36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware
media.ccc.de2 HN recommenders · recommended in 3 months, 2020-2023
13K views · 6 years ago · talk · evergreen
A 36C3 talk by Bunnie Huang arguing that open source is necessary but not sufficient for trustworthy hardware, because verifying hardware is destructive and so creates a time-of-check/time-of-use gap. It surveys supply chain security and classes of hardware attacks, and presents the Betrusted approach to narrowing that gap.
HN commenters point to it whenever the question is how far hardware can be trusted, including FPGAs, supply chain attacks and firmware TPMs.
1:02:52Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops
media.ccc.de
27K views • 10 years ago
45:38BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”
Microsoft Israel R&D Center
21K views • 7 years ago
53:0236C3 - A systematic evaluation of OpenBSD's mitigations
media.ccc.de
18K views • 6 years ago
36:5235C3 - Modchips of the State
media.ccc.de
41K views • 7 years ago
56:3736C3 - Uncover, Understand, Own - Regaining Control Over Your AMD CPU
media.ccc.de
23K views • 6 years ago
40:0238C3 - From Silicon to Sovereignty: How Advanced Chips are Redefining Global Dominance
media.ccc.de
11K views • 1 year ago
14:26OSCON 2011: Karen Sandler
O'Reilly
15K views • 15 years ago
![[FOSSi Dial-Up] Tim Ansell - Skywater PDK: Fully open source manufacturable PDK for a 130nm process](https://i.ytimg.com/vi/EczW2IWdnOM/hq2.jpg)
1:35:45[FOSSi Dial-Up] Tim Ansell - Skywater PDK: Fully open source manufacturable PDK for a 130nm process
FOSSi Foundation
34K views • 6 years ago
59:2328c3: The Science of Insecurity
28c3
42K views • 14 years ago
56:5034C3 - Console Security - Switch
media.ccc.de
135K views • 8 years ago
54:51Keynote - Karen Sandler
Linux.conf.au 2012 -- Ballarat, Australia
20K views • 14 years ago
53:44Console Hacking 2016 (33c3)
media.ccc.de
166K views • 9 years ago
46:04DEF CON 26 - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x86
DEFCONConference
86K views • 8 years ago
43:0336C3 - The ecosystem is moving
media.ccc.de
2K views • 6 years ago
3:31Trusted Computing? Yes or No
Robin Good
47K views • 20 years ago
58:37NVIDIA — Securing the Future of Safety and Security of Embedded Software (Captioned)
AdaCore
5K views • 5 years ago
4:30Matthew Driver “Trust Is A Critical Component” | Perspectives | Channel NewsAsia
CNA Insider
27K views • 11 years ago
51:00GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs
Black Hat
319K views • 8 years ago
37:47Experiences Building Edge TPU with Chisel
Chisel
11K views • 7 years ago
46:22DEF CON 19 - Moxie Marlinspike - SSL And The Future Of Authenticity
DEFCONConference
11K views • 13 years ago
4 comments from Hacker News
As I'm sure you're aware FPGAs are nice because they can complicate things for an attacker in the physical supply chain. Andrew "bunnie" Huang did an excellent talk on the subject: ▶ this video
There’s really no way to ever be 100% sure of hardware. Sure we could use FPGAs for all hardware and then the hardware “source” is software, but who makes the FPGAs? There’s techniques even under X-ray to mask a rogue chip. ▶ this video
Here's an excellent talk that addresses your question: Open Source is Insufficient to Solve Trust Problems in Hardware [1]. [1] ▶ this video
Here's an excellent talk that addresses your question: Open Source is Insufficient to Solve Trust Problems in Hardware [1]. [1] ▶ this video