买来的“特供”芯片一定不安全

Core Viewpoint - The article discusses the security risks associated with chips, particularly focusing on Nvidia's H20 chip, which has been flagged for potential backdoor vulnerabilities. The piece emphasizes that while companies like Nvidia claim their products are secure, the reality is that all chips may have vulnerabilities, and the risks are heightened for chips designed for specific markets like China [1][11]. Group 1: Security Risks of Chips - The National Internet Information Office of China has formally addressed Nvidia regarding the security risks of its H20 chip, demanding explanations and proof of safety [1]. - The article categorizes backdoors into three types: malicious self-contained, post-cracking, and secretly implanted, highlighting the various ways vulnerabilities can be introduced into chips [2]. - It is noted that even well-known companies like Intel and AMD have been found to have serious vulnerabilities in their chips, which raises concerns about the overall security of Western-designed chips [4][5]. Group 2: Specific Vulnerabilities - Nvidia's GPUs have been reported to have multiple vulnerabilities, including the GPUHammer vulnerability, which can drastically reduce the accuracy of models running on the GPU [6]. - Intel has faced numerous vulnerabilities over the years, including the Downfall vulnerability, which affects a wide range of its CPU generations [5]. - ARM processors have also been found to have significant design flaws, such as the PAC vulnerability, which cannot be fixed through software updates and requires hardware upgrades [5]. Group 3: Implications for Market and Security - The article suggests that chips designed for specific markets, like Nvidia's H20 for China, may pose greater security risks than globally available models, as they are less scrutinized by international security researchers [11]. - The potential for backdoors in chips raises concerns about the implications for national security, especially if these chips are used in sensitive applications [10]. - The discussion highlights the importance of understanding the risks associated with purchasing chips from foreign companies, as vulnerabilities may not be promptly addressed, leading to long-term security issues [9].