3 ms·
I think this attack is less interesting than it sounds, given the specificity of the situation. IF you have a device which can read all the state/secrets on you
by 172327525 2y ago
I think this attack is less interesting than it sounds, given the specificity of the situation. IF you have a device which can read all the state/secrets on your machine AND the only write access it has to your machine is providing bits to use as an RNG seed, THEN (using this article) you can manipulate the output of the RNG, and exfil some data if you want.
I'm struggling to come up with a situation where this would happen.
- sterlind 2y agoLow-level supply chain attacks. Like if the Supermicro story had panned out, or if the Intel RDRAND conspiracy theory were true, or you implanted some evil in an HSM.