Re:The new and upgraded Framework Laptop
by sascha_sl on Thursday May 19, 2022 @10:46AM
(#31435346)
The PSP is a lot slimmer than Intel ME. It also doesn't randomly yank traffic for specific ports from your Ethernet.
[ Parent
| on HN ]
I havent looked at the presentation yet, but are you saying the PSP, like intels ME could be doing nefarious things since its proprietary and closed? Do you have a link to information on the network capturing thing? I mean is that really a thing?
I have heard of these things before but I am not quite sure what the possibilities are. Do you have a link that can summarize what this actual means in terms of security concerns?
CVE-2017-5689
Re:The new and upgraded Framework Laptop
by google234123 on Thursday May 19, 2022 @03:34PM
(#31439080)
How do you know there isn't an undiscovered CVE for AMD? There's probably maybe 10x more security research focused on Intel
I don't, but they do a lot less with the PSP, especially if you're just using Ryzen Pro and not server SKUs. Intel put a web interface you can't disable with an offbrand networking gear level RCE vulnerability that needs nothing more than ethernet access into their security chip. I don't think AMD can exceed that anytime soon.
Any good link with the details?
There was a good talk with an overview (as well as owning it) at 36c3.
https://media.ccc.de/v/36c3-10942-uncover_understand_own_-_r...