Raspberry pi safe?

• To: Lodewijk andré de la porte <[email protected]>
• Subject: Raspberry pi safe?
• From: [email protected] (coderman)
• Date: Fri, 17 Apr 2015 03:42:41 -0700
• Cc: "[email protected]" <[email protected]>, Edd thompson <[email protected]>
• In-reply-to: <CAHWD2rKFMGLoi-kUyGTt4h0ziLuL_3DTsnC=CqQ15DiJ5B92kw@mail.gmail.com>
• References: <CAFqg5u1My-GJD+XaYKD5qzUL4766+DbzjhE1fZ7vGUUqAbcLQA@mail.gmail.com> <[email protected]> <CAHWD2rKFMGLoi-kUyGTt4h0ziLuL_3DTsnC=CqQ15DiJ5B92kw@mail.gmail.com>

On 4/17/15, Lodewijk andré de la porte <[email protected]> wrote:
>....  I think the Intel platform is too
> big to not be exploited (more or less) on the hardware level. I have a very
> little better feeling about AMD but I don't think it's based on much.
>
> The idea that ARM processors are much much smaller and therefore easier to
> audit makes them less attractive exploit targets. ...

essentially they're all suspect under some level of modest threat
(e.g. CUSTOMS interdiction or TAO enabling or ...)

so then you get to openRISC on an openFAB with strong chain of custody
along every step from sand to structure to send to self(and if you
lose proper custody of device that's your problem; see threat models
again :)

---

https://openrisc.github.io/
http://www.globalfoundries.com/ for openHW?
https://en.wikipedia.org/wiki/Chain_of_custody

---

oh, and of course the occasional FIB tear-down of fabricated cores to
confirm no surreptitious corruptions.  pick your favorite hard problem
:P


best regards,

• Follow-Ups:
  • Raspberry pi safe?
    • From: [email protected] (J.R. Jones)

• References:
  • Raspberry pi safe?
    • From: [email protected] (Edd thompson)
  • Raspberry pi safe?
    • From: [email protected] (Cathal (Phone))
  • Raspberry pi safe?
    • From: [email protected] (Lodewijk andré de la porte)

• Prev by Date: Globel Forum on Cyber Expertise
• Next by Date: Raspberry pi safe?
• Previous by thread: Raspberry pi safe?
• Next by thread: Raspberry pi safe?
• Index(es):
  • Date
  • Thread