Gentoo Archives: gentoo-user

From: Pengcheng Xu <i@××××××××.moe>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] A new AMD CPU weakness?
Date: Wed, 14 Mar 2018 02:28:27
Message-Id: 306CAAF1-7815-4CB4-B774-2413A0A970D4@jsteward.moe
In Reply to: Re: [gentoo-user] A new AMD CPU weakness? by "Taiidan@gmx.com"
1 Actually there’s a more memorable link that describes the matter concisely:
2
3 https://amdflaws.com
4
5 Pengcheng Xu
6 i@××××××××.moe
7
8
9
10 > H30/03/14 10:15、Taiidan@×××.comのメール:
11 >
12 > Here is a non-shortened link.
13 > https://it.slashdot.org/story/18/03/13/1558221/researchers-find-critical-vulnerabilities-in-amds-ryzen-and-epyc-processors-but-they-gave-the-chipmaker-only-24-hours-before-making-the-findings-public
14 >
15 > All the more reason to avoid the ME/PSP garbage and instead buy the equivalently priced, owner controlled and higher performance OpenPOWER arch systems such as the libre firmware TALOS 2.
16 >
17 > Pretty much someone found a bug in AMD's version of ME which *how terrible* in other words you can use this to defeat hollywoods AMD PSP DRM which is the true reason of existence for ME/PSP, to prevent people from owning and controlling their devices.
18 >
19 > I can't believe the new normal is not being able to really buy a mainstream computer because you don't own it and everyone in the tech press and so called experts says its a good thing, oh it is to "keep you safe from hackers" and they pretend like it has always been this way as if it wasn't just a recent change that for some reason all the major OEM's did at the exact same time....I wonder why.
20 >
21 > "The corporate sector asked for this" - MYTH - They already had it, it is a BMC/LOM chip and it was owner controlled. I doubt any company with IP worth something wants a super insecure black box supervisor processor that they don't control on every computer of theirs.
22 >
23 >
24 > If you need secure remote management you can use OpenBMC which is present on the TALOS 2 (IBM OpenBMC) and also the KCMA-D8 and KGPE-D16 pre-PSP x86 boards (you can replace the crappy non-free ASUS firmware on the ASMB module with the facebook version of OpenBMC which was recently ported to it via crowdfunding)
25 >

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
[gentoo-user] Re: A new AMD CPU weakness? Ian Zimmerman <itz@××××××××××××.org>