BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”
6 人推荐 · 跨 6 个月 · 2019–2024
中文导读
针对彭博商业周刊引发轰动的报道，著名硬件黑客 Andrew "bunnie" Huang 从工程实操视角理性评估了硬件供应链攻击的可行性——从内部恶意人员到国家级攻击者，拆解了如何在主板中夹带未记录芯片及其在现实中极难被检测发现的工程困局。
为什么 HN 推它
HN 上关于硬件供应链安全公认最冷静、最接地气的技术剖析，让无数常年做纯软安全的人大开眼界。
「在这个领域里，这是一场让人大开眼界的硬核演讲。」HN 网友原话：This is an eye opening talk in the subject
英文原摘要（HackerTube / Claude 整理）
Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.
HN people point to it as the sober, technically grounded picture of hardware supply chain security, and an eye-opening one.
HN 上的提及
Watch this
I found Bunnie Huang's talk on supply chain security a reasonable picture of the issues underlying the Bloomberg story.
For a good discussion of this topic, I recommend Andrew "bunnie" Huang's talk about supply chain security
There's a fun talk that goes over a lot of them here
This is an eye opening talk in the subject