Can you trust your hardware

Very interesting article, thanks for sharing

Moved from tech issues...

fjryder said it .we,ve been doing it just as long as they have.and others.

fj12ryder wrote:
I remember reading something very similar many years ago about "spying" code used in motherboard chipsets. I have little to no use for the "internet of things". IMO most of those "useful" options are just marketing points, and of very little actual use for the average person. I simply don't need for my refrigerator, microwave, toaster, and doorbell to connect to my network, and thence to the web.

The doorbell is nice. If somebody comes to the door while you are gone, you know it almost immediately. If they are legit, you can talk to them from your phone. If they aren't, you have them on video and know something is up.

old guy wrote:
another reason to buy american

Yeah, good luck with that one. The only difference is who is doing the listening.

another reason to buy american

pnichols wrote:

liborko wrote:
Some interesting news:

EPT article

Thanks a lot for the link to that outstandingly clear and disheartening article!

Unfortunately, there are also some rather significant wrong facts in the article, or at least wrong conclusions.

There are many CPUs available for embedded use that have very well defined timing characteristics; that's the rule, rather than the exception, in that field (at least for low to medium end CPUs).

Spectre / Meltdown sorts of vulnerabilities are not a real concern for car brake systems or many similar things because they don't run arbitrary code in the first place, and don't have a means of introducing outside code. They often might not even have separate process memory spaces to protect from each other.

Undocumented instructions on a processor may or may not prove to be security vulnerabilities, but are probably there for reasons far from nefarious, such as production testing or simply as a side effect of how the processor is designed. Typically I would not expect them to be any more vulnerable to attack than documented instructions.

The "Internet of Things" is a giant recipe for potential trouble, though.

I remember reading something very similar many years ago about "spying" code used in motherboard chipsets. I have little to no use for the "internet of things". IMO most of those "useful" options are just marketing points, and of very little actual use for the average person. I simply don't need for my refrigerator, microwave, toaster, and doorbell to connect to my network, and thence to the web.

I have always wondered, what if these manufactures could just push a button (or issue some sort of command) to just shut everything down........

Baby food, dog food, drywall, lead in toys....nahhh everything is fine, they care about us.