[trinsic2]

I havent looked at the presentation yet, but are you saying the PSP, like intels ME could be doing nefarious things since its proprietary and closed? Do you have a link to information on the network capturing thing? I mean is that really a thing?

I have heard of these things before but I am not quite sure what the possibilities are. Do you have a link that can summarize what this actual means in terms of security concerns?

[sascha_sl]

CVE-2017-5689

[google234123]

How do you know there isn't an undiscovered CVE for AMD? There's probably maybe 10x more security research focused on Intel

[sascha_sl]

I don't, but they do a lot less with the PSP, especially if you're just using Ryzen Pro and not server SKUs. Intel put a web interface you can't disable with an offbrand networking gear level RCE vulnerability that needs nothing more than ethernet access into their security chip. I don't think AMD can exceed that anytime soon.