Intel FUBAR ... again - Kernel memory leak in nearly every Intel CPU of the last decade (Spectre hits everyone, Meltdown still Intel exclusive)

Intel confirmed that patches for the security flaws can cause higher-than-expected reboot rates in Ivy Bridge, Sandy Bridge, Skylake and Kaby Lake processors, said Navin Shenoy, general manager of the data center group, in a statement on Intel’s website.

This freaking shitshow will never end will it?

curls up in the corner with a bottle of whisky

What shit show ? sat here on all AMD

7 Likes

Kinda interesting implications for the future. Stuff is insecure, needs firmware/microcode patches. Patches makes stuff slower/unstable -> people don’t patch. Stuff gets much much worse down the line when people stop patching stuff for fear of performance problems. All ends in flames.

That it hasn’t ended in flames already more and more looks like dumb luck.

I recommend only visiting with javascript etc disabled since for all we know this could be a watering hole trap page.

https://skyfallattack.com
https://solaceattack.com/

Domains where registered 12th January 2018.
image
But don’t take them too seriously for now
Someone might just be having some fun. :wink:

The company hosting this:

https://www.mythic-beasts.com

As we know Raspberry Pi 3 is immune to Spectre and Meltdown.

And the response from the host company

Might be that whoever is hosting that is paranoid as hell of whatever spectre / meltdown derived vulnerability they found.

1 Like

Updated with new information.

image

Could be a scam page though.

Everyone is jumping on the Gravy Train

Your $15 check will be mailed by 2025. :wink:

image

http://www.cand.uscourts.gov/newcasefeed?type=all&p=2

If AMD can properly defend themselves, I don’t see them paying a dime. They’re not effected by Meltdown. Additionally, Spectre is only able to read memory that the process would otherwise have access to, if I understand it correctly, so it seems like the risk on the AMD side is extremely low and not worthy of a lawsuit.


Although, it may be easier for them to settle and mail out $15 checks 10 years from now.

I did read that apple devices are hit hard and like you have a choice with apple at all. AMD have and are sitting well, Intel is most likely spending all the money on dragging them into the mud.

Considering this spectre attack was theoretical in the 90’s on EDU papers. Companies did look the other way.

1 Like

I refer you to this post:

And here I am with mostly Intel CPU computers, only my laptop and an ITX desktop I built have AMD CPUs and the ITX desktop isn’t Ryzen.

Like @catsay said, don’t worry about it yet. It may not be huge like meltdown. It sounds like it’s completely speculative right now, meaning they haven’t pulled it off in the wild yet.

Still waiting for the Octopussy Attack.

2 Likes

Diamonds Are Forever Attack

This one focuses on jewellers POS and security systems.

2 Likes

He’s not even concerned about the risks/ performance effects. But rather the share price of his stocks.

It seems like he’s hoping for a cashout lawsuit. Because “he claims” the spectre disclosure affected the shareprice of his AMD stock.

This is such a strange lawsuit, which in itself would negatively affect the shareprice if he successfully went through with it.

Makes little sense.

Not only that but AMD did everything to not affect the stock price. They said that realistically there is little chance it is going to be exploited anyway, and that they are not affected by one of the attacks at all. So I don’t see any ground for this, but then again I’m not a lawyer.

His lawyer is probably happy about the salary either way.

Wait, he’s upset that news affected the stock price, so he’s suing them?

1 Like

This is a nothing burger to end users. Everyone is losing their shit because in a business world or VM provider. You HAVE to implement these mitigations.

Intel are fucked over in the server world with this and IEMU or whatever.

End users are going to be fine. It’s the fact that big data got hit that matters.

I know browsers should have been fixed timing wise a year ago. ROWHAMMER or whatever. But at home physical access is key and business it’s all your junk is in the open cause you are on the internet.

1 Like

I was thinking the same thing

at a time with all this crap going down and all you need to do is just hold course and wait for AMD to soar in the aftermath

OR

Sue them and commit self harm…

I find it crazy that ANY amd share holder would sue given the current conditions

I am giving up on trying to figure out anything around stocks / shares as very little of it makes sense to me anymore.

I’m still laughing at all the intel users. It has been worth the wait :grin: So many fires…