nikolaon Lobsters • Recommends
Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops
0:00 / 0:00
Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops
media.ccc.de
274K subscribers • 56 videos on Hallway • Conference channel
- Recommended by 3 people: 2 on Hacker News and 1 on Lobsters.
- Presented by Joanna Rutkowska, founder of Qubes OS
Advanced. Deep dive for people who know the field.
27K views10 years ago3 recommendations
SecurityHardwareCPUs and computer architectureWeb and application securityExploits and vulnerabilities
Joanna Rutkowska discusses the security challenges of the x86 platform, focusing on firmware, Intel Management Engine, and building trustworthy client systems.
Can we build trustworthy client systems on x86 hardware? What are the main challenges? What can we do about them, realistically? Is there anything we can? Joanna RutkowskaWhy it's here
3 people recommend thisWhat people say. Recommended as an essential talk on the deep security vulnerabilities inherent in modern x86 hardware and firmware.
dlmetcalfon Hacker News • Recommends
On “Intel and ME, and why we should get rid of ME”
Wow, no one here has mentioned Johanna Rutkovska's (Invisible Things Lab & QubesOS), "Intel x86 Considered Harmful"? link link Essential reading!! link to this video
kriroon Hacker News • Recommends
On “The Intel ME subsystem can take over your machine, can't be audited”
Joanna Rutkowska has written a nice paper on the topic, highly recommended: link Edit: There's also a talk from 32c3 for those more inclined to watch a video. I am pretty worried ever since I watched that: link to this video (which is why I have researched non-Intel laptop alternatives..cliffnotes: GPUs without BLOBs are hard to find and there will be some severe tradeoffs which is expected)
mopplon Hacker News • Mentions
On “Who controls your computer? and how to make sure it's you”
The article is dated. The game changed fundamentally with the introduction of the Intel Management Engine (or the AMD Platform Security Processor) on the x86 platform. The system is now "deep pwned" as described in point 3.1.1 of the article. The manufacturer has ultimate control of the platform, the user has been disowned. link link to this video link link
emily-con Hacker News • Mentions
On “Exploiting Intel’s Management Engine”
…be a standard way to verify and measure all the various firmware images (and potentially option ROMs which would be theoretically measured with SRTM via UEFI) for these system processors during boot during a DRTM event (with Intel's STM/AMD SMM supervisor enabled as well) but there is a long way to go for that. 1 link 2 link 3 link 4 link to this video…