It's time to talk about TEEs(alinush.github.io)
13 points by joshcsimmons | 2 comments
A blog post by Alin Tomescu surveying attacks on trusted execution environments (TEEs) and urging developers to reconsider deploying TEE-based applications.
#hardware-security on Hacker News
7 stories tagged hardware-security, newest first.
Eye of Sauron: Long-Range Hidden Spy Camera Detection (2024)(usenix.org)
322 points by ortusdux | 76 comments
USENIX Security 2024 paper page presenting ESauron, a system that detects and locates hidden spy cameras via EM radiation emitted by their inbuilt memory.
Spaghettifying DRAM(github.com)
680 points by matt_d | 170 comments
GitHub repository by xoreaxeaxeax, skitter-creek-bath-salts, describing a technique for unlocking everything on the CPU via DRAM scrambling, with kernel and userspace code.
Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'(tomshardware.com)
756 points by crtasm | 279 comments
Tom's Hardware article on the 'Bliss' hack, which uses voltage glitching to break the Xbox One's security and run unsigned code at every level.
How I discovered a hidden microphone on a Chinese NanoKVM(telefoncek.si)
332 points by ementally | 92 comments
Blog post describing the discovery of an undocumented microphone on Sipeed's NanoKVM, a Chinese hardware KVM switch, and its security implications.
The GPU, not the TPM, is the root of hardware DRM(mjg59.dreamwidth.org)
399 points by DvdGiessen | 408 comments
Blog post by Matthew Garrett arguing that GPUs, not TPMs, are the real root of hardware DRM; the capture shows a Dreamwidth captcha page instead.
EUCLEAK Side-Channel Attack on the YubiKey 5 Series(ninjalab.io)
678 points by GTP | 258 comments
NinjaLab's page on EUCLEAK, a side-channel attack recovering ECDSA keys from YubiKey 5 Series devices using Infineon security microcontrollers.