Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mstdn.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A general-purpose Mastodon server with a 500 character limit. All languages are welcome.

Administered by:

Server stats:

16K
active users

mstdn.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.4

#number

1 post1 participant0 posts today
Public
Gea-Suan Lin

AMD CPU microcode 的簽名漏洞 在 Lobsters 上看到 Google 對上個月 AMD CPU 的 microcode 耕更新漏洞的分析：「Zen and the Art of Microcode Hacking」，看完後發現原來是自己設計出來的簽名驗證導致的... CPU 透過修正 microcode 修正問題算是行之有年的方法，可以在開機後讀進來改變本來設計的行為，也因為這個動作很危險，通常會加上數位簽名的方式確保只有原廠可以改。 AMD 在這邊的設計是用了 RSA 2048 bit 簽名保護，但把整把 RSA public key 放進去驗證會吃太多電晶體，所以這邊只存了 128-bit value 以節省電晶體空間，這邊本來以為是用 MD5 被撞，或是用… blog.gslin.org/archives/2025/0 #algorithm #amd #cmac #cpu #hardware #key #microcode #number #random #rsa #security #vulnerability

Gea-Suan Lin's BLOG · AMD CPU microcode 的簽名漏洞在 Lobsters 上看到 Google 對上個月 AMD CPU 的 microcode 耕更新漏洞的分析：「Zen and the Art of Microcode Hacking」，看完後發現原來是自己設計出來的簽名驗證導致的...
Replied in thread
Public *
Kevin Karhan :verified:

@tauon

1) #CloudAct is just #CyberFacism, look it up!
en.wikipedia.org/wiki/CLOUD_Act

-

2) @signalapp 's #Server code is proprietary and since it's centralized we can't trust that the code they release is what's running on their backend!

-

3) #Signal still demands #PhoneNumbers which are #PII either by association (#Number => #ICCID = #SIM = #IMSI => #IMEI => Location Data as I explained beforetwice) or mandatory #KYC / #ID requirements (even on prepaid cards), which an increasing amount of juristictions do...

-

But don't take my word for it.
youtube.com/watch?v=tJoO2uWrX1M

en.wikipedia.orgCLOUD Act - Wikipedia
#shitcoin#scams#MobileCoin
ExploreLive feeds
About