If you open your computer's case, it is already vulnerable to hacking, because no consumer x86 computer is secure under that threat model. Yes, this is another bullshit hyped attack with minimal practical consequence because under their threat model you are already pwned.https://twitter.com/WIRED/status/1259669698494509056 …
-
-
By the way, the Chromebook spec, the original one, explicitly *excluded* physical attacks from their threat model. Which is why those chromebooks shipped with a "bypass all firmware security" jumper under a screw/sticker.
-
Current Chromebooks with the new security chip still have a physical access backdoor (remove the battery), because Google knows it doesn't matter how many security chips you throw at x86, case open == pwnable, and recovery / owner control is important. https://chromium.googlesource.com/chromiumos/platform/ec/+/master/docs/case_closed_debugging_cr50.md#can-remove-the-battery …
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.