TrustZone is broken as implemented in most devices, and nobody was surprised. https://blog.acolyer.org/2017/09/21/clkscrew-exposing-the-perils-of-security-oblivious-energy-management/ …
Show this thread
Seriously, anyone who's ever looked at a SoC datasheet (and it's all accessible at *kernel* level, below TrustZone) knew this was coming.
-
-
Modern SoCs are way, WAY too complicated. The only way to secure them is to move all the ugly hardware mgmt bits into TrustZone itself.
Show this thread -
Which of course increases your TZ attack surface. You can't have your cake and eat it too.
Show this thread
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.