News for hackers. Stuff that matters.
Re:The new and upgraded Framework Laptop by fsflover on Thursday May 19, 2022 @09:50AM (#31434632)
Re:The new and upgraded Framework Laptop by gray_charger on Thursday May 19, 2022 @09:07PM (#31442205)
AMD PSP is NOT the same as Intel ME. AMD PSP is a "trusted execution environment" (the first sentence in your link). Intel's equivalent is Intel SGX. Trusted execution environments are a security feature that does not offer remote management. It's not a privacy concern like Intel ME is.
Re:The new and upgraded Framework Laptop by dont__panic on Friday May 27, 2022 @10:09AM (#31529819)
Thank you for clarifying this, all of the acronyms are difficult to reason about if you don't work with them every day.
Re:The new and upgraded Framework Laptop by sascha_sl on Thursday May 19, 2022 @10:46AM (#31435346)
The PSP is a lot slimmer than Intel ME. It also doesn't randomly yank traffic for specific ports from your Ethernet.
Re:The new and upgraded Framework Laptop by trinsic2 on Thursday May 19, 2022 @12:43PM (#31436939)
I havent looked at the presentation yet, but are you saying the PSP, like intels ME could be doing nefarious things since its proprietary and closed? Do you have a link to information on the network capturing thing? I mean is that really a thing?

I have heard of these things before but I am not quite sure what the possibilities are. Do you have a link that can summarize what this actual means in terms of security concerns?

Re:The new and upgraded Framework Laptop by sascha_sl on Thursday May 19, 2022 @01:06PM (#31437254)
CVE-2017-5689
Re:The new and upgraded Framework Laptop by google234123 on Thursday May 19, 2022 @03:34PM (#31439080)
How do you know there isn't an undiscovered CVE for AMD? There's probably maybe 10x more security research focused on Intel
Re:The new and upgraded Framework Laptop by sascha_sl on Friday May 20, 2022 @02:51AM (#31444155)
I don't, but they do a lot less with the PSP, especially if you're just using Ryzen Pro and not server SKUs. Intel put a web interface you can't disable with an offbrand networking gear level RCE vulnerability that needs nothing more than ethernet access into their security chip. I don't think AMD can exceed that anytime soon.
Re:The new and upgraded Framework Laptop by fsflover on Thursday May 19, 2022 @11:08AM (#31435682)
Any good link with the details?
Re:The new and upgraded Framework Laptop by sascha_sl on Thursday May 19, 2022 @11:44AM (#31436180)
There was a good talk with an overview (as well as owning it) at 36c3.

https://media.ccc.de/v/36c3-10942-uncover_understand_own_-_r...