News for hackers. Stuff that matters.

vivalogic

Not sure if you're trolling, but please chill out with the personal attacks. I'm sure it feels great to make a stand, but your comment doesn't add anything meaningful to the discussion besides demonstrating your hypocrisy.
Re:An ARM killer from IIT-M? on Monday November 13, 2017 @12:44PM (#15688279)
if you haven't seen it: https://www.youtube.com/watch?v=PLJJY5UFtqY

He's a security expert working for Google. Here he is explaining just how bad the situation is.

here he talks about lack of trustable CPU:s https://youtu.be/JCa3PBt4r-k?t=7m22s

Re:An ARM killer from IIT-M? on Monday November 13, 2017 @12:31PM (#15688160)
>3. The CPU eco-system including ARM's is a bit sclerotic. It is not the lic cost that is the problem, it is the inherent lack of flexibility in the model.

When not even Google can get a CPU without built in IME/PSP "secure" processors running insecure code, that seems like an understatement.

It seems like almost everyone is ignoring the epic fallout of a truly malicious entity discovering and silently exploiting a remotely exploitable security hole in for example Intel ME. They could more or less shut down whole countries by a key press.

And that would be just the start. When you can't be sure if there is malicious software remaining deep inside your processors, you pretty much have to shred them. And the motherboard, and the disk drives (http://spritesmods.com/?art=hddhack), etc. You simply would have to replace your whole IT-infrastructure. Then you need to try to figure out what sensitive data was lost... It would be a nightmare for sure. If I were Google or Amazon I would be absolutely paranoid.

How much will it cost for USA to implement a replacement for Social Security Numbers after the Equifax leak?

As our dependence on IT increases it becomes a more attractive target, so a well protected IT-infrastructure will be an absolute necessity in the near future. To be able to build a secure infrastructure, we need a hardware foundation that we can trust. We simply don't have that today!

Shakti sounds like it can be the foundation we need, I very much hope so.