Hackers turned a $200 Nvidia mining GPU into a 64GB Tesla A100 monster

During the peak cryptocurrency frenzy, Nvidia harvested defective silicon dies that failed quality checks for server hardware and repurposed them into stripped-down mining cards like the CMP 170HX. Sold originally for thousands before plunging to $200 on the used market, these GPUs were factory-mutilated with disabled video outputs, crippled PCIe lanes, and artificial firmware locks on their HBM2 memory modules.

Security researcher Jon Pry cracked open the proprietary Nvidia firmware protection through a surprisingly mundane vulnerability inside the driver bootloader. The hardware giant hid its execution binary behind AES encryption, yet accidentally shipped a debug version encrypted with a trivial key pattern equivalent to simple sequential numbers.

Once inside, a classic buffer overflow bug bypassed the chip's internal security coprocessor known as Falcon. The software engineers had implemented hardware stack safeguards against memory corruption, but mistakenly placed the validation key inside the exact memory buffer that the attack overwrites.

By executing custom code past hardware signatures, the exploit rewrites fuse override registers to expand usable memory eightfold from 8GB up to 64GB while unleashing suppressed compute cores. Modded driver releases on GitHub are already replicating the unlock across community hardware, making locked enterprise silicon available at bargain basement prices.

The tech giant built a fortress of digital signatures, hardware keys, and encrypted bootloaders, only to leave the backdoor key under a welcome mat woven out of programmer laziness. Thousands of artificially crippled chips sitting in electronic scrap heaps are now waiting to undermine enterprise pricing structures overnight.

Source: Zenodo