Comment on ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

avidamoeba@lemmy.ca ⁨3⁩ ⁨months⁩ ago

• Drathro@dormi.zone ⁨3⁩ ⁨months⁩ ago

  I think they meant it as “once infected may be impossible to disinfect.” But it sure doesn’t read that way at first glance.

  source

  • WHYAREWEALLCAPS@fedia.io ⁨3⁩ ⁨months⁩ ago

    Did they change it? Because now it says "Allows Deep, Virtually Unfixable Infections" and that seems to say exactly what you are.

    source

    • psud@lemmy.world ⁨3⁩ ⁨months⁩ ago

      Surely one could use the same exploit to restore the original boot code as the malware used to corrupt it

      source
• Bjornir@programming.dev ⁨3⁩ ⁨months⁩ ago

  If you have kernel access you can already do almost everything so a vulnerability on top of that isn’t that bad since no one should have kernel access to your computer

  source

  • randompasta@lemmy.today ⁨3⁩ ⁨months⁩ ago

    You mean like Crowdstrike?

    source

    • HauntedCupcake@lemmy.world ⁨3⁩ ⁨months⁩ ago

      Most All antivirus software runs at kernel level

      source

      • Bjornir@programming.dev ⁨3⁩ ⁨months⁩ ago

        Which is precisely the reason you shouldn’t use an AV apart from the one packaged with Windows

        source
  • rob_t_firefly@lemmy.world ⁨3⁩ ⁨months⁩ ago

    “They’re going for the kernel!”

    "Colonel who?"

    source

    • RacerX@lemm.ee ⁨3⁩ ⁨months⁩ ago

      Cancer. Brain. Brain cancer.

      source
• someguy3@lemmy.world ⁨3⁩ ⁨months⁩ ago

  Requires kernel-level access

  What does that mean to the rest of us?

  source

  • floofloof@lemmy.ca ⁨3⁩ ⁨months⁩ ago

    It means that a malicious actor would already need to have hacked your computer quite deeply through some other vulnerability (or social engineering) before they could take advantage of this one. But I don’t agree with another commenter here that this is a “nothingburger”: this vulnerability enables such a hacker to leave undetectable malware that you just can’t remove from the computer even if you replace everything but the motherboard. That’s significant, particularly for anyone who might be a target of cyber-espionage.

    source
  • avidamoeba@lemmy.ca ⁨3⁩ ⁨months⁩ ago

    Festivus

    source