Hardware backdoors in some x86 CPUs
11–20 of 102 posts
Re: Hardware backdoors in some x86 CPUs
#12Re: Hardware backdoors in some x86 CPUs
#13Almost exactly 8 years ago: https://news.ycombinator.com/item?id=17727140
Re: Hardware backdoors in some x86 CPUs
#14This backdoor only appears on decades-old VIA C3 embedded x86 processors
Re: Hardware backdoors in some x86 CPUs
#15This backdoor only appears on decades-old VIA C3 embedded x86 processors
http://datasheets.chipdb.org/VIA/Nehemiah/VIA%20C3%20Nehemia... (page 82)
...which along with the already publicly-known microarchitecture of the C3 makes this statement sound like total nonsense:
The rosenbridge backdoor is a small, non-x86 core embedded alongside the main x86 core in the CPU
I remember laughing at this with a few others knowledgeable in x86 when it first came out; a self-proclaimed "security researcher" who somehow failed to RTFM.
There's even a Wikipedia article about it now, with a link to the alternate instruction set documentation: https://en.wikipedia.org/wiki/Alternate_Instruction_Set
Re: Hardware backdoors in some x86 CPUs
#16Re: Hardware backdoors in some x86 CPUs
#17Interesting codenames: https://en.wikipedia.org/wiki/List_of_VIA_C3_microprocessors
Re: Hardware backdoors in some x86 CPUs
#18Re: Hardware backdoors in some x86 CPUs
#19This backdoor only appears on decades-old VIA C3 embedded x86 processors
It's not even a "backdoor", it's documented in the datasheet... http://datasheets.chipdb.org/VIA/Nehemiah/VIA%20C3%20Nehemia... (page 82) ...which along with the already publicly-known microarchitecture of the C3 makes this statement sound like total nonsense: The rosenbridge backdoor is a small, non-x86 core embedded alongside the main x86 core in the CPU I remember laughing at this with a few others knowledgeable i…
Re: Hardware backdoors in some x86 CPUs
#20This shows that large companies making closed-source CPUs cannot be trusted. No doubt they would add whatever the government asks them to add. What can be done to mitigate this? One option would be to buy a large FPGA and flash it with an open-source CPU. Another would be to emulate a CPU, working with encrypted data and commands, so that even if the backdoor in a host CPU tries to overwrite memory, it would only cra…