On Tuesday, an international team of researchers unveiled BadRAM, a proof-of-concept attack that completely undermines security assurances that chipmaker AMD makes to users of one of its most expensive and well-fortified microprocessor product lines. Starting with the AMD Epyc 7003 processor, a feature known as SEV-SNP—short for Secure Encrypted Virtualization and Secure Nested Paging—has provided the cryptographic means for certifying that a VM hasn’t been compromised by any sort of backdoor installed by someone with access to the physical machine running it.

  • Tangent5280@lemmy.world
    link
    fedilink
    English
    arrow-up
    16
    ·
    15 hours ago

    My favorite computer vulnerability is when a state actor kidnaps me and attaches high voltage jumpers to my ballsack with the threat of frying them if I don’t give up my NFT seed phrase.

    My second favorite vulnerability is when a common robber steals my Daddy Tate Tokens from my shadow encrypted, quantum hardened disk by breaking my kneecaps with a $5 wrench.

    • mPony@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      10 hours ago

      My favorite computer vulnerability is when a state actor kidnaps me and attaches high voltage jumpers to my ballsack with the threat of frying them if I don’t give up my NFT seed phrase

      There’s no need to bring your OnlyFans subscriptions into this discussion. You do you.

  • WagnasT@lemmy.world
    link
    fedilink
    English
    arrow-up
    45
    ·
    19 hours ago

    Looks like AMD has already patched it, also appears to affect older Intel versions of the same tech concept but not current generations.

    Only really affects guests in multi tenant hypervisor environments, requires physical access to the hypervisor, requires external physical hardware, requires booting the host with said hardware attached, at some point this level of compromise is already absurd. This kind of research is important and shows that we still need to limit out level of trust with host providers but I don’t think anyone needs to panic.

    • Tangent5280@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      ·
      15 hours ago

      If someone breaks into your home and shits your pants then they might be able to make you smell like shit.