• 0 Posts
  • 23 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle






  • I don’t see it as irrational. You’re thinking about it the wrong way round.

    Manufacturers buy chips from proven sources, where the chip can be traced back to the fab that made it. The entire system of trust is built on the assumption that the chip designers and fabs are trustworthy and that the shady stuff happens elsewhere in the supply chain.

    When the designers can’t be trusted, it breaks everything. Up until now it hasn’t been a problem except in extremely sensitive areas like military equipment - only governments can force a company to risk everything by compromising their own products. But take the risk away - make it cheap enough to design new microcontrollers - and what’s to stop a chip designer from taking money from (for example) the Russian mafia? IoT is huge, everywhere, and Risc-V is ideally suited for it.


  • I don’t think it’s so much “security by obscurity” as it’s an issue of a much lower bar for chip production. Intentional back doors or malware represent a huge risk for a product line, so manufacturers won’t put them in without someone like the NSA leaning on them. It’s a simple risk/benefit calculation.

    But the risk is much lower if you can snag a processor design off the 'net, make your modifications, send it off to a fab and sell it under a fly-by-night operation. If it’s ever discovered, you take the money and run.


  • I see this sort of thing all the time.

    There’s a disconnect between the time scales for industrial equipment and the time scales for IT and telecommunications. A PLC running a factory might last 30 years, but the software to program and troubleshoot it won’t run on modern operating systems or computers. The company doesn’t want to spend hundreds of thousands of dollars to upgrade it when there’s nothing wrong with it.

    Same with telecommunications - POTS worked for a century, and over the last decade we’ve seen it largely disappear, which makes fire alarm panels everywhere inoperative. We recently ran into an issue where a fire marshall refused to allow anything but POTS and all of the non-end-of-life hardware only supported IP.











  • High school? Chemistry. I took it because I had no interest in biology. Turned out to be interesting, so much so that I took Chem II even though it wasn’t required to graduate.

    Chem II was the hardest math class in high school. I loved it.

    College? Computer Organization. It’s about how computers work down at the circuitry level. All the programming was in assembly. Easily the hardest class I took in college.

    I don’t know why the hard classes were always my favorites.