Why the alleged ESP32 backdoor couldn’t happen here
cheriot.org
If you’ve been following the news this weekend, you’ll have seen articles about a vulnerability (alleged to be an intentional backdoor) in ESP32 microcontrollers. The news is somewhat overhyped (the attacks probably require physical access) but it provides an opportunity to look at what we did in CHERIoT to eliminate this class of attack by construction.

This should be of interest to anyone using ESP32 devices currently and is seeing the influx of the RISC-V ISA devices coming up.

Hopefully the future of IOT might include device drivers that can’t suborn devices like the ones for the ESP32 can, by compartmentalizing memory space on the device, and auditing the compilation of such drivers.