News for hackers. Stuff that matters.

A comment on AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a Cost. Parent comment

Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by rocqua on Wednesday September 09, 2020 @05:23AM (#24419054)
What would such an alternative implementation be?
[ Parent | on HN ]
Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by tyingq on Wednesday September 09, 2020 @09:29AM (#24420774)
I guess they could provide a key that works with all the fuses blown, and a utility to blow all of them.
[ Parent | on HN ]
Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by Sebb767 on Wednesday September 09, 2020 @10:01AM (#24421047)
In which case you could easily blow all fuses, sign your malicious firmware with the all-fuses key and you're good to go.
[ Parent | on HN ]
Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by R0b0t1 on Wednesday September 09, 2020 @10:11AM (#24421148)
No, this won't work if the user is checking the attestation ability of the firmware or system. A similar exploit already exists by just modifying the firmware and expecting the user the just replace the CPU without checking the BIOS.
[ Parent | on HN ]