corpus.blog
41,715 blogs · 5,239,565 posts Claim your blog
Record · corpus.blog/posts/01a0fe69-4312-73b5-acde-7cbec04b0463

Securing The Hardware Supply Chain

DSHR's Blog · published 27 December 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.dshr.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
62
Words captured
5,850

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
http://www.metrolyrics.com/bohemian-rhapsody-lyrics-queen.html
metrolyrics.com
https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies
bloomberg.com
https://www.servethehome.com/investigating-implausible-bloomberg-supermicro-stories/
servethehome.com
https://arstechnica.com/information-technology/2018/12/supermicro-refutes-report-of-malicious-implants-with-audit/
arstechnica.com
https://arstechnica.com/gadgets/2018/10/new-bloomberg-report-says-backdoored-supermicro-hardware-infiltrated-major-us-telecom/
arstechnica.com
https://www.riverloopsecurity.com/blog/2018/12/supermicro-validation-1/
riverloopsecurity.com
https://securinghardware.com/articles/hardware-implants/
securinghardware.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqv0XdoPfuYUg5G1xjUXIqy981lekkpGCN9gIrNSm6fpHyiqFj7O_EY2wddUgycorl4of8gPk64QoO48-wV3FKNiUbKjVMfRVXaQ3QWViQYJYJRrBCko2r45YI4SQXv1GOCZZQw3XR5z58/s1600/FitzpatrickExample.jpg
blogger.googleusercontent.com
https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/
arstechnica.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEium0MSNzZsRUKoK4dQ6lkcRiZczkxW_XQ5vxhXFflf5tcoM2DmKbr9lSmX7OFShbyJTjW1mMhKwquWUhlnpH71fObmdUPqcDb17B0A0kztQ4A1TreLeQGoE_-g3Znu8YmQp8Ho75IC8rXA/s1600/nsa-pwn-cisco-640x373.jpg
blogger.googleusercontent.com
http://www.spiegel.de/international/world/the-nsa-uses-powerful-toolbox-in-effort-to-spy-on-global-networks-a-940969.html
spiegel.de
https://www.theregister.co.uk/2015/03/18/want_to_dodge_nsa_supply_chain_taps_ask_cisco_for_a_dead_drop/
theregister.co.uk
https://news.ycombinator.com/item?id=18138699
news.ycombinator.com
https://doi.org/10.1109/CYCON.2015.7158480
doi.org
https://arstechnica.com/information-technology/2018/10/supermicro-boards-were-so-bug-ridden-why-would-hackers-ever-need-implants/
arstechnica.com
https://mandalorian.com/dl/himym.pdf
mandalorian.com
https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_0.pdf
usenix.org
http://boingboing.net/2015/03/21/automating-remote-bios-attacks.html
boingboing.net
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsuRqvOXKEm6U91ndILBRry-P0KMFRDycOLfGWIsQKQog02PXwop3O0xsL8zXok_ZJBXQ5YjvAOWTER3XY85GHfOHra5u5b-o_naPcqItlcvJNs6rZvZ4UAdNFSDQ425Nh4VbT2OIkM_Zn/s1600/BMC-IPMI-Networking-Basic-Dedicated-Management-Network.jpg
blogger.googleusercontent.com
https://www.reuters.com/article/us-supermicro-chips/super-micro-says-review-found-no-malicious-chips-in-motherboards-idUSKBN1OA12R
reuters.com
https://www.nardelloandco.com/our-practices/digital-investigations/
nardelloandco.com
https://arstechnica.com/information-technology/2015/02/how-omnipotent-hackers-tied-to-the-nsa-hid-for-14-years-and-were-found-at-last/
arstechnica.com
https://www.bunniestudios.com/
bunniestudios.com
http://xoblo.gs/
xoblo.gs
https://events.ccc.de/congress/2013/wiki/Main_Page
events.ccc.de
http://www.bunniestudios.com/blog/?p=3554
bunniestudios.com
https://www.eff.org/deeplinks/2015/03/hardwired-for-betrayal
eff.org
https://theintercept.com/2015/02/25/gemalto-doesnt-know-doesnt-know/
theintercept.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL3XhSZd92AcAb-RHoEvPgwGfzmA5QUyDm8kZI2la10R0n6yMte0VrKePdGtsfmGJN_f-2DKbETMh0xb2LNbWFTjVyod4HUJZ6sxNjlEARloHELNKifjlQb9bhU98pvKGxvBMD22t8oPTE/s1600/ProjectMu.png
blogger.googleusercontent.com
https://blogs.windows.com/buildingapps/2018/12/19/%E2%80%AFintroducing-project-mu/
blogs.windows.com
https://betanews.com/2018/12/20/microsoft-project-mu/
betanews.com
https://microsoft.github.io/mu/
microsoft.github.io
https://blogs.windows.com/buildingapps/2018/12/19/%e2%80%afintroducing-project-mu/
blogs.windows.com
https://github.com/tianocore/edk2
github.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5SMmi4vqoe3f2tl-NrwpVu37EOO6z1kZXvJ41iJ8_GAdzz8gvDdTkaafCKpHsz8FpdG1Q-l1GU75W2kkfFgcLOQ8g7lrkWMSs_m-bZWBsII7v4oVYygL9DBY-kU1FHFroK8CXfl2B1Ww_/s1600/ChipSupplyChain.png
blogger.googleusercontent.com
https://web.eecs.umich.edu/~taustin/papers/OAKLAND16-a2attack.pdf
web.eecs.umich.edu
https://doi.org/10.1109/SP.2016.10
doi.org
https://en.wikipedia.org/wiki/Register_transfer_language
en.wikipedia.org
https://en.wikipedia.org/wiki/Hardware_description_language
en.wikipedia.org
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAHdUQk2HVNCDPZH0xo5kjz3hjUAjMKvXiy7yydNYG72XfOgqoIlNhRlndLareJpEXUjYZKnck6t8n9S_D-b4tuPh3dHWp-SHxGIYEWvN12g8ECGeM5stqpf0tsxJE99bJ4p8850wkQcK9/s1600/WD-RISC-V.png
blogger.googleusercontent.com
https://www.allaboutcircuits.com/news/western-digital-swerv-open-source-risc-v-core-iss-cache-coherency/
allaboutcircuits.com
https://riscv.org/
riscv.org
https://www.eetimes.com/document.asp?doc_id=1334087
eetimes.com
https://en.wikipedia.org/wiki/ARM_architecture
en.wikipedia.org
http://opencircuitdesign.com/qflow/index.html
opencircuitdesign.com
https://www.quora.com/Are-there-any-open-source-tools-in-ASIC-Design
quora.com
https://www.certificate-transparency.org/
certificate-transparency.org
https://www.riverloopsecurity.com/blog/2018/10/supply-chain-validation/
riverloopsecurity.com
https://doi.org/10.1109/SECURWARE.2009.19
doi.org
https://doi.org/10.1109/ARES.2010.39
doi.org
https://bootstrappable.org/
bootstrappable.org
https://www.dovermicrosystems.com/solutions/coreguard/
dovermicrosystems.com
https://en.wikipedia.org/wiki/Return-oriented_programming
en.wikipedia.org
https://doi.org/10.1145%2F1315245.1315313
doi.org
https://www.blackhat.com/presentations/bh-usa-08/Shacham/BH_US_08_Shacham_Return_Oriented_Programming.pdf
blackhat.com
https://www.theregister.co.uk/2016/06/10/intel_control_flow_enforcement/
theregister.co.uk
https://software.intel.com/en-us/blogs/2016/06/09/intel-release-new-technology-specifications-protect-rop-attacks
software.intel.com
https://lwn.net/Articles/758245/
lwn.net
https://lwn.net/Articles/758249/
lwn.net
https://lwn.net/Articles/758250/
lwn.net
https://lwn.net/Articles/758251/
lwn.net
https://lwn.net/Articles/758252/
lwn.net
Elsewhere on blog.dshr.org (6)