That is bullshit for those weak of mind. You can always manipulate critical components of a system. The "locked down" TPM and so are primarily to prevent people from installing non-Windows OSes. Just refer to all those TPMs from Infinion that were recently found to be insecure.
Nonsense. If somebody can put in their own BIOS or has signed drivers, then there is no need to verify anything. These are not vulnerabilities that can be fixed or are unknown or unexpected by any real expert.
Look at their logo and the youtube video: Cheap background and cheap logo bought from the same site. The "vulnerabilities" are mostly irrelevant, if physical access is given, the attacker can do anything. Then the very short "disclosure" period that makes absolutely no sense, except as an ingredient in stock-fraud.
So yes, "amazingly ignorant" is pretty much right on the mark.
I would expect that you need at least a receipt and that should usually include the device serial number. Or is there some defect in the way this is done in the US?
It happens to be hardwired in the male brain and it is the central reason the human race still exist. Expecting anything else is pretty stupid. Now, a decent male is polite about it and a decent female understands and forgives the occasional mistake. Decent people of either sex seem to be getting harder to come by though.
They do not have such a road-map, because it is not known whether it is feasible. At the moment, nobody really knows what constitutes a human being and how a mind works. The closer scientists look the more mysterious it becomes.
But obviously, like freezing of head and corpses, it is a scam that uses the fear of dying and the lack of scientific understanding people have. (For the second, look at the flat-earthers for an example how low scientific understanding can get in people.)
Special screwdrivers, instructions how to open and re-close clued connections, firmware diagnostic access software, special diagnostic connectors, schematics, devices that tell the phone "you have been repaired, the new components are fine", data backup and restore software and so on. And, of course, replacement parts for all parts that are curome designed like bezels, glass, buttons, display, batteries, etc.
A manufacturer can easily get out of most of these by using standard parts. There is a second problem though: some manufacturers will move to devices they cannot repair themselves. For that I would just mandate a bright-red large sticker "This device cannot be repaired" and let the market sort it out.
That was Apple's response when they found they could not get away with this. I agree that on the surface, their reasons appeared good. But they were not. As soon as an attacker has access to hardware, they have generally won. Also, the home-button is not something you can secretly swap out on a user. So this security check makes no sense, except to prevent "unauthorized" repair.
These preserved brains will at some point just be recognized as what they are (medical trash) and be disposed off. It is far to easy to make more humans, nobody will care to revive some fossils that have fallen out of time. That is if the possibility is even there in the first place.
Third: This is a stock-scam and they need the short turnaround time, otherwise AMD could have stated (after analysis) that this actually has no substance.
Well, I doubt they will get many real customers. They have already demonstrated that they are willing to screw a lot of people for a bit if publicity. Will be interesting to see whether their claims actually can hold water. At the moment that looks more than doubtful.
It is not actually clear whether these are indeed "facts". The "whitepaper" is laughably imprecise. The company seems to be a mailbox, not more. Until this is confirmed by AMD, this is essentially a rumor. The short notification so AMD could not deny (or confirm) may be to actually use this for stock-price manipulation. As such, it is possible that the entire thing is a fake clever enough that AMD needs some time to find out whether there actually is substance to this. And that is another reason why you give a vendor 90 days: Then they can confirm or deny that the vulnerability exist based on their own analysis.
Pretty clearly Intel-funded, yes. The 24h notification period is so short that it can be classified as a malicious attack. Nobody with any understanding of how this works does this unless there are strong overriding concerns. What these corrupt a******* did makes people a lot less secure.
There is a difference between people being incompetent and manufacturers making repair intentionally hard or impossible. Remember the fingerprint sensor that if replaced would brick a phone later? That has nothing to do with incompetence on the side of the person doing the repair.
Slashdot Mirror
Interesting. That would not be possible in any place in Europe I know.
Ah, ok. Then I retract my statement.
Or templates to reproduce via Printing Pods.
Well, they are certainly educational. And they illustrate that strong convictions are not an indicator for accuracy.
I retract that, this is far too obvious and amateur-level for Intel. This is a stock-scam.
That is bullshit for those weak of mind. You can always manipulate critical components of a system. The "locked down" TPM and so are primarily to prevent people from installing non-Windows OSes. Just refer to all those TPMs from Infinion that were recently found to be insecure.
Nonsense. If somebody can put in their own BIOS or has signed drivers, then there is no need to verify anything. These are not vulnerabilities that can be fixed or are unknown or unexpected by any real expert.
Look at their logo and the youtube video: Cheap background and cheap logo bought from the same site. The "vulnerabilities" are mostly irrelevant, if physical access is given, the attacker can do anything. Then the very short "disclosure" period that makes absolutely no sense, except as an ingredient in stock-fraud.
So yes, "amazingly ignorant" is pretty much right on the mark.
Great fun for the one that got the returned pair next. You should be ashamed for yourself.
I would expect that you need at least a receipt and that should usually include the device serial number. Or is there some defect in the way this is done in the US?
I see you have met them. Pretty hard to keep one's from melting, listening to them.
It happens to be hardwired in the male brain and it is the central reason the human race still exist. Expecting anything else is pretty stupid. Now, a decent male is polite about it and a decent female understands and forgives the occasional mistake. Decent people of either sex seem to be getting harder to come by though.
Ah yes. Nice one. So getting frozen/stored or otherwise revivable is decidedly not a good idea.
They do not have such a road-map, because it is not known whether it is feasible. At the moment, nobody really knows what constitutes a human being and how a mind works. The closer scientists look the more mysterious it becomes.
But obviously, like freezing of head and corpses, it is a scam that uses the fear of dying and the lack of scientific understanding people have. (For the second, look at the flat-earthers for an example how low scientific understanding can get in people.)
Special screwdrivers, instructions how to open and re-close clued connections, firmware diagnostic access software, special diagnostic connectors, schematics, devices that tell the phone "you have been repaired, the new components are fine", data backup and restore software and so on. And, of course, replacement parts for all parts that are curome designed like bezels, glass, buttons, display, batteries, etc.
A manufacturer can easily get out of most of these by using standard parts. There is a second problem though: some manufacturers will move to devices they cannot repair themselves. For that I would just mandate a bright-red large sticker "This device cannot be repaired" and let the market sort it out.
That was Apple's response when they found they could not get away with this. I agree that on the surface, their reasons appeared good. But they were not. As soon as an attacker has access to hardware, they have generally won. Also, the home-button is not something you can secretly swap out on a user. So this security check makes no sense, except to prevent "unauthorized" repair.
These preserved brains will at some point just be recognized as what they are (medical trash) and be disposed off. It is far to easy to make more humans, nobody will care to revive some fossils that have fallen out of time. That is if the possibility is even there in the first place.
Third: This is a stock-scam and they need the short turnaround time, otherwise AMD could have stated (after analysis) that this actually has no substance.
Well, I doubt they will get many real customers. They have already demonstrated that they are willing to screw a lot of people for a bit if publicity. Will be interesting to see whether their claims actually can hold water. At the moment that looks more than doubtful.
Well, maybe the stock-market is not so easily panicked by what at the moment amounts to hot air.
It is a direct attack. I am thinking either Intel is behind this or it is for stock-price manipulation.
It is not actually clear whether these are indeed "facts". The "whitepaper" is laughably imprecise. The company seems to be a mailbox, not more. Until this is confirmed by AMD, this is essentially a rumor. The short notification so AMD could not deny (or confirm) may be to actually use this for stock-price manipulation. As such, it is possible that the entire thing is a fake clever enough that AMD needs some time to find out whether there actually is substance to this. And that is another reason why you give a vendor 90 days: Then they can confirm or deny that the vulnerability exist based on their own analysis.
Indeed. If you have root on the machine, you can basically do anything anyways.
Pretty clearly Intel-funded, yes. The 24h notification period is so short that it can be classified as a malicious attack. Nobody with any understanding of how this works does this unless there are strong overriding concerns. What these corrupt a******* did makes people a lot less secure.
There is a difference between people being incompetent and manufacturers making repair intentionally hard or impossible. Remember the fingerprint sensor that if replaced would brick a phone later? That has nothing to do with incompetence on the side of the person doing the repair.