Christopher Tarnovsky, who operates the California-based consulting firm Flylogic Engineering, must strike dread into the heart of anyone working on secure computer chips.
At the Black Hat DC, a computer-security conference in Washington, DC, Tarnovsky gave an impressive demonstration of how even the most secure system will fall under a sustained, determined attack.
Tarnovsky says that he spends almost every waking moment hacking chips. He even owns a focused ion beam work station–a secret weapon for chip hackers. Such a machine costs a quarter of a million dollars, used.
The target in Tarnovsky’s demonstration was the family of chips used for trusted platform computing, and for controlling access to the Xbox 360, GSM SIM cards, and satellite television transmissions. After six months of intense work, Tarnovsky says he developed a technique that allows him to break one of these chips in a matter of hours.
That’s not to say that the chip’s security is poor. Tarnovsky speaks of its design with great respect. When he describes what he had to do to get into it, it’s easy to see why: the device is loaded with encryption, dummy data, light sensors that destroy the chip if they detect a signal, and a complex coating of mesh that will also kill the chip if it’s mishandled.
“It’s a really nice design,” Tarnovsky says, “but it’s not as secure as they claim it is.” This turns out to be the message he wants to get across. Since this chip is rated with extremely high security, Tarnovsky has identified improvements that he believes should be made to protect it further.
However, he acknowledges that few people have the skill and equipment needed to break the chip. In this case, announcing that he’s broken the device won’t mean a flood of copycat hackers. Instead, it just shows that nothing is invulnerable.
This scientist now believes covid started in Wuhan’s wet market. Here’s why.
How a veteran virologist found fresh evidence to back up the theory that covid jumped from animals to humans in a notorious Chinese market—rather than emerged from a lab leak.
How Facebook and Google fund global misinformation
The tech giants are paying millions of dollars to the operators of clickbait pages, bankrolling the deterioration of information ecosystems around the world.
We still don’t know enough about the omicron variant to panic
The variant has caused alarm and immediate border shutdowns—but we still don't know how it will respond to vaccines.
NSO was about to sell hacking tools to France. Now it’s in crisis.
French officials were close to buying controversial surveillance tool Pegasus from NSO earlier this year. Now the US has sanctioned the Israeli company, and insiders say it’s on the ropes.
Get the latest updates from
MIT Technology Review
Discover special offers, top stories, upcoming events, and more.