If you don't know the name Bunnie Huang, you should. He will only be more and more important as hardware security becomes more visible in the mainstream.

In this 45-minute talk, he digs in to the details of why the recent news about a bit of Chinese trojan horse hardware in all our electronics is probably false. And his dissection of the electronics supply chain is eye-popping in a couple of places.

Because most of you won't watch the talk, here's the punchline: The reason why the story of the Chinese trojan hardware is false, is because if there was trojan hardware, it wouldn't look like trojan hardware: It would be indistinguishable from the "correct" hardware because we have no effective non-destructive method for testing that hardware is what it says it is. (Shorthand for software geeks: There is no checksum for hardware.)

kleinbl00:

Bunnie Huang is dope and has been for years.


posted 1876 days ago