Show Idle (> d.) Chans


Results 1 ... 19 found in asciilifeform for 'cr50'

dulapbot: Logged on 2020-12-26 14:45:07 asciilifeform: macc24: there's been afaik no major discoveries, by anyone, re: subj, since my orig. overview of cr50.
asciilifeform: which is pretty much same thing as e.g. 'intel ME', 'amd PSP', google's 'cr50', etc
asciilifeform: macc24: ftr i abandoned all work w/ that machine. no one knows when it will go out of print (these usually live for coupla yrs) ; and even if i had found a 0day in cr50, vendor would simply patch it as soon as published.
asciilifeform: macc24: there's been afaik no major discoveries, by anyone, re: subj, since my orig. overview of cr50.
shinohai: ouch. I haven't experimented with cr50 personally yet so unfortunately can't help :/
shinohai: asciilifeform may be back in a bit, I assume you read article on loperos re: cr50 laptop ?
macc24: "Lurkers are asked to introduce themselves at first join" i have a laptop with cr50 chip, looking for anything to make it more like, and i got here, somehow
snsabot: Logged on 2020-05-05 12:51:05 asciilifeform: violadivias: the 'attack resistance' in the linked piece is an artful distraction/disinfo. cr50 is there specifically to prevent the owner of the machine from getting 100% control over it.
asciilifeform: imho the motivations behind cr50 are quite apparent, and fully covered in my piece on subj.
asciilifeform: and with the master key, can rewrite the (standard cpu's) bios, without needing to overwrite the cr50 one
asciilifeform: violadivias: the 'attack resistance' in the linked piece is an artful distraction/disinfo. cr50 is there specifically to prevent the owner of the machine from getting 100% control over it.
asciilifeform: violadivias: the src is public btw
asciilifeform: ( where some fella claiming to be 'google employee' openly lied to me re cr50 , 'nobody has the master key' etc )
asciilifeform: when i first built the cable, i had no idea that cr50 existed
asciilifeform: one of'em goes to the cpu debug, another -- bios console, another -- ec (kbd controller) console, yet another -- cr50 .
asciilifeform: violadivias: not long after, i found that one of the vendor updates does allow user to re-enable the use of the thing as spi debugger (gotta unplug & then replug the battery inside, then through the serial cable can enable debug.) but this was only 1 of my 2 objectives -- wanted to get 100% control over the cr50 fw, to snip out the google master key bullshit. but never found suitable hole.
asciilifeform: violadivias: you were asking re cr50 ?