[Tom's Hardware] AMD Secure Technology PSP Firmware Now Explorable, Thanks to Researcher's Tool - Overclock.net - An Overclocking Community
Forum Jump: 

[Tom's Hardware] AMD Secure Technology PSP Firmware Now Explorable, Thanks to Researcher's Tool

Reply
 
Thread Tools
post #1 of 20 (permalink) Old 06-23-2019, 10:12 PM - Thread Starter
sudo apt install sl
 
Join Date: Dec 2009
Posts: 6,802
Rep: 191 (Unique: 131)
[Tom's Hardware] AMD Secure Technology PSP Firmware Now Explorable, Thanks to Researcher's Tool

Source: https://www.tomshardware.com/news/ps...are,39590.html

Quote:
A security researcher this week released the PSPtool, a software tool that “aims to lower the entry barrier for looking into the code running" on the AMD Platform Security Processor (PSP), officially known as AMD Secure Technology, and other AMD subsystems. The PSP serves similar functions to those of Intel’s Management Engine (ME) processor. However, just like the Intel ME, the secretive and undocumented nature of the chip worries security and privacy advocates.

Previous Intel ME and AMD PSP vulnerabilities were also discovered by such researchers, and similar discoveries are likely to come in the future. If Intel or AMD had ever built any tools or left any security holes that could allow intelligence agencies to hack into any computer they want, now may be a good time to remove or close them. Because we’re likely not going back to a world of obscurity in regards to how microprocessors work and what they do to our PCs in the background.

Silent
(20 items)
CPU
Core i9 9900K... CoffeeTime! @ 5.1Ghz w/ 1.36v
Motherboard
Maximus VIII Formula
GPU
Titan RTX @ 2100Mhz/2075Mhz
RAM
TeamGroup Xtreem 32GB 3200Mhz CL15
Hard Drive
HP EX950 2TB
Hard Drive
Samsung 850 Evo 1TB
Hard Drive
Samsung 850 Evo 1TB
Power Supply
EVGA SuperNova 1200w P2
Cooling
EK Supremacy Full Copper Clean
Cooling
XSPC D5 Photon v2
Cooling
Black Ice Gen 2 GTX360 x2
Cooling
EK-Vector RTX RE Ti - Copper + Plexi
Case
Thermaltake Core X5 Tempered Glass Edition
Operating System
Solus Linux
Monitor
Acer XF270HUA
Keyboard
Cherry MX Board 6.0
Mouse
Logitech G600
Mouse
Alugraphics GamerArt
Audio
Definitive Technology Incline
Audio
SMSL M8A
▲ hide details ▲
WannaBeOCer is offline  
Sponsored Links
Advertisement
 
post #2 of 20 (permalink) Old 06-24-2019, 04:13 PM
BOINC Cruncher
 
Diffident's Avatar
 
Join Date: Apr 2014
Location: Bawlmer, MD
Posts: 1,775
Rep: 110 (Unique: 72)
Last year there was a community push for AMD to open source the PSP, AMD said they would look into it but they eventually said no. Open sourcing the PSP would allow the use of coreboot/libreboot with newer processors and plug any possible holes.

I just installed the tool.

This is from an Asrock X370 Tachi 5.50 UEFI


Code:
+-----------+---------+------+-----------+---------------------+
| Directory |   Addr  | Type |   Magic   | Secondary Directory |
+-----------+---------+------+-----------+---------------------+
|     0     | 0x21000 | XHCI | \x80\xf8 |          --         |
+-----------+---------+------+-----------+---------------------+
Warning: Parsing of b'\x80\x07\xf8\x00' not supported.


+-----------+---------+---------+-------+---------------------+
| Directory |   Addr  |   Type  | Magic | Secondary Directory |
+-----------+---------+---------+-------+---------------------+
|     1     | 0xa8000 | PSP_DIR |  $PSP |          --         |
+-----------+---------+---------+-------+---------------------+
+---+-------+----------+------------+-----------------------------+----------+----------------+------------+
|   | Entry |  Address |       Size | Type (Magic)                |  Version |      Signed by |       Info |
+---+-------+----------+------------+-----------------------------+----------+----------------+------------+
|   |     0 |  0xa9000 |      0x240 | AMD_PUBLIC_KEY              |          | AMD_PUBLIC_KEY |     pubkey |
|   |     1 |  0xe0000 |     0x8000 | PSP_FW_BOOT_LOADER (o.)     | 0.5.0.45 | AMD_PUBLIC_KEY |            |
|   |     2 |  0xe8000 |    0x14000 | SMU_OFFCHIP_FW              |  0.0.0.0 |                | compressed |
|   |     3 |  0xaa000 |     0x6000 | PSP_FW_RECOVERY_BOOT_LOADER | 0.5.0.45 | AMD_PUBLIC_KEY |            |
|   |     4 | 0xfff000 |     0x1000 | BIOS_RTM_FIRMWARE           |          |                |            |
|   |     5 |  0xfc000 |    0x24000 | PSP_FW_TRUSTED_OS (&)       | 0.5.0.45 | AMD_PUBLIC_KEY | compressed |
|   |     6 |  0x87000 |    0x10000 | PSP_NV_DATA                 |          |                |            |
|   |     7 | 0x120000 |    0x14000 | PSP_SMU_FN_FIRMWARE         |  0.0.0.0 |                | compressed |
|   |     8 |  0xb0000 |      0x340 | AMD_SEC_DBG_PUBLIC_KEY      |          | AMD_PUBLIC_KEY |     pubkey |
|   |     9 |      0x1 | 0xffffffff | AMD_SOFT_FUSE_CHAIN_01      |          |                |            |
|   |    10 |  0xb1000 |      0x340 | PSP_BOOT_TIME_TRUSTLETS_KEY |          | AMD_PUBLIC_KEY |     pubkey |
|   |    11 | 0x134000 |     0x8000 | PSP_AGESA_RESUME_FW         | 0.5.0.3E | AMD_PUBLIC_KEY | compressed |
|   |    12 | 0x13c000 |     0xb000 | SMU_OFF_CHIP_FW_2           |  0.0.0.0 |                | compressed |
|   |    13 | 0x147000 |    0x20000 | !PSP_MCLF_TRUSTLETS         |  0.0.0.0 |                | compressed |
|   |    14 | 0x167000 |     0xb000 | !SMU_OFF_CHIP_FW_3          |  0.0.0.0 |                | compressed |
|   |    15 | 0x172000 |     0x1000 | FW_PSP_SMUSCS               |          |                |            |
|   |    16 | 0x173000 |     0x1000 | !FW_PSP_SMUSCS_2            |          |                |            |
|   |    17 | 0x174000 |     0x3000 | PSP_S3_NV_DATA              |          |                |  duplicate |
+---+-------+----------+------------+-----------------------------+----------+----------------+------------+


+-----------+----------+---------+-------+---------------------+
| Directory |   Addr   |   Type  | Magic | Secondary Directory |
+-----------+----------+---------+-------+---------------------+
|     2     | 0x48f000 | PSP_NEW |  $PSP |          --         |
+-----------+----------+---------+-------+---------------------+
+---+-------+----------+------------+--------------------------------+-------------+----------------+------------+
|   | Entry |  Address |       Size | Type (Magic)                   |     Version |      Signed by |       Info |
+---+-------+----------+------------+--------------------------------+-------------+----------------+------------+
|   |     0 | 0x48f400 |      0x440 | AMD_PUBLIC_KEY                 |             | AMD_PUBLIC_KEY |     pubkey |
|   |     1 | 0x48f900 |    0x10000 | PSP_FW_BOOT_LOADER ($PS1)      |    0.D.0.15 | AMD_PUBLIC_KEY |            |
|   |     2 | 0x49f900 |     0xe3d0 | PSP_FW_TRUSTED_OS ($PS1)       |    0.D.0.15 | AMD_PUBLIC_KEY |            |
|   |     3 |  0x87000 |    0x20000 | PSP_NV_DATA                    |             |                |  duplicate |
|   |     4 | 0x4add00 |    0x17900 | SMU_OFFCHIP_FW ($PS1)          |    0.2E.B.0 |                | compressed |
|   |     5 | 0x4c5600 |      0x640 | AMD_SEC_DBG_PUBLIC_KEY         |             | AMD_PUBLIC_KEY |     pubkey |
|   |     6 |      0x1 | 0xffffffff | AMD_SOFT_FUSE_CHAIN_01         |             |                |            |
|   |     7 | 0x4c5d00 |    0x1c100 | PSP_BOOT_TIME_TRUSTLETS ($PS1) |     0.7.0.1 |                |            |
|   |     8 | 0x4e1e00 |      0x420 | SMU_OFF_CHIP_FW_2 ($PS1)       |    0.2E.B.0 |                | compressed |
|   |     9 | 0x4e2300 |     0x1da0 | 0x13 ($PS1)                    |    0.D.0.15 | AMD_PUBLIC_KEY | compressed |
|   |    10 | 0x4e4100 |       0x10 | 0x21                           |             |                |            |
|   |    11 | 0x4e5000 |     0x1000 | 0x22                           |             |                |  duplicate |
|   |    12 | 0x4e6000 |     0x2440 | 0x24 ($PS1)                    |    1.C.0.31 | AMD_PUBLIC_KEY |            |
|   |    13 | 0x4e8500 |    0x13890 | 0x28 ($PS1)                    |    0.D.0.15 | AMD_PUBLIC_KEY |            |
|   |    14 | 0x4fbe00 |     0xbf10 | 0x2a ($PS1)                    |    0.2E.B.0 |                | compressed |
|   |    15 | 0x507e00 |    0x81d90 | 0x30 (@AW)                     | 91.16.20.40 | AMD_PUBLIC_KEY | compressed |
+---+-------+----------+------------+--------------------------------+-------------+----------------+------------+


+-----------+----------+---------+-------+---------------------+
| Directory |   Addr   |   Type  | Magic | Secondary Directory |
+-----------+----------+---------+-------+---------------------+
|     3     | 0x310000 | PSP_NEW |  $PSP |          --         |
+-----------+----------+---------+-------+---------------------+
+---+-------+----------+------------+--------------------------------+-----------+----------------+------------+
|   | Entry |  Address |       Size | Type (Magic)                   |   Version |      Signed by |       Info |
+---+-------+----------+------------+--------------------------------+-----------+----------------+------------+
|   |     0 | 0x310400 |      0x240 | AMD_PUBLIC_KEY                 |           | AMD_PUBLIC_KEY |     pubkey |
|   |     1 | 0x310700 |     0xc300 | PSP_FW_BOOT_LOADER ($PS1)      |  0.8.0.5E | AMD_PUBLIC_KEY | encrypted? |
|   |     2 | 0x31ca00 |     0xf300 | PSP_FW_TRUSTED_OS ($PS1)       |  0.8.0.5E | AMD_PUBLIC_KEY |            |
|   |     3 |  0x87000 |    0x20000 | PSP_NV_DATA                    |           |                |  duplicate |
|   |     4 | 0x32bd00 |    0x203d0 | SMU_OFFCHIP_FW                 |   0.0.0.0 | AMD_PUBLIC_KEY | compressed |
|   |     5 | 0x34c100 |      0x340 | AMD_SEC_DBG_PUBLIC_KEY         |           | AMD_PUBLIC_KEY |     pubkey |
|   |     6 |      0x1 | 0xffffffff | AMD_SOFT_FUSE_CHAIN_01         |           |                |            |
|   |     7 | 0x34c500 |    0x11a50 | PSP_BOOT_TIME_TRUSTLETS ($PS1) |   0.7.0.1 | AMD_PUBLIC_KEY | compressed |
|   |     8 | 0x35e000 |     0x48e0 | SMU_OFF_CHIP_FW_2              |   0.0.0.0 | AMD_PUBLIC_KEY | compressed |
|   |     9 | 0x362900 |     0x1930 | 0x13 ($PS1)                    |  0.8.0.5E | AMD_PUBLIC_KEY | compressed |
|   |    10 | 0x364300 |       0x10 | 0x21                           |           |                |            |
|   |    11 | 0x365000 |     0x1000 | 0x22                           |           |                |  duplicate |
|   |    12 | 0x366000 |     0x1860 | 0x24 ($PS1)                    |  A.2.3.27 | AMD_PUBLIC_KEY | encrypted? |
|   |    13 | 0x367900 |     0x1760 | 0x124 ($PS1)                   |  A.2.3.1A | AMD_PUBLIC_KEY | encrypted? |
|   |    14 | 0x369100 |     0x1860 | 0x224 ($PS1)                   |  A.2.3.27 | AMD_PUBLIC_KEY |  duplicate |
|   |       |          |            |                                |           |                | encrypted? |
|   |    15 | 0x36aa00 |     0x22f1 | 0x25                           |  3.18.0.1 |                |            |
|   |    16 | 0x36cd00 |     0x3b00 | 0x125                          |   3.2.2.1 |                |            |
|   |    17 | 0x370800 |     0x23e4 | 0x225                          |   4.2.1.1 |                |            |
|   |    18 | 0x372c00 |    0x18790 | 0x28 ($PS1)                    |  0.8.0.5E | AMD_PUBLIC_KEY | encrypted? |
|   |    19 | 0x38b400 |      0xdd0 | 0x30 (AW0B)                    | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    20 | 0x38c200 |     0xcc30 | 0x31~ABL_ARM_CODE~ (AW1B)      | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    21 | 0x398f00 |     0x91c0 | 0x32 (AW2B)                    | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    22 | 0x3a2100 |     0xbc00 | 0x33 (AW3B)                    | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    23 | 0x3add00 |     0xcca0 | 0x34 (AW4B)                    | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    24 | 0x3baa00 |     0xca80 | 0x35 (AW5B)                    | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    25 | 0x3c7500 |     0x9fa0 | 0x36 (AW6B)                    | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    26 | 0x3d1500 |     0xc720 | 0x37 (AW7B)                    | 19.1.14.0 | AMD_PUBLIC_KEY | compressed |
|   |    27 | 0x3ddd00 |    0x20420 | PSP_SMU_FN_FIRMWARE            |   0.0.0.0 | AMD_PUBLIC_KEY | compressed |
|   |    28 | 0x3fe200 |     0x4f90 | !SMU_OFF_CHIP_FW_3             |   0.0.0.0 | AMD_PUBLIC_KEY | compressed |
|   |    29 | 0x403200 |    0x22550 | 0x208                          |   0.0.0.0 | AMD_PUBLIC_KEY | compressed |
|   |    30 | 0x425800 |     0x7190 | 0x212                          |   0.0.0.0 | AMD_PUBLIC_KEY | compressed |
+---+-------+----------+------------+--------------------------------+-----------+----------------+------------+


+-----------+----------+------+-------+---------------------+
| Directory |   Addr   | Type | Magic | Secondary Directory |
+-----------+----------+------+-------+---------------------+
|     4     | 0x2f0000 | BHD  |  $BHD |          --         |
+-----------+----------+------+-------+---------------------+
+---+-------+----------+----------+---------------------+-----------+-----------+------------+
|   | Entry |  Address |     Size | Type (Magic)        |   Version | Signed by |       Info |
+---+-------+----------+----------+---------------------+-----------+-----------+------------+
|   |     0 | 0x2f1000 |   0x2000 | 0x100060            |           |           |            |
|   |     1 | 0x2f3000 |   0x2000 | 0x100068            |           |           |  duplicate |
|   |     2 | 0x2f5000 |   0x2000 | FW_IMC              |           |           |            |
|   |     3 | 0x2f7000 |   0x2000 | 0x200060            |           |           |            |
|   |     4 | 0x2f9000 |   0x2000 | 0x68                |           |           |  duplicate |
|   |     5 | 0x2fb000 |   0x2000 | 0x200068            |           |           |  duplicate |
|   |     6 |      0x0 |      0x0 | FW_GEC              |           |           |            |
|   |     7 | 0xd00000 | 0x300000 | 0x30062~UEFI-IMAGE~ |           |           |            |
|   |     8 |  0xb8000 |  0x28000 | FW_INVALID          |           |           |  duplicate |
|   |     9 | 0x2fd000 |    0xc80 | 0x66                |           |           |            |
|   |    10 | 0x2fdd00 |    0xc80 | 0x100066            |           |           |            |
|   |    11 | 0x2fea00 |    0xc80 | 0x200066            |           |           |            |
|   |    12 | 0x2ff700 |    0xc80 | 0x300066            |           |           |            |
|   |    13 | 0x300400 |    0xc80 | 0x400066            |           |           |            |
|   |    14 | 0x301100 |   0x3c40 | 0x100064 (0x05)     | 0.0.A1.41 |           | compressed |
|   |    15 | 0x304e00 |    0x330 | 0x100065 (0x05)     | 0.0.A1.41 |           | compressed |
|   |    16 | 0x305200 |   0x4610 | 0x400064 (0x05)     | 0.0.A1.41 |           | compressed |
|   |    17 | 0x309900 |    0x320 | 0x400065 (0x05)     | 0.0.A1.41 |           | compressed |
|   |    18 | 0x30a000 |   0x1000 | 0x67                |           |           |  duplicate |
+---+-------+----------+----------+---------------------+-----------+-----------+------------+


+-----------+----------+---------+-------+---------------------+
| Directory |   Addr   |   Type  | Magic | Secondary Directory |
+-----------+----------+---------+-------+---------------------+
|     5     | 0x45f000 | unknown |  $BHD |          --         |
+-----------+----------+---------+-------+---------------------+
+---+-------+----------+----------+---------------------+-----------+----------------+------------+
|   | Entry |  Address |     Size | Type (Magic)        |   Version |      Signed by |       Info |
+---+-------+----------+----------+---------------------+-----------+----------------+------------+
|   |     0 | 0x460000 |   0x2000 | 0x100060 (5)        |   0.3.9.1 |                |            |
|   |     1 | 0x462000 |   0x2000 | 0x100068 (5)        |   0.3.9.1 |                |  duplicate |
|   |     2 | 0x464000 |   0x2000 | FW_IMC              |   0.3.9.1 |                |            |
|   |     3 | 0x466000 |   0x2000 | 0x68                |   0.3.9.1 |                |  duplicate |
|   |     4 |      0x0 |      0x0 | FW_GEC              |           |                |            |
|   |     5 | 0xd00000 | 0x300000 | 0x30062~UEFI-IMAGE~ |           |                |            |
|   |     6 |  0xb8000 |  0x28000 | FW_INVALID          |           |                |  duplicate |
|   |     7 | 0x468000 |   0x3c40 | 0x100064 (0x05)     | 0.0.A1.41 | AMD_PUBLIC_KEY | compressed |
|   |     8 | 0x46bd00 |    0x330 | 0x100065 (0x05)     | 0.0.A1.41 | AMD_PUBLIC_KEY | compressed |
|   |     9 | 0x46c100 |   0x4610 | 0x400064 (0x05)     | 0.0.A1.41 | AMD_PUBLIC_KEY | compressed |
|   |    10 | 0x470800 |    0x320 | 0x400065 (0x05)     | 0.0.A1.41 | AMD_PUBLIC_KEY | compressed |
|   |    11 | 0x470c00 |   0x4830 | 0x1100064 (0x05)    |  0.0.18.5 | AMD_PUBLIC_KEY | compressed |
|   |    12 | 0x475500 |    0x370 | 0x1100065 (0x05)    |  0.0.18.5 | AMD_PUBLIC_KEY | compressed |
|   |    13 | 0x475900 |   0x47a0 | 0x1400064 (0x05)    |  0.0.18.5 | AMD_PUBLIC_KEY | compressed |
|   |    14 | 0x47a100 |    0x340 | 0x1400065 (0x05)    |  0.0.18.5 | AMD_PUBLIC_KEY | compressed |
|   |    15 | 0x47a500 |    0xc80 | 0x66                |           |                |            |
|   |    16 | 0x47b200 |    0xc80 | 0x100066            |           |                |            |
|   |    17 | 0x47bf00 |    0xc80 | 0x200066            |           |                |            |
|   |    18 | 0x47cc00 |    0xc80 | 0x300066            |           |                |            |
|   |    19 | 0x47d900 |    0xc80 | 0x400066            |           |                |            |
|   |    20 | 0x47e600 |    0xc80 | 0x500066            |           |                |            |
|   |    21 | 0x47f300 |    0x560 | 0x6a                |   0.0.0.0 |                |            |
+---+-------+----------+----------+---------------------+-----------+----------------+------------+


+-----------+----------+---------+-------+---------------------+
| Directory |   Addr   |   Type  | Magic | Secondary Directory |
+-----------+----------+---------+-------+---------------------+
|     6     | 0x62f000 | unknown |  $BHD |          --         |
+-----------+----------+---------+-------+---------------------+
+---+-------+----------+----------+---------------------+----------+----------------+------------+
|   | Entry |  Address |     Size | Type (Magic)        |  Version |      Signed by |       Info |
+---+-------+----------+----------+---------------------+----------+----------------+------------+
|   |     0 | 0x630000 |   0x4000 | 0x68                |          |                |            |
|   |     1 | 0x634000 |   0x1000 | FW_IMC (0)          |  0.0.0.0 |                |            |
|   |     2 | 0x635000 |    0x208 | 0x800068 (0)        |  0.0.0.0 |                |  duplicate |
|   |     3 |      0x0 |      0x0 | FW_GEC              |          |                |            |
|   |     4 | 0xd00000 | 0x300000 | 0x30062~UEFI-IMAGE~ |          |                |            |
|   |     5 |  0xb8000 |  0x28000 | FW_INVALID          |          |                |  duplicate |
|   |     6 | 0x635300 |   0x4930 | 0x1100064 (0x05)    | 0.0.10.0 | AMD_PUBLIC_KEY | compressed |
|   |     7 | 0x639d00 |    0x460 | 0x1100065 (0x05)    | 0.0.10.0 | AMD_PUBLIC_KEY | compressed |
|   |     8 | 0x63a200 |   0x4bd0 | 0x1400064 (0x05)    | 0.0.10.0 | AMD_PUBLIC_KEY | compressed |
|   |     9 | 0x63ee00 |    0x440 | 0x1400065 (0x05)    | 0.0.10.0 | AMD_PUBLIC_KEY | compressed |
|   |    10 | 0x63f300 |    0xc80 | 0x66                |          |                |            |
+---+-------+----------+----------+---------------------+----------+----------------+------------+


+-----------+----------+---------+----------+---------------------+
| Directory |   Addr   |   Type  |  Magic   | Secondary Directory |
+-----------+----------+---------+----------+---------------------+
|     7     | 0xfffffe | unknown | \xd0\xff |          --         |
+-----------+----------+---------+----------+---------------------+
Warning: Parsing of b'\xd0\xff' not supported.

Team Boinc! - Forum Folding War Team
Gentoo Linux - Telemetry Free Since 1999!
Washington Capitals 2018 Stanley Cup Champions
Boinc Desktop
(15 items)
CrunchAholic
(10 items)
NAS
(7 items)
CPU
AMD Ryzen 7 1700X
Motherboard
ASRock X370 Taichi
GPU
AMD Radeon VII
RAM
HyperX Predator
Hard Drive
Samsung 970 EVOPlus
Power Supply
EVGA 850 G2
Cooling
Watercool Heatkiller IV PRO AM4 CPU Block
Cooling
EKWB Coolstream XE 240 Radiator
Cooling
EKWB Coolstream PE 360 Radiator
Cooling
Watercool Heatkiller 150mm Tube Res
Case
Thermaltake View 31 Tempered Glass RGB Edition
Operating System
Gentoo Linux
Monitor
Alienware AW3418DW
Keyboard
Coolermaster Masterkeys Pro S
Mouse
Roccat Kone EMP
CPU
Intel Xeon E5-2670
CPU
Intel Xeon E5-2670
Motherboard
Asrock Rack EP2C602
GPU
EVGA 1070ti FTW
GPU
EVGA 1070ti FTW
RAM
64 GBs Samsung M939B1K70CHD-CH9 PC3-10600R
Hard Drive
Samsung HD322HJ
Power Supply
Corsair AX1200
Case
Rosewill RSV-L4000
Operating System
Gentoo Linux
CPU
i3-4130T
Motherboard
GIGABYTE GA-H97N-WIFI
RAM
CORSAIR CMX16GX3M2A1600C11
Hard Drive
Western Digital Red 10 TB x3
Hard Drive
Western Digital Red 8 TB
Case
Fractal Design Node 804
Operating System
Gentoo Linux
▲ hide details ▲


Diffident is offline  
post #3 of 20 (permalink) Old 06-25-2019, 08:53 AM
Watercooler
 
Join Date: Jun 2013
Location: North Carolina
Posts: 513
Rep: 34 (Unique: 28)
Wouldn't making something like this open source also allow those with malicious intent an open look into the code, therefore allowing them to more easily create exploits? Also couldn't it be possible that open source additions could also create problems of their own?

Expansionist
(17 items)
CPU
Intel Core i7 5930K
Motherboard
EVGA X99 FTW K
GPU
NVIDIA GeForce GTX 980 K|NGP|N
GPU
NVIDIA GeForce GTX 980 K|NGP|N
RAM
G.Skill Trident Z
Hard Drive
Western Digital Black 4TB
Hard Drive
Samsung 950 Pro NVMe SSD
Optical Drive
Pioneer BDXL Blu-Ray
Power Supply
Seasonic X1250W
Cooling
Custom Liquid Cooling System
Case
CaseLabs Merlin ST10
Operating System
Windows 10 Pro
Monitor
Dell S2716DG
Keyboard
Azio - Armato
Mouse
Mionix Castor
Mouse
EVGA
Audio
Creative Labs Blaster ZX
▲ hide details ▲
Questors is offline  
Sponsored Links
Advertisement
 
post #4 of 20 (permalink) Old 06-25-2019, 10:00 AM
Top kek
 
Join Date: Oct 2013
Location: Bulgaria , Sofia
Posts: 3,545
Rep: 121 (Unique: 72)
Quote: Originally Posted by Questors View Post
Wouldn't making something like this open source also allow those with malicious intent an open look into the code, therefore allowing them to more easily create exploits? Also couldn't it be possible that open source additions could also create problems of their own?
Well, security through obscurity does work. Until, it gets breached once. Then, probably not.

Previous Hardware:
Spoiler!
Main rig
(16 items)
Parents (2nd) PC
(13 items)
CPU
AMD R7 1700
Motherboard
ASRock X570 Fatal1ty Gaming K4
GPU
Sapphire RX480 4GB Nitro+
RAM
Corsair Vengeance LPX 2x8GB 3200Mhz
Hard Drive
Corsair ForceLS SSD
Hard Drive
250GB Maxtor SATA 7200RPM 8MB
Hard Drive
250GB Seagate Baracuda SATA 7200RPM 8MB
Hard Drive
500GB WesternDigital Blue 7200RPM 16MB
Power Supply
Corsair TX850M
Cooling
Cooler Master 212 EVO
Case
Thermaltake View 27
Operating System
Windows 10 x64 1607
Monitor
AOC i2267FWH 21.5" 1080p IPS
Keyboard
Logitech K120
Mouse
A4 Tech Bloody v5
Audio
Corsair HS30 Raptor
CPU
AMD FX-8320
Motherboard
ASRock Fatal1ty 990FX Killer
GPU
XFX RX470 4GB SingleFan
RAM
Mushkin Redline 996996 2x4GB 2133Mhz
Hard Drive
Western Digital Green 500GB 7200RPM 8MB
Hard Drive
120GB Kingston SSD
Optical Drive
ASUS DVD+RW x52
Power Supply
Corsair VS650
Cooling
ThermalTake Frio Silent 14
Case
DeepCool Tesseract
Operating System
Windows 10 Enterprise 1607
Monitor
ASUS VS228H 21.5"
Keyboard
Logitech K120
▲ hide details ▲
ku4eto is offline  
post #5 of 20 (permalink) Old 06-25-2019, 10:33 AM
New to Overclock.net
 
dj_tokyu's Avatar
 
Join Date: Sep 2008
Location: Kobe, Japan
Posts: 117
Rep: 6 (Unique: 6)
Wow... This is so stupid.

So there's a security system implemented into a processor so that it cannot be randomly hijacked by external users. Then people complain that because they can't hack the security system, they don't know if there isn't something malicious included in it. They then demand that the system's construction and functionality be fully disclosed so that it can be proven that there's nothing malicious. And in the process, how it can be defeated...

What is the point of locking your door if you're telling everyone how the keys are made?

It is what it is...
(16 items)
CPU
Ryzen 5 1600x
Motherboard
MSI X370 Gaming plus
GPU
Asus GTX 1070
RAM
G.Skill DDR4 3000mhz
Hard Drive
Sandisk Pro 512GB
Hard Drive
Seagate 4gb 7200rpm
Hard Drive
Seagate 4gb 7200rpm
Optical Drive
Pioneer BDR-211XJBK/WS Blu Ray drive
Power Supply
Keian 600w 80plus Gold KT-AP600-AXG HC
Cooling
Enermax ELC-LMR120S-BS AIO liquid cooler
Case
Fractal Design Focus G FD-CA-FOCUS-BK-W
Operating System
Windows 10 64-bit
Monitor
2x HP 23er
Keyboard
Logitech G710+
Mouse
Logitech G602 Wireless mouse
Mouse
Steelseries QCK+
CPU
Ryzen 7 3750h
GPU
GTX 1660 ti
RAM
16gb DDR4 2400mhz
Hard Drive
KINGSTON RBUSNS8154P3512GJ3
Hard Drive
Lexar NM610
Operating System
Windows 10-64bit
Monitor
LM156LF-CL03
▲ hide details ▲

Last edited by dj_tokyu; 06-25-2019 at 10:37 AM.
dj_tokyu is offline  
post #6 of 20 (permalink) Old 06-25-2019, 11:55 AM
New to Overclock.net
 
Imouto's Avatar
 
Join Date: Mar 2012
Posts: 2,181
Rep: 234 (Unique: 110)
Quote: Originally Posted by Questors View Post
Wouldn't making something like this open source also allow those with malicious intent an open look into the code, therefore allowing them to more easily create exploits?
Or... maybe... the complete opposite... and it being... reviewed... by the community... make it... easier... and faster... to fix...

Quote: Originally Posted by Questors View Post
Also couldn't it be possible that open source additions could also create problems of their own?
When you commit code to an open source project it is reviewed.

Quote: Originally Posted by dj_tokyu View Post
Wow... This is so stupid.

So there's a security system implemented into a processor so that it cannot be randomly hijacked by external users. Then people complain that because they can't hack the security system, they don't know if there isn't something malicious included in it. They then demand that the system's construction and functionality be fully disclosed so that it can be proven that there's nothing malicious. And in the process, how it can be defeated...

What is the point of locking your door if you're telling everyone how the keys are made?
Windows is an obscure black box and Linux is open source. Guess which one is far more robust and safe.

#EnthusiastLivesMatter
Imouto is offline  
post #7 of 20 (permalink) Old 06-25-2019, 12:12 PM
Overclocker in training
 
ThrashZone's Avatar
 
Join Date: Apr 2017
Location: Texas
Posts: 12,237
Rep: 184 (Unique: 110)
Hi,
lol linux is only so called safe because there is not enough users to make it worth exploiting the tightwads

CPU
i9-9940x With Optimus Foundation copper-plexi and Heatkiller VRM copper-plexi water block
Motherboard
ASUS x299 Rampage VI Apex
GPU
Titan Xp with copper-plexi Water Block
RAM
Trident Z 3600C16 4x8gb's b-die default timings 16-16-16-36 F4-3600C16Q-32GTZKK
Hard Drive
Samsung 970 Evo Plus 500gb M.2/ Samsung 850 Pro 256gb for os and 500gb evo for favorite games plus other wd hdd's for data and backup's
Optical Drive
LG Blu-Ray WH16NS40
Power Supply
evga 1200-P2
Cooling
D5 pump reservoir combo/ GTX280/ VRM block/ GTX280/ D5 top/ CPU block/ GPU block/ Mora 360/ repeat.
Cooling
MO-RA3 360 PRO stainless steel (25022)
Case
corsair 450D with added 2nd floor to house radiator on top
Operating System
Win-7 pro & 10 pro Win-7 Primary os.
Monitor
ASUS VG248QE 24" 144Hz
Keyboard
Logitech G910 Orion spectrum
Mouse
Redragon Perdition
Audio
Built in realtek and Insignia 2.0 soundbar HSB318
Other
5.0/https://valid.x86.fr/ez2ifr
CPU
10900k batch # X016E724
Motherboard
z490 ASUS Maximus XII Apex
GPU
EVGA 1080ti FTW3
RAM
Trident-Z 3600c16 4x8gb kit 16-16-16-36 F4-3600C16Q-32GTZSW
Hard Drive
Samsung 970 evo 500gb
Power Supply
EVGA 1000P2
Case
Corsair 450D
CPU
i7-5930k with Heatkiller IV Pro Plexi-Copper and koolance vrm water blocks
Motherboard
X99 Sabertooth
GPU
EVGA 1080ti FTW3 with Water block
RAM
Trident-Z 3200C14 4x8gb's b-die default timings 14-14-14-34
Hard Drive
Samsung 970 Evo 500gb M.2/ Samsung 850 Pro 256gb for os and 500gb evo for favorite games plus other wd hdd's for data and backup's
Optical Drive
LG Blu-Ray WH16NS40
Power Supply
EVGA 1000-P2
Cooling
D5 reservior combo/ 240GTX/ Koolance VRM block/ 240GTX/ D5 Top/ CPU block/ Gpu block/ Mora 360LT/ back to reservoir
Cooling
Mora 360LT black 25000
Case
Corsair 450D with added 2nd floor to house radiator on top
Operating System
Win-7 and 10 pro Win-7 Primary os.
Monitor
AOC G2460PG 24"G-Sync 144Hz
Keyboard
Logitech G710+
Mouse
Red Dragon Perdition
Audio
Built in realtek and Insignia 2.0 soundbar HSB318
▲ hide details ▲
ThrashZone is offline  
post #8 of 20 (permalink) Old 06-25-2019, 12:31 PM
Not a bug, but a feature
 
thagabe's Avatar
 
Join Date: Jun 2018
Location: Bay Life
Posts: 113
Rep: 0
@ThrashZone

Are you for-real? Linux has more users than any other OS if you count server and iot.... linux's open nature is it's power because anyone can extend or fix issues in the source code that can be dimmeminated to everyone since all code 'distributed' has to be released publicly meaning good patches make their way upstream so everyone benefits from everyone else's efforts. HEck! even the NSA uses linux and created Security Enhanced Linux which is a protocol to restrict access to certain parts of the system through mandatory access controls that must be set at boot so no changing this on the fly! Linux is a solid block of cheese compared to the Swiss cheese that windows is.

O Captain! My Captain!
Buildripper
(17 items)
CPU
Threadripper 1950x
Motherboard
Asus Zenith Extreme Alpha
GPU
EVGA 1080 Ti FTW3
RAM
G.skill
Hard Drive
Samsung 970 Pro
Hard Drive
Adata SX8200 Pro
Power Supply
EVGA 1200W P2
Cooling
Enermax Liqtech 360 TR4
Case
Lian Li PC-O11 Dynamic
Operating System
Arch Linux
Monitor
Alienware AW3418DW
Monitor
Asus 24' TN
Keyboard
Corsair K95 Platinum Gunmetal
Mouse
Logitech G802
Other
3x Noctua NF-A12x25
Other
6x be quiet! Silent Wings 3 1450rpm
Other
Cablemod Sleeves
▲ hide details ▲
thagabe is offline  
post #9 of 20 (permalink) Old 06-25-2019, 12:43 PM
New to Overclock.net
 
Imouto's Avatar
 
Join Date: Mar 2012
Posts: 2,181
Rep: 234 (Unique: 110)
Quote: Originally Posted by ThrashZone View Post
Hi,
lol linux is only so called safe because there is not enough users to make it worth exploiting the tightwads
If you're trying to make fun of yourself I can only bow to you.

Linux market share in top one million domains in the world is over 95%. It there's something worth attacking it is there.
It is 100% of Top 500 Supercomputers.

This is the level of OC.net for you. Two guys that don't even know how open source works and then another trolling/embarrassing himself.

#EnthusiastLivesMatter
Imouto is offline  
post #10 of 20 (permalink) Old 06-25-2019, 01:07 PM
New to Overclock.net
 
dj_tokyu's Avatar
 
Join Date: Sep 2008
Location: Kobe, Japan
Posts: 117
Rep: 6 (Unique: 6)
Quote: Originally Posted by Imouto View Post
If you're trying to make fun of yourself I can only bow to you.

Linux market share in top one million domains in the world is over 95%. It there's something worth attacking it is there.
It is 100% of Top 500 Supercomputers.

This is the level of OC.net for you. Two guys that don't even know how open source works and then another trolling/embarrassing himself.
And the reason that linux is used servers and super computers is because admins don't require GUIs. Stripped down to a command line interface nets you performance. When you add in the GUI, you sacrifice performance. Unfortunately, most end users aren't code literate and therefore prefer an OS like windows or OSX.

If we're talking about what the majority of end users are using (desktop, laptop) you'll see that linux accounts for less than 1.5% of total users. If that isn't niche, I don't know what is.

Your personal attacks do NOTHING to aid in the conversation, and I don't understand why you feel they're necessary.

It is what it is...
(16 items)
CPU
Ryzen 5 1600x
Motherboard
MSI X370 Gaming plus
GPU
Asus GTX 1070
RAM
G.Skill DDR4 3000mhz
Hard Drive
Sandisk Pro 512GB
Hard Drive
Seagate 4gb 7200rpm
Hard Drive
Seagate 4gb 7200rpm
Optical Drive
Pioneer BDR-211XJBK/WS Blu Ray drive
Power Supply
Keian 600w 80plus Gold KT-AP600-AXG HC
Cooling
Enermax ELC-LMR120S-BS AIO liquid cooler
Case
Fractal Design Focus G FD-CA-FOCUS-BK-W
Operating System
Windows 10 64-bit
Monitor
2x HP 23er
Keyboard
Logitech G710+
Mouse
Logitech G602 Wireless mouse
Mouse
Steelseries QCK+
CPU
Ryzen 7 3750h
GPU
GTX 1660 ti
RAM
16gb DDR4 2400mhz
Hard Drive
KINGSTON RBUSNS8154P3512GJ3
Hard Drive
Lexar NM610
Operating System
Windows 10-64bit
Monitor
LM156LF-CL03
▲ hide details ▲
dj_tokyu is offline  
Reply

Quick Reply
Message:
Options

Register Now

In order to be able to post messages on the Overclock.net - An Overclocking Community forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
User Name:
If you do not want to register, fill this field only and the name will be used as user name for your post.
Password
Please enter a password for your user account. Note that passwords are case-sensitive.
Password:
Confirm Password:
Email Address
Please enter a valid email address for yourself.
Email Address:

Log-in



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page


Forum Jump: 

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off