Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by kuratkull on Wednesday November 03, 2021 @07:49PM (#29102043)

Each and every second-hand buyer in the world would block nvidia in the firewall after that. You know you need to tighten the screws when your GPU is trying to phone home.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by berkes on Thursday November 04, 2021 @03:39AM (#29104388)

In that case, it can easily be swapped around: card won't run unless it can reach an online endpoint. E.g. to fetch some binary blob that must be loaded in firmware. Only handed out and signed when requester is known to be legit.

Not saying I'd like this, or that I endorse this, though.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by NullPrefix on Thursday November 04, 2021 @09:27AM (#29106886)

Stallman was right

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by smarx007 on Wednesday November 03, 2021 @07:11PM (#29101720)

Printer manufacturers figured out how to make their customers lives miserable long after the sale. Also, see what FTDI did: https://hackaday.com/2014/10/22/watch-that-windows-update-ft...

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by amatecha on Wednesday November 03, 2021 @06:45PM (#29101454)

The NVIDIA driver could refuse to function correctly on a GPU with a known-stolen serial number.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by Strom on Wednesday November 03, 2021 @07:00PM (#29101614)

Two reasons why this won't work:

1) The GPU probably already comes with a driver CD that can't have this serial number marked as stolen.

2) Even if you use a downloaded driver, you can just use the last version that didn't contain the serial.

You'll be left out of future driver updates, but that is of no concern to miners.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by hn_throwaway_69 on Wednesday November 03, 2021 @11:50PM (#29103531)

At least in theory, Windows Update would be used to force an upgrade to the newest driver. Which in turn could implement serial number blocking.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by code_duck on Thursday November 04, 2021 @03:17AM (#29104271)

My recent GPU did not come with any sort of CD. They expect you to get drivers from the internet.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by google234123 on Wednesday November 03, 2021 @07:32PM (#29101900)

A serial number is independent of the driver while the past drivers could have a network check.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by rappatic on Wednesday November 03, 2021 @07:47PM (#29102026)

Personally I wouldn't love if my drivers phoned home to get the serial numbers of stolen cards.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by AshamedCaptain on Wednesday November 03, 2021 @08:51PM (#29102483)

And yet I would bet they already do phone home and send shittons of information.

But to use that to self destroy if stoken or the like would likely generate way too much negative PR to nvidia and bring unwanted attention, so they wont.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by TheDong on Thursday November 04, 2021 @02:10AM (#29104003)

I know for a fact my drivers do not phone home. The only GPU driver I've used for years is the one that comes in the linux kernel. It's open source, I haven't read all the code, but I know I could and I know the developers wouldn't be phoning home.

I'd bet a large number of linux users are in this situation since nouveau (nvidia), intel, and amdgpu drivers all exist in the linux kernel and work well.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by AshamedCaptain on Thursday November 04, 2021 @08:42AM (#29106411)

I'd also bet that whoever buys this type of nuclear-powered graphics card does not plan to use a driver that will not allow 3D gaming or bitcoin mining.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by bogwog on Wednesday November 03, 2021 @08:34PM (#29102381)

Or instead of consumer rights taking a loss, the company that failed to protect its property does.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by Gigachad on Wednesday November 03, 2021 @10:29PM (#29103055)

Consumer rights haven't taken a loss because there is no consumer and no rights. Users have no right to use stolen property. The have rights when they legitimately acquire the product.

Even if its changed hands, its still illegal to purchase stolen property and the police will just take it from you without compensating you.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by bogwog on Thursday November 04, 2021 @08:48AM (#29106467)

The loss is that DRM is added to a product, which means that even if you legally purchased it, you don't really own it.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by Gigachad on Thursday November 04, 2021 @05:09PM (#29112562)

You never "really owned" a TV because they were never open source. If the feature never activates, it never affects the user in any way and it may as well not exist. If it does activate wrongly, you have consumer law and protections to get your money back.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by riversflow on Wednesday November 03, 2021 @09:35PM (#29102740)

I'd argue that serial number checks would be the company protecting it's property. It would be far better if the company could rely on the state to protect its property.

I also really don't see activation lock as consumer rights taking a loss, thieves aren't consumers. Being able to brick hardware that thieves steal is a consumer protection. If EVGA started to block resale, that would be a completely different story, but I was happy to activation lock my stolen iPhone. Apple lets you resell, but if you steal a truck load of iPhones I doubt they would activate.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by ClumsyPilot on Wednesday November 03, 2021 @10:41PM (#29103130)

"I'd argue that serial number checks would be the company protecting it's property"

No, its the company compelling me to protect it's property at my expense using my CPU and my Internet connection without compensation or due process.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by perth on Thursday November 04, 2021 @02:14AM (#29104014)

I mean doesn't Microsoft already phone home a unique GUID identifying the hardware in your computer that it ties Windows key activations to? And since Microsoft owns Canonical, probably in Ubuntu as well (on the defaults)?

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by worthless-trash on Thursday November 04, 2021 @03:14AM (#29104262)

Citation on how MS owns ubuntu ?

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by TomGullen on Thursday November 04, 2021 @02:37AM (#29104108)

And what compensation would you think would be fair exactly?

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by salawat on Thursday November 04, 2021 @09:56AM (#29107225)

Easy. Gate critical API calls implemented in the hardware behind cryptographic signature verification. You sign the firmware using your private manufacturer's key. You validate with a public key burnt into the Silicon.

Nvidia already does this for things like DriveOS.

https://docs.nvidia.com/drive/drive-os-5.2.0.0L/drive-os/ind...

They apply the same type of gatekeeping to power management and reclocking in post-Maxwell GPU architectures. This is why the nouveau driver hasn't been able to maintain parity with the proprietary driver.

I can't quite remember the search engine contortions I did to home in on it the first time, but I think "Falcon high-security power-management reclocking firmware signature verification Maxwell 970 GPU driver" should get you in the right direction.

Basically, Nvidia cryptographically signs the firmware blob (digest), and I think uses asymmetric crypto implemented through a public key embedded in the silicon that can decrypt the firmware signature shipped with the driver for comparison by the Falcon microprocessor to gate access to what firmware code can gain access to the power management/reclocking API's that make modern gfx cards useful. I was doing some research on it at one point between jobs, but it's been a while. Long story short, if Nvidia doesn't bless your firmware, you can't get full use out of your card. Anti-competitive/anti-user as all hell, no network connection required, and you can technically still "use it" at a near useless base clock rate.

This practice is part of why there was all that controversy around that hash-rate limiter added to 3060/70 GPU firmware? A signed development version of the driver without the hash-rate limiter was leaked, meaning all the miners just used that as their driver to get full performance cryptocurrency mining on the cheaper cards.

This is why, God as my witness, I will do everything in my power to never support Nvidia as a company ever again, and I have become increasingly vigilant against other actors trying to sneakily push cryptography based anti-features elsewhere.

I was never interested in hardware at this level of gory detail before, but now that I've seen it it can't be unseen; and I must protect open computing for those who come after me.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by amelius on Wednesday November 03, 2021 @07:06PM (#29101674)

> You don't even need a network card, much less a network connection

Well, NVidia could require these, and make your card phone home every X minutes.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by trompetenaccoun on Wednesday November 03, 2021 @09:16PM (#29102624)

Dear NVidia engineers and execs: Don't even think about it!

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by ClumsyPilot on Wednesday November 03, 2021 @10:43PM (#29103140)

"NVidia could require these, and make your card phone home every X minutes."

You mean treat my entire computer as it's NVidia's property and make it do what it wants? I really hope that would be illegal.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by amelius on Thursday November 04, 2021 @05:50AM (#29105151)

My network socket isn't Apple's property, yet Apple phones home for every application I start.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by Gigachad on Wednesday November 03, 2021 @06:47PM (#29101480)

It could be done if nvidia cooperated. It's basically impossible to use a nvidia gpu without the driver software which _is_ networked. Nvidia already added malware to their drivers before to stop mining so blocking some stolen cards would not be out of the question.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by Strom on Wednesday November 03, 2021 @07:04PM (#29101658)

Nvidia drivers work just fine with no networking, I've used them so frequently.

The anti-mining technique that Nvidia uses depends on firmware modifications as well. Thus the firmware of these stolen GPUs must already support such a banlist.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by Gigachad on Wednesday November 03, 2021 @08:02PM (#29102153)

You could in theory keep it fully offline but at some point you are likely to accidentally allow it network access or want to update the driver and if that happens, the card is bricked. It also makes the cards completely worthless on the second hand market.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by mbesto on Wednesday November 03, 2021 @08:09PM (#29102196)

> malware to their drivers before to stop mining so blocking some stolen cards would not be out of the question.

That's not how it works. Nvidia drivers don't phone home to prevent mining blocking. Totally different scenario.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by Gigachad on Wednesday November 03, 2021 @09:40PM (#29102761)

They absolutely can though. The driver has the ability to connect to the internet and the company has shown that limiting hardware via software is something they do.

[ Parent | on HN ]

Re:Notice of Stolen EVGA GeForce RTX 30-Series Graphics Cards by mbesto on Thursday November 04, 2021 @09:10AM (#29106708)

This is simply not true. It's a combo of BIOS/Firmware, the silicon and the driver. Stop spreading FUD unless you have a source to back it up.

https://twitter.com/bdelrizzo/status/1362619264423747590

https://old.reddit.com/r/gpumining/comments/pbgyi9/to_clear_...

https://arstechnica.com/gadgets/2021/05/nvidia-will-add-anti...

https://wccftech.com/nvidia-geforce-rtx-30-lhr-lite-hash-rat...

[ Parent | on HN ]