Designer III Blog (home)
New Comments Designer III Blog RSS Feed

Designer III Blog November Archive

Favorite Posts:
, :




FFF5D6,FFF5D6,FFF5D6,FFE699
Other Resources
FFF5D6,FFF5D6,FFF5D6,FFE699
Tags

Blog Roll:


security via obscurity Designer III Blog; November, 2008 Archive; Designer III Blog

Is an Unresettable Real Time Clock (RTC) just as good as a Write Only Memory?

By Bob Paddock at 11/21/08 09:09
In Jack Ganssle's Embedded Muse 169 sponsored by Netrino, Jack printed a very short summery of a message exchange we had, about new Maxim's High-Performance Secure RISC Microcontroller with the Unresettable Real Time Clock (RTC).

Here is the full text of my message to Jack:

Is an Unresettable Real Time Clock just as good as a [404 Check: was link to http:/ / www. ganssle. com/ misc/ wom. html, anchor: Write Only Memory] ? A new Maxim part may give us both:

We may never know because the data sheet is a secret. At the bottom of that .pdf it tells you where to get the real data sheet, which just takes you back to the data sheet that you are looking at in the first place.

If this part is so secure then why are they practicing the worst of all security methods Security via Obscurity with the full data sheet?

As we can not read the data sheet lets assume we can set the RTC *once*. We make a million+ credit card terminals and ship them off to retailers before the Christmas rush. Then our wonderful politicians legislate a new time for the changing of Day Light Savings Time, as they have done in the past. Now what happens to those million+ terminals 'out-there'? Do I have to recall them at my expense to replace the now wrong clock?

Security issues are always interesting, especially when people don't think a head far enough.

Maxim makes the greatest parts *on paper* but their reputation for poor delivery are well known, at least in this part of the world. I've worked in two companies where designing in Maxim is outright band. Even their distributor in the area discouraged their use because of the continually screwing of their customers on delivery dates. Then Maxim took away their franchise rights and gave it to an other company, because they did not understand why their product line did so poorly in the "Rust Belt". A Maxim Rep. was once at a meeting I was in, where he walked into the room and said "I don't make it out here to the Rust Belt very often" with glee. If they view us that way here, maybe they should not come at all...

What has your/the Muse membership's experience with Maxim been?


Tags: maxim • security via obscurity • jack ganssle • high performance secure risc •
0 Comments. - Permalink


security via obscurity Archives: • November, 2008



* com * top 100 * 10 * 2394 * Blog * Espanol *

Have you added a link to us from your website? (2394):

  • <a href="http://blog.designer-iii.com">Designer III Blog</a>
security via obscurity Designer III Blog; November, 2008 Archive; Designer III Blog

Web site copyright (c) 2007-2010 GLR Sales LLC.




(rozwqizwpwzpo)

Privacy & DMCA Policy -- Those who twitter us!
security via obscurity Designer III Blog November Archive