4 ms·
While the premise is similar, this is much different from the decades old brownout attacks. The researchers are causing the undervolt with software, not by mani
by bradstewart 7y ago
While the premise is similar, this is much different from the decades old brownout attacks. The researchers are causing the undervolt with software, not by manipulating the supply lines to the chip.
- missosoup 7y agoYes but not really? Intel just made it easier than oldschool hardware attacks: > adversary abuses an undocumented Intel Core voltage scaling interface Instead of having to buy hardware to mess with the power rail in a controlled manner, you can now just do it with a code snippet!
- bradstewart 7y agoAnd you can do it remotely. But the certainly made it easier because this is (presumably) behind the brownout detectors and other circuitry usually attached to the supply lines to combat this sort of stuff.
- Taek 7y agoOne of the major elements of a TEE is that I can send code to an untrusted party and expect it to be executed faithfully. Under that model I have to assume that they have physical access to their own hardware and could do hardware based attacks. Which means the model is just as broken even without it being a software attack.