Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

blog.checkpoint.com

Post reply on HN
Print view View original

11–20 of 120 posts

Re: Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

#11

Post by jandrese »

supernova87a wrote: post #4

I wonder if Apple/others knew about such vulnerabilities, and passed up on using the chip as a risk? Or, was it just dumb luck that they avoided this?

From Apple's perspective Qualcomm has been insufficient for a long time for many reasons, the security issues here would only be one of the many factors involved in the decision to do their own development.

For what it is worth, a modern chip as complex as the A* series is essentially guaranteed to have vulnerabilities. Maybe not 400, but definitely not 0.

Re: Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

#12

Post by walterbell »

SpaceX designed custom SoCs for their isolated offshore/offworld network of Starlink satellites, https://spacenews.com/spacex-accused-of-poaching-chipmakers-...

> Broadcom filed suit ... claiming SpaceX hired a number of Broadcom’s top engineers to develop “a family of sophisticated, customized computer chips.” The two companies had been working together on the development of advanced computer chips for an undisclosed project, but SpaceX ultimately ended the collaboration.

Re: Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

#15

Post by oh_sigh »

walterbell wrote: post #12

SpaceX designed custom SoCs for their isolated offshore/offworld network of Starlink satellites, https://spacenews.com/spacex-accused-of-poaching-chipmakers-... > Broadcom filed suit ... claiming SpaceX hired a number of Broadcom’s top engineers to develop “a family of sophisticated, customized computer chips.” The two companies had been working together on the development of advanced computer chips for an undisclose…

What's your implication here? SpaceX perhaps saw a bunch of security vulns and decided to DIY?

Re: Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

#16

Post by compscistd »

skrowl wrote: post #10
maxdo wrote: post #3

Is there any related data for Apple?

They have a lot too, a new one just popped up a few days ago https://www.bgr.in/news/apple-products-have-a-new-unpatchabl... I'm not sure if anyone has compiled a list of how many

> The report notes that this security flaw is present in all the devices running chips between A7 and A11 Bionic. Apple has already fixed the exploit in A12 and A13 Bionic chips so newer devices are safe.

That's four generations of Apple hardware, the latest being iPhone X and iPhone 8/8 Plus (Sept 2017). The patch being fixed in A12 means the iPhone XR and iPhone XS (and later) are unaffected.

Re: Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

#17

Post by mschuster91 »

Seriously I'm beyond pissed at the state of Android, patches and open-source compliance. If we are lucky 10% of current phone models will get any form of update. The rest will be vulnerable for years until the devices finally break.

And that's only the Qualcomm stuff. There is another CPU vendor beginning with M who is big in el-cheapo hardware - look at their Android kernel leaks, wherever you dig you find horrid, HORRID code.

Google should mandate full open source disclosure of all GPL'd components as part of the Play Store certification and unlockable bootloaders, otherwise this shit is never going to change.

Re: Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

#18

Post by saagarjha »

DudeInBasement wrote: post #5
supernova87a wrote: post #4

I wonder if Apple/others knew about such vulnerabilities, and passed up on using the chip as a risk? Or, was it just dumb luck that they avoided this?

If you have connections to the real infosec world. They'd avoid it.

Not sure what you mean?

Re: Over 400 vulnerabilities on Qualcomm’s Snapdragon chip

#20

Post by daneel_w »

mschuster91 wrote: post #17

Seriously I'm beyond pissed at the state of Android, patches and open-source compliance. If we are lucky 10% of current phone models will get any form of update. The rest will be vulnerable for years until the devices finally break. And that's only the Qualcomm stuff. There is another CPU vendor beginning with M who is big in el-cheapo hardware - look at their Android kernel leaks, wherever you dig you find horrid, H…

Are you referring to the fabless bunch whose name starts with M and ends with ediaTek? :)
Post reply on HN