this post was submitted on 10 Dec 2024
198 points (95.8% liked)

Technology

75130 readers
1564 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
198
AMD’s trusted execution environment blown wide open by new BadRAM attack (arstechnica.com)
submitted 9 months ago by gedaliyah@lemmy.world to c/technology@lemmy.world
14 comments fedilink hide all child comments
 

On Tuesday, an international team of researchers unveiled BadRAM, a proof-of-concept attack that completely undermines security assurances that chipmaker AMD makes to users of one of its most expensive and well-fortified microprocessor product lines. Starting with the AMD Epyc 7003 processor, a feature known as SEV-SNP—short for Secure Encrypted Virtualization and Secure Nested Paging—has provided the cryptographic means for certifying that a VM hasn’t been compromised by any sort of backdoor installed by someone with access to the physical machine running it.

you are viewing a single comment's thread
view the rest of the comments
[–] WagnasT@lemmy.world 95 points 9 months ago (6 children)

Looks like AMD has already patched it, also appears to affect older Intel versions of the same tech concept but not current generations.

Only really affects guests in multi tenant hypervisor environments, requires physical access to the hypervisor, requires external physical hardware, requires booting the host with said hardware attached, at some point this level of compromise is already absurd. This kind of research is important and shows that we still need to limit out level of trust with host providers but I don't think anyone needs to panic.

[–] Tangent5280@lemmy.world 16 points 9 months ago (2 children)

If someone breaks into your home and shits your pants then they might be able to make you smell like shit.

[–] undefined@lemmy.hogru.ch 5 points 9 months ago (1 children)

Legit question: is the “he/she shits your pants” expression and generally shit verbiage own vogue or something?

I have to ask because I keep seeing it and I’m pretty sheltered from corporate social media (and probably larger Internet cultural trends overall).

[–] Tangent5280@lemmy.world 3 points 9 months ago

It's been a meme for a while I think. If I had to guess I'd say it started with some Tumblr thread. Obviously not entirely suitable for normal-speak, which is why it's on lemmy instead of a workplace slack channel.

load more comments (3 replies)