frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Open in hackernews

Infineon security microcontroller flaw enabled extraction of TPM secret keys

https://it4sec.substack.com/p/a-flaw-in-infineons-security-microcontrollers
37•walterbell•15h ago

Comments

greyface-•9h ago
Previous discussion: https://news.ycombinator.com/item?id=41434500
tomhow•3h ago
Thanks!

EUCLEAK Side-Channel Attack on the YubiKey 5 Series - https://news.ycombinator.com/item?id=41434500 - Sept 2024 (278 comments)

Marking this one as dupe as it doesn't add any new info.

userbinator•7h ago
Good. Enough freedom has already been destroyed in the name of hostile "security".

I suspect many far-East "MCU break" services companies already knew of such things, but obviously would not want to publicise it.

johncolanduoni•4h ago
Name one person who couldn’t do something on a retail Intel computer they owned, because it had a TPM
mindslight•4h ago
George Washington.

But seriously, that's an ignorant criterion. It's not a matter of arbitrary people being singled out, it's a society-wide noose being tightened ever so slowly.

Locked down boot chains were never fully asserted on amd64 because its market is for general purpose computers, and doing so would have obviously just caused people to choose alternative options. But remote attestation has no such escape hatch, and we can already see that dynamic starting to play out over in mobile land with "safety net".

userbinator•3h ago
it's a society-wide noose being tightened ever so slowly

This. Fortunately there was a huge resistance against WEI, but we must remain vigilant to them attempting to sneak in something similar in the future.

userbinator•3h ago
TPMs being widespread and accepted is a problem. It means that everyone has been put into a noose, but one that just hasn't yet been tightened. As evidence of what we're up against, Stallman saw it coming 25+ years ago, kept warning about it, and look what they did to him.

Relevant comment of mine 3.5 years ago: https://news.ycombinator.com/item?id=29859999

Ask HN: What's the coolest AI project you've seen?

2•miletus•13m ago•0 comments

Ask HN: AGI and Product Development

2•MasihMinawal•17m ago•1 comments

23andMe founder buys back genetic testing company in second auction

https://www.ft.com/content/43ec5fe2-3dec-41bf-9679-e9637951971f
1•WithinReason•20m ago•0 comments

Short: What happens if you turn the horizon into music? [video]

https://www.youtube.com/shorts/044S8s8BZNw
1•superjan•24m ago•1 comments

Creating One platform from travel planning to booking

1•ashishrawat•26m ago•0 comments

The Intelligence Curse

https://intelligence-curse.ai/
2•pseudolus•29m ago•0 comments

Ask HN: Is it still a good idea to learn Perl for a young developer?

1•not-so-darkstar•33m ago•0 comments

Setting Up a Free One-Handed Touch-Typing System on Your PC

https://99percentinvisible.org/article/one-hand-touch-typing-setup/
1•sohkamyung•42m ago•0 comments

Is there interest in an informal proof that Graph Vertex 3-Colouring is NPC?

1•ColinWright•47m ago•0 comments

Notes on the History of the Map Tile

https://placing.technology/notes-on-the-history-of-the-map-tile
2•altilunium•47m ago•0 comments

Notes on Managing ADHD

https://borretti.me/article/notes-on-managing-adhd
1•vghaisas•50m ago•1 comments

Lincoln Steampunk Festival

https://www.visitlincoln.com/whats-on/featured-event/lincoln-steampunk-festival/
1•zeristor•53m ago•0 comments

Vesna Vulović

https://en.wikipedia.org/wiki/Vesna_Vulovi%C4%87
1•ZeljkoS•53m ago•0 comments

Meta AI searches made public – but do all its users realise?

https://www.bbc.com/news/articles/c0573lj172jo
3•taubek•56m ago•0 comments

NASA jettisons Neo4j database for Memgraph citing costs

https://www.theregister.com/2025/05/07/nasa_people_memgraph/
2•taubek•58m ago•0 comments

In Munich, early signs of a European hyperscaler revolt

https://www.raconteur.net/technology/in-munich-early-signs-of-a-european-hyperscaler-revolt
2•taubek•1h ago•1 comments

I Am So Tired

2•Piko•1h ago•1 comments

The De Man Case (2014)

https://www.newyorker.com/magazine/2014/03/24/the-de-man-case
2•aragonite•1h ago•1 comments

Writing Load Balancer from Scratch in 250 Line of Code

https://beyondthesyntax.substack.com/p/writing-load-balancer-from-scratch
2•thunderbong•1h ago•0 comments

What Will the World Cup Stand for in an Isolationist America?

https://www.theringer.com/2025/06/11/soccer/fifa-world-cup-2026-usa-location-trump-isolationist
2•bryanrasmussen•1h ago•0 comments

De-EscalatingSocial Media – Designing humility and forgiveness into social media

https://nickpunt.com/blog/deescalating-social-media/
1•mofosyne•1h ago•0 comments

India reportedly suspending rare earth exports to Japan amid domestic needs

https://ca.finance.yahoo.com/news/india-reportedly-suspending-rare-earth-110807125.html
1•01-_-•1h ago•0 comments

Google is killing Android Instant Apps, but you probably won't miss them

https://www.androidauthority.com/google-killing-android-instant-apps-3567211/
1•01-_-•1h ago•0 comments

ChatGPT: H1 2025 Strategy [pdf]

https://substack-post-media.s3.us-east-1.amazonaws.com/post-files/165959620/77710a9b-6942-4416-af92-60e7e53ab56c.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIAUM3FPD6BXL43LJ7G%2F20250615%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250615T084023Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEFMaCXVzLWVhc3QtMSJHMEUCIQCAGHFJiX3Nji6Uf1mHYzdLhFfbFKkb5wG4l2m3FrmlnQIgMOs7TcK8vRdQtJInsmOp5M4ScGMl4vUa1mCoWVtHCqYq%2BQMIPBAEGgwzMDI0NzExMjY5MTUiDH%2FvL91L%2FU3opwFGUSrWAy767geTiaQPJeaWJmJghMktfIc0hxZn7lloZmY1l4VWada2r5yhlTDDRYleryLBFrpDCItneSqtceRtuiUaRay8wDiSt482t5ngLY41l%2Fa3%2FlVhqP4pG3Wuadu%2FlE4rOro8aX1OF9x3YFbIIeRtfVZdENqd2TflPvA7e1YMmj%2BCTGI65Dad34clTbrCNXxNM%2FJArMvPr6NvCHdl5fSFHOLHbIsvLDJJwjUsDFPwCFjh71%2FyQrYTzcat6fESPhkoP1Aa41JU2qlOUFKQkIV36E%2B0c4Rl2Tq5uKsVs5Nqu7p%2BXZrRbrrJz3FwDh2kCTtmMzYdL0XqsktY3ZjNfN5m4d5KxNhE0FhI0MXEAcMN%2F4R3GWOrHfwMS7osh57A1gNL9PeXCFGl7W5%2FxWTqWGhWtYeoBiJTkvYWivJXB%2BI4VAA3Tr1NokhLWyZFFTHnLidymoHALbnq7mhV1C5fzwTUvzVFbAI%2F7mdUKki4dSV4ta4Xfk4IrBiVYcyLwmvPWWnoacO6VzJgDKJd%2BDXMICVI6nzhSLgq5WtuQDWgJJGKCWRXCmt5jt0fUfYZVV00PBuybspAg0nfkBV6u%2FDVRG3tvWab%2FRtqw3wZ9AJqT4tQiVCex3pUQltKMP%2FsuMIGOqUBJZmJthlXoMHe4MpiP%2BACqrX6OLHFndIM4BAydfGIQCQ7u%2BJEvjd8Np5ZyfphsfyU2h2O8DmPpaNj05MPdgyWw6clQ3bcO97mFsFdbUY%2BQPHkRDr5qTPqnWXmyGNeftLhQqDqV%2F9xPh1QMJUYg2YryNltyeSZ%2BzjOyfzVfHs1mPvpvUYg40eAHlbBKDYv9utJX1%2BR4yFNRPVl7gv5RFQbM9ZXCNxX&X-Amz-Signature=8ae3ace7bd87b2264e2cd9c9ab0040ea5b5b4770ef89e1c5c933256ac6d62150&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3D%22Chatgpt_H1_2025_Strategy.pdf
1•martinohansen•1h ago•1 comments

Aged Garlic Extract (Age)

https://domofutu.substack.com/p/aged-garlic-extract-age
1•domofutu•1h ago•0 comments

Show HN: Un.limited.mx – Free Email Testing Service for Dev/QA Teams

https://www.un.limited.mx/
1•rickdangerous1•1h ago•2 comments

I Wrote a Compiler

https://blog.singleton.io/posts/2021-01-31-i-wrote-a-compiler/
2•ingve•1h ago•0 comments

Lessons from 9 More Years of Tricky Bugs

https://henrikwarne.com/2025/06/15/lessons-from-9-more-years-of-tricky-bugs/
2•ingve•1h ago•0 comments

Matriny

https://matriny.africa/
1•Satetra•1h ago•0 comments

PDF-LIB · Create and modify PDF documents in any JavaScript environment

https://pdf-lib.js.org/
2•doener•1h ago•0 comments