Viewing profile — laginimaineb

(I work at doubleAI.) The benchmark numbers (90% wins, 2.24x speedup on average, with key attention workloads accelerated ~15x) are one part of the story. The other: AI-generated k…

Actually, I would imagine they are nothing like one another. However, Exynos uses a TrustZone TEE implementation to implement the KeyMaster module, just like Qualcomm's Snapdragon.…

You're right. Let's take a second to go over the issues: 1. The arbitrary code-execution in TZ has already been privately disclosed and fixed. 2. As for the second issue - I would …

I believe so.

I'll definitely try and get around to it sometime soon. However, I wouldn't be surprised if the situation is the same... After all, the KeyMaster module was initially only meant to…

FWIW, formal verification requires a complete and exact spec - the TZ kernel is very complex and interacts with nearly all the peripherals on the SoC, it doesn't just manage QSEE a…

Widevine DRM is integrated into virtually all Android phones. If you're building your own ROM, you could remove the widevine.bXX files from the ROM image itself - I've never tested…

I believe so

Don't think I'll collect it, but I will release all the details so people can do it themselves.

It will work on the Turbo! :) But you'll either need a version old enough to be vulnerable to this TrustZone exploit, or you can wait a couple of weeks until I release a new exploi…

Thanks! I'm also on twitter in case that helps (@laginimaineb). As for Sunshine - I'm publishing a new (even broader) zero-to-TZ saga, complete with exploits, but I'm not going to …

AFAIK it's unknown - there's a controller on the SoC which is responsible for reading/writing the fuses, but its firmware is in mask ROM and isn't available. Perhaps it's a real ch…

In this case, it seems so. However, I must say I've reported many vulnerabilities to Google since and they've all been handled within that time-frame.

That's a great question! I didn't cover this in the blog post, but there is a primitive identical to the increment-by-one presented there, which allows me to decrement-by-one as we…

Thank you. Also, the map is mostly Thorin's, with only slight adaptations :)