Experimental News Clipping Site

Tag: hardware security

  • The Register: The biggest microcode attack in our history is underway

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/10/microcode_attack_trump_musk/ Source: The Register Title: The biggest microcode attack in our history is underway Feedly Summary: When your state machines are vulnerable, all bets are off Opinion All malicious attacks on digital systems have one common aim: taking control. Mostly, that means getting a CPU somewhere to turn traitor, running code that silently…

  • Slashdot: How To Make Any AMD Zen CPU Always Generate 4 As a Random Number

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/02/09/2021244/how-to-make-any-amd-zen-cpu-always-generate-4-as-a-random-number?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: How To Make Any AMD Zen CPU Always Generate 4 As a Random Number Feedly Summary: AI Summary and Description: Yes Summary: Google security researchers have identified a vulnerability in AMD’s security architecture, allowing them to inject unofficial microcode into processors, which can compromise the integrity of virtual environments…

  • Hacker News: Fabrication Begins for Production OpenTitan Silicon – Google Open Source Blog

    —

    by

    Kurt Seifried
    in

    Source URL: https://opensource.googleblog.com/2025/02/fabrication-begins-for-production-opentitan-silicon.html Source: Hacker News Title: Fabrication Begins for Production OpenTitan Silicon – Google Open Source Blog Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details the announcement of Google’s production-ready OpenTitan silicon, the first open-source Root of Trust (RoT) for silicon. This initiative is significant for the security landscape of…

  • Hacker News: A Brief History of Code Signing at Mozilla

    —

    by

    Kurt Seifried
    in

    Source URL: https://hearsum.ca/posts/history-of-code-signing-at-mozilla/ Source: Hacker News Title: A Brief History of Code Signing at Mozilla Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text explores the evolution of code signing processes at Mozilla, detailing the complexity of securely shipping software to end-user devices over the last two decades. It emphasizes improvements in automation…

  • Hacker News: TKey – Security for the New World

    —

    by

    Kurt Seifried
    in

    Source URL: https://tillitis.se/products/tkey/ Source: Hacker News Title: TKey – Security for the New World Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes TKey, a flexible USB security token that emphasizes open source principles. TKey generates unique key material tied to specific applications, ensuring security by preventing unauthorized access even if the…

  • The Register: Los Alamos lab to research next-gen chip technologies

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/05/los_alamos_lab_to_research/ Source: The Register Title: Los Alamos lab to research next-gen chip technologies Feedly Summary: Radiation-hardening for space environments and energy efficiency tweaks for above and below Los Alamos National Laboratory (LANL) is leading a project to transform how chips are designed and manufactured, to make them more energy efficient and able to…

  • The Register: Microsoft quietly erases Windows 11 TPM 2.0 bypass workaround from help page

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/05/windows_11_hardware_requirement_workaround/ Source: The Register Title: Microsoft quietly erases Windows 11 TPM 2.0 bypass workaround from help page Feedly Summary: You’ll upgrade that aging piece of kit and you’ll like it For the past three years, Microsoft documented a way to run Windows 11 on PCs that lack Trusted Platform Module 2.0 hardware –…

  • Hacker News: AMD: Microcode Signature Verification Vulnerability

    —

    by

    Kurt Seifried
    in

    Source URL: https://github.com/google/security-research/security/advisories/GHSA-4xq7-4mgh-gp6w Source: Hacker News Title: AMD: Microcode Signature Verification Vulnerability Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a security vulnerability in AMD Zen-based CPUs identified by Google’s Security Team, which allows local administrator-level attacks on the microcode verification process. This is significant for professionals in infrastructure and hardware…

  • Hacker News: New Speculative Attacks on Apple CPUs

    —

    by

    Kurt Seifried
    in

    Source URL: https://predictors.fail/ Source: Hacker News Title: New Speculative Attacks on Apple CPUs Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses side-channel attacks, which exploit hardware-level vulnerabilities to extract sensitive information, highlighting the risks associated with shared CPU resources. This is particularly relevant for security professionals focused on hardware security and…

  • Hacker News: New Apple CPU side-channel attacks steals data from browsers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.bleepingcomputer.com/news/security/new-apple-cpu-side-channel-attack-steals-data-from-browsers/ Source: Hacker News Title: New Apple CPU side-channel attacks steals data from browsers Feedly Summary: Comments AI Summary and Description: Yes Summary: A recent disclosure by security researchers reveals critical side-channel vulnerabilities in modern Apple processors, specifically regarding the FLOP and SLAP attacks. These flaws exploit speculative execution mechanisms to leak sensitive…