News Another AMD Zen 'Secure Encrypted Virtualization' Vulnerability Demonstrated by Researchers

[Admin]

A team of security researchers with Cornell University have demonstrated a proof of concept attack on AMD's Secure encrypted Virtualization technology, leveraging the Zen-integrated Secure Processor to achieve full system access.

Another AMD Zen 'Secure Encrypted Virtualization' Vulnerability Demonstrated by Researchers : Read more

 

[drajitsh]

Voltage glitch exploit. Could you add how this works?

 

[InvalidError]

Practically nothing is truly secure when you have physical access.

 

[jgraham11]

Not only do you need physical access you must of modified the motherboard to vary the voltage being supplied to the processor. This article is misleading in that the motherboard voltage modulation is required and brushed over and only physical access is stated which is not the same as having server covers removed and the soldering iron is out... I don't think this is much of a real threat.

Not even in the same realm as Intel bugs, some can be executed just by visiting a website. Keep your systems updated!

 

[USAFRet]

Not even in the same realm as Intel bugs, some can be executed just by visiting a website. Keep your systems updated!

And the theoretical drive by for the Intel was also vastly overrated.
We only see this several years after the thing became public.

First Fully Weaponized Spectre Exploit Discovered Online

therecord.media

 

[escksu]

Not only do you need physical access you must of modified the motherboard to vary the voltage being supplied to the processor. This article is misleading in that the motherboard voltage modulation is required and brushed over and only physical access is stated which is not the same as having server covers removed and the soldering iron is out... I don't think this is much of a real threat.

Not even in the same realm as Intel bugs, some can be executed just by visiting a website. Keep your systems updated!

You dont need a modified motherboard to vary voltage today. All boards are able to control the clockspeed and voltage on both BIOS and OS level. Physcial access. Again, its not that difficult because administrators arent the only threats. You still need people to service your servers, racks (Eg. wiring, hardware replacement). Even server rooms (eg. lights, aircondition, ducts servicing).

 

[jeremyj_83]

Physical access is absolute access. As soon as you have that nothing is secure.