4 ms·
> If you update your CPU microcode to something that can't be checked, you're already sacrificing security. You're not sacrificing security, you're making a tr
by pdpi 5y ago
> If you update your CPU microcode to something that can't be checked, you're already sacrificing security.
You're not sacrificing security, you're making a tradeoff.
If I update my CPU microcode to something I can't check myself, I'm explicitly choosing to trust my CPU provider, under the assumption that the risk of a microcode-based attack from my CPU provider is smaller than the risk of a cpu bug-based attack by an unknown attacker.
- Qwertious 5y ago>You're not sacrificing security, you're making a tradeoff. If you don't trust your CPU provider then you have zero security from them already. Even if the entire design of the CPU is open-source. https://www.bunniestudios.com/blog/?p=5706 https://www.bunniestudios.com/blog/?p=5706