3 ms·
The key benefit of injecting at the assembly house is that it means you can target the injections based on the final customer. This reduces the footprint of the
by sjwright 8y ago
The key benefit of injecting at the assembly house is that it means you can target the injections based on the final customer. This reduces the footprint of the attack, which reduces the chances of your exploit being publicly exposed, and reduces the risks inherent in scaling up a highly specialised top secret supply chain.
- solarkraft 8y agoYou're arguing against compromising the boards, right?
- sjwright 8y agoNo. I'm pointing out an advantage in putting the exploit into the supply chain as late as possible, such that it can be selected for based on customer. Compromising the motherboard may be a good approach if the boards have some amount of customisation for each customer.