3 ms·
The PSP is a lot slimmer than Intel ME. It also doesn't randomly yank traffic for specific ports from your Ethernet.
by sascha_sl 4y ago
The PSP is a lot slimmer than Intel ME. It also doesn't randomly yank traffic for specific ports from your Ethernet.
- fsflover 4y agoAny good link with the details?
- sascha_sl 4y agoThere was a good talk with an overview (as well as owning it) at 36c3. https://media.ccc.de/v/36c3-10942-uncover_understand_own_-_regaining_control_over_your_amd_cpu https://media.ccc.de/v/36c3-10942-uncover_understand_own_-_r...
- trinsic2 4y agoI havent looked at the presentation yet, but are you saying the PSP, like intels ME could be doing nefarious things since its proprietary and closed? Do you have a link to information on the network capturing thing? I mean is that really a thing? I have heard of these things before but I am not quite sure what the possibilities are. Do you have a link that can summarize what this actual means in terms of security concerns?
- sascha_sl 4y agoCVE-2017-5689
- google234123 4y agoHow do you know there isn't an undiscovered CVE for AMD? There's probably maybe 10x more security research focused on Intel
- sascha_sl 4y agoI don't, but they do a lot less with the PSP, especially if you're just using Ryzen Pro and not server SKUs. Intel put a web interface you can't disable with an offbrand networking gear level RCE vulnerability that needs nothing more than ethernet access into their security chip. I don't think AMD can exceed that anytime soon.