Lpc2000

[discussion mode -- please skip if you find this post long]

--- In lpc2000@yahoogroups.com, Robert Adsett <subscriptions@a...> 
> It is?  I missed that completely then.  BTW, if it wasn't obvious
> I think banning research on security flaws is somewhere between
> pointless and self-defeating.

Agreed.  I do not believe there is any such ban in effect.  If there
were, then there would not be umpteen textbooks and articles on these.

Simply put, it is not unlawful to be a locksmith by profession.  It
may be to break the prefessional code of conduct.

> Maybe they are looking for the moral equivalent of a child
> lock?  Not something to protect against a concerted attempt,
> just something to indicate that you consider the internals
> proprietary.

I do not think CEP security was meant as child's play or for child
proofing purposes.  See the post with the term "preying eyes".

Look a the claims and the veracity with which Philips defended its CEP
on this forum before the flaws in the boot loader were exposed.

I am not a lawyer.  I have dealt with many on such matters, IMO

a) The claims in the data sheets are at best inaccurate.

b) The claims made by Philips on this forum are misleading.  I am not
sure if or how one would show intent.

It is now in the open that the boot loader CSI fails and that it has,
hidden commands and hidden arguments for known commands (trojans).

I would not be surprised if Philips is now frantically looking into
CSI vulnerabilities as we speak.  It is quite obvious a freeze has
been put on discussoin of these issues between the engineering and
support teams within.

Should further claims be made without reference to the issues raised,
it may be quite possible to show "deceptive and misleading conduct"
that is unlawful in most countries.

Anyone who is has LPCs out in the field and relies on its CEP features
for protection of IP or for security purposes should seek profesional
opinion.

However, for the rest of us who are just using 2105 as a platform for
doing creative things and not concerned with CEP, there is nothing to
stop us from continue to enjoy this part, and the trend it has set in
terms of availability of cheap ARM cores.

Jaya