Re: Hackers hope to democratize laser-based processor hacking for $500

On 8/4/2024 11:23 AM, Edward Rawde wrote:

In this context, making the world a better place requires demonstating to
hardware/software vendors that they can't just cobble something together and
hope it's secure.

I suspect very few people have ever played RED/BLUE games in their careers
(or in academia).
You actually need to be *tasked* with "breaking something" in order to
see all of its warts.
Developers always make assumptions about how their products will be used
and the sorts of "misuse" they THINK they need to guard against.  But,
users (and ABusers) aren't bound by those delusions.  So, when a
product encounters something out-of-the-ordinary, it often shits the
bed.  If you can convince it to shit the bed in a manner that can be
exploited...  <grin>
Remember, YOU likely have addition limits imposed on what YOU would
subject YOUR device to; there is nothing that forces someone else to
similarly restrain themselves!
So, you have to EXPLICITLY enforce any limitations in your hardware/software
if you want to be SURE they won't be subverted (by an adversary or a sloppy
developer!)