News for hackers. Stuff that matters.
Re:How the Xbox 360 knows if your hard-drive is genuine by transpute on Tuesday January 24, 2023 @10:27PM (#34514029)
It's worth looking at the multi-year CHERI research project on capabilities, https://news.ycombinator.com/item?id=30007474, which has influenced Arm security features and roadmaps. Pluton could be viewed as a stepping stone to CHERI. From a recent blog post by MS Research, https://saaramar.github.io/memory_safety_blogpost_2022/

> these tiny parts usually run with high privileges and dramatically impact the overall system. In such cases, MTE/CHERI play pretty nicely - they help ensure that whatever bugs we have in these areas are killed at their root cause (probabilistically/deterministically). This is exactly why MSR, MSRC and Azure Silicon pushed for this AMAZING project of CheriIoT ... scaling CHERI down to RISC-V32E, the smallest core RISC-V specification. I’m very excited about this project, and I hope once we will open-source the ISA and the prototype, more folks across the industry could join.

That is a direction that would benefit everyone: open silicon and open firmware for the most security sensitive components. It is technically possible and at least some humans in big companies understand why it is necessary for our future would-be-digital civilizations.

There are no comments on this comment yet.