4 ms·

If Qualcomm is implementing it, I'm sure it will on a technical level. Linux is important to AMD and Intel, but Linux-running devices represent nearly all of Qu

If Qualcomm is implementing it, I'm sure it will on a technical level. Linux is important to AMD and Intel, but Linux-running devices represent nearly all of Qualcomm's non-embedded SOC market. Whether vendors can use it to restrict such things, I don't think anyone can say right now, but I would guess and hope not. The TPM does not.

wahern 6y ago
If Qualcomm is implementing it then it should be easy enough to break. Qualcomm's secure enclave software for Android has had an absolutely abysmal security track record. Apple gets all the press precisely because it's such an achievement (well, that and Apple is more well known). Qualcomm hacks have come out like every 6 months for nearly a decade, and nobody cares anymore.
- merb 6y ago
  well apple's enclave is broken aswell. https://arstechnica.com/information-technology/2020/10/apples-t2-security-chip-has-an-unfixable-flaw/ https://arstechnica.com/information-technology/2020/10/apple... well at least it needs physical access.
  - wahern 6y ago
    FWIW, I meant Apple secure enclave hacks get all the attention because they're more of an achievement, at least in terms of published hacks being more rare. I tried to keep track of published Qualcomm breaks--which usually don't require physical access as they involve classic software bugs--several years ago but gave up because they were too numerous yet not as widely publicized. I had plenty of fodder by then, though I try to take mental note of new breaks that [briefly] appear on HN or elsewhere. I was keeping track of hacks for marketing material related to a security startup I was working on. The competition would have principally been smartphone-based authentication apps, both Android and iPhone.
    - whereistimbo 6y ago
      Lol. Even Google had to put Titan M on its Snapdragon based Pixels.
    - The-loan-wolf 6y ago
      A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices (include all major ARM silicon vendor) https://github.com/enovella/TEE-reversing https://github.com/enovella/TEE-reversing

wahern 6y ago

If Qualcomm is implementing it then it should be easy enough to break. Qualcomm's secure enclave software for Android has had an absolutely abysmal security track record. Apple gets all the press precisely because it's such an achievement (well, that and Apple is more well known). Qualcomm hacks have come out like every 6 months for nearly a decade, and nobody cares anymore.

merb 6y ago
well apple's enclave is broken aswell. https://arstechnica.com/information-technology/2020/10/apples-t2-security-chip-has-an-unfixable-flaw/ https://arstechnica.com/information-technology/2020/10/apple... well at least it needs physical access.
- wahern 6y ago
  FWIW, I meant Apple secure enclave hacks get all the attention because they're more of an achievement, at least in terms of published hacks being more rare. I tried to keep track of published Qualcomm breaks--which usually don't require physical access as they involve classic software bugs--several years ago but gave up because they were too numerous yet not as widely publicized. I had plenty of fodder by then, though I try to take mental note of new breaks that [briefly] appear on HN or elsewhere. I was keeping track of hacks for marketing material related to a security startup I was working on. The competition would have principally been smartphone-based authentication apps, both Android and iPhone.
  - whereistimbo 6y ago
    Lol. Even Google had to put Titan M on its Snapdragon based Pixels.
  - The-loan-wolf 6y ago
    A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices (include all major ARM silicon vendor) https://github.com/enovella/TEE-reversing https://github.com/enovella/TEE-reversing