a Cost

Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by g_p on Wednesday September 09, 2020 @04:27AM (#24418695)

The UK is currently taking steps towards this - the plans aren't perfect, but will require "security updates until" dates, no default or symmetrically derived passwords, and a vulnerability disclosure programme to be available.

It doesn't go as far as to force unlocking, but requiring transparent disclosure of a committment to security update longevity (like Chromebooks and pixel phones have) is probably the first step along the road to that.

[ Parent | on HN ]

Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by Dylan16807 on Wednesday September 09, 2020 @05:49AM (#24419233)

You can get a pretty good idea of how long security updates will be provided already, so does that help almost ever? Like, great, now Motorola has an official promise to do security updates for for 15 months post-launch. If they decide to release a permanently locked phone, the consumer's still getting screwed just as much.

Basically, "doesn't go as far as" sounds like a massive understatement.

[ Parent | on HN ]