[Arm-netbook] Verifying firmware

Xavi Drudis Ferran xdrudis at tinet.cat
Wed Aug 24 21:04:03 BST 2016


El Wed, Aug 24, 2016 at 08:58:06PM +0100, Luke Kenneth Casson Leighton deia:
> 
>  ... and that's where things like the TI SoCs and the Samsung Exynos
> SoCs fall down.  you simply *cannot* undo a blown e-fuse: that's the
> whole point.
> 
>  which is why if you were to ship a processor that *didn't* have its
> "secure e-fuse" blown, you're actually selling people a ticking
> time-bomb where the possibility exists for someone to hack in to your
> computer, install some spyware at the bootloader level, blow the
> e-fuse and then you're *really* screwed.  a whole new ransomware
> vector at the *hardware* level.  dang.
> 
>  which is why i contacted TI to ask them if there was a way to blow
> the e-fuses so that DRM could ****NEVER**** be enabled.  they were
> incredibly surprised: i was literally the first person ever to ask
> them.
> 
>  oh... the answer was "no".
> 

I didn't know that. 

Does this affect all TI SoCs or only some or you just checked the one 
you were evaluating ? 

Do you have a link to the docs ? 

Thank you.




More information about the arm-netbook mailing list