ConfiksNov 2020Strongly recommends
Here's an excellent talk that addresses your question: Open Source is Insufficient to Solve Trust Problems in Hardware [1]. [1] ▶ this video
in “Bunnie's Precursor Crowdfunding Begins” · View on HN
36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware
36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware on HackerTube: recommended by 2 Hacker News commenters across 3 separate months, 2020–2023.
media.ccc.de
Open on YouTubetalk · intermediate · evergreen
A 36C3 talk by Bunnie Huang arguing that open source is necessary but not sufficient for trustworthy hardware, because verifying hardware is destructive and so creates a time-of-check/time-of-use gap. It surveys supply chain security and classes of hardware attacks, and presents the Betrusted approach to narrowing that gap.
Why Hacker News recommends it
HN commenters point to it whenever the question is how far hardware can be trusted, including FPGAs, supply chain attacks and firmware TPMs.
- people recommended it
- 2
- separate months
- 3
- strong recommendations
- 2
- discussed on HN
- 2020–2023
“Here's an excellent talk that addresses your question”
What HN commenters said
4 Hacker News comments link this video. Each one links back to its thread.
ConfiksMay 2020Strongly recommends
Here's an excellent talk that addresses your question: Open Source is Insufficient to Solve Trust Problems in Hardware [1]. [1] ▶ this video
in “OpenTitan RTL Synthesis with Yosys” · View on HN
kfredsMay 2023Recommends
As I'm sure you're aware FPGAs are nice because they can complicate things for an attacker in the physical supply chain. Andrew "bunnie" Huang did an excellent talk on the subject: ▶ this video
in “AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defeating Disk Encryption” · View on HN
skinner927Nov 2021Cites it
There’s really no way to ever be 100% sure of hardware. Sure we could use FPGAs for all hardware and then the hardware “source” is software, but who makes the FPGAs? There’s techniques even under X-ray to mask a rogue chip. ▶ this video
in “U.S. telecoms are going to start physically removing Huawei gear” · View on HN
Topics & tags
Security & hackingSemiconductors & chip manufacturingHacker culture & free softwarehardware securitysupply chainfpgaopen hardwarebetrustedtoctou