Tag Archives: hardware

The Spectre of Meltdown

Security vulnerabilities are a dime a dozen now-a-days. But, when a couple of months ago we learned about Spectre^ and Meltdown^, it finally started to dawn on people just how insecure all our “high tech” really is. We’re using hole-ridden, bug-infested products.

If the Wikipedia articles above are too boring, here’s a relatively more layman-friendly breakdown of what happened:

https://www.wired.com/story/critical-intel-flaw-breaks-basic-security-for-most-computers^

https://www.wired.com/story/meltdown-and-spectre-patches-take-toll/^

I don’t know if the constant deluge^ of security exploits has resulted from the challenges that arise from working with highly complex technology or is caused by some sort of surveillance conspiracy. What’s certain is that this shows just how weak our technology is and how easily it can be overcome.

I will definitely not allow my home to be controlled by “smart devices” based on closed-source technology. And this includes closed-source hardware designs manufactured in factories under the control of expansionist governments:

http://mentatul.com/2016/06/15/cyber-warfare-is-scary/^

[ax_meta lnimgurl=’http://mentatul.com/wp-content/uploads/2018/03/02754-SpectreOfMeltdown-Thumb.jpg’ lnimgw=’250′ lnimgh=’250′ title=’The Spectre of Meltdown’ desc=’After Spectre and Meltdown, it finally started to dawn on people just how insecure all our "high tech" really is.’]

Cyber-Warfare is Scary

When we read in the press about “hacking”, it’s mostly about software-based attacks. It may be about exploiting a vulnerability to reveal passwords or attacking an insecure computer. Then there’s the entire social-engineering aspect to it, which is basically hacking a person’s mind (can also be seen as a person’s software).

Cyber-warfare^ has been defined as “actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption”. Serious confrontations are also going on between corporations, with industrial espionage being one of the main drivers. Unlike in real war, because a single individual can take on an entire nation through the use of clever hacking, the boundaries between these “size categories” are blurred.

In addition to the myriad ways a target can be hacked through software, there’s something far more insidious and dangerous that can happen. Hardware-based attacks:

https://www.wired.com/2016/06/demonically-clever-backdoor-hides-inside-computer-chip/^

What the article above explains is how tiny hardware back-doors can be baked inside any integrated circuit. It’s not news that this is doable, but what is news is that it’s way too easy to achieve and almost impossible to detect. Even in the case of the highly advanced computer processors that are inside all our devices. Apparently it can be done by a single (well trained) person working inside the factory that manufactures the chip.

Such modifications are extremely hard to detect. It’s quite tempting to go a bit paranoid when thinking about how many of our mission-critical processors are manufactured in Asia. China has lately started to re-assert itself technologically and militarily. There was an age when airplanes and bombs would decide the fate of a war. That age is slowly fading away.

[ax_meta lnimgurl=’http://mentatul.com/wp-content/uploads/2016/06/00730-CyberWarfareIsScary-Thumb.jpg’ lnimgw=’250′ lnimgh=’250′ title=’Cyber-Warfare is Scary’ desc=’A single (well trained) person working inside a factory that manufactures electronics can bake a hardware back-door inside any integrated circuit.’]