Comment

Comment on ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

notnotmike@programming.dev ⁨5⁩ ⁨months⁩ ago

I mean, I’m not much of a tinfoil hat, but this article feels extremely conveniently timed for Intel, who is currently going through a massive ordeal with their chips. Especially considering that the vulnerability is so extremely difficult to exploit that there’s borderline no story here for 99% of people but the headline will still drive clicks and drama.

source

Sort:hotnew top

Drathro@dormi.zone ⁨5⁩ ⁨months⁩ ago
Difficult to exploit, already in the process of being patched. Truly, the most breaking of news.

source
- httperror418@lemmy.world ⁨5⁩ ⁨months⁩ ago
  How does the patch actually get delivered? Via windows update or using something else?
  
  source
  - Passerby6497@lemmy.world ⁨5⁩ ⁨months⁩ ago
    Most likely. Windows update (or the Linux equivalent on your platform) will download updated microcode to load at boot time to basically be a software patch for hardware issues. At least, that’s how it was explained when the original speculative execution flaw was discovered and Intel was releasing foxes and shit for it.
    
    source
    amanda@aggregatet.org ⁨5⁩ ⁨months⁩ ago
    
    and Intel was releasing foxes and shit
    
    I realise this is an autocorrect error, but it’s still funny 🦊
    
    source
  - Drathro@dormi.zone ⁨5⁩ ⁨months⁩ ago
    On windows the article mentioned being a microcode patch via Windows update. Linux would be similar- but via a kernel update most likely. I’d assume that a general BIOS update would also do the trick, but then you’re relying on motherboard vendors and it’s unlikely many would provide such an update to older hardware, even if it’s still widely used.
    
    source
TheGrandNagus@lemmy.world ⁨5⁩ ⁨months⁩ ago
Intel has literally done this, and stuff like it before.

They back “independent” researchers who twist themselves in knots to make AMD look bad.

Look up the multiple counts of bullshit from a “research group” called Principled Technologies.

Sidenote: the guy who ran it was Ryan Shrout, who used to work for PC Perspective, and would usually give favourable reviews to Intel. After leaving Principled Technologies, he got a high up marketing position at… drumroll… Intel!

Principled Technologies isn’t the only scam “independent researcher” Intel has set up or paid handsomely either.

source
- deuleb_biezelbob@programming.dev ⁨5⁩ ⁨months⁩ ago
  I thought switching to AMD should’ve kept me save from Intel ME (I used ME_cleaner if I had too) :(
  
  source
heavy@sh.itjust.works ⁨5⁩ ⁨months⁩ ago
I loathe what part of the security community has become with the stunt hacking and vuln naming. That being said, I doubt it’s some conspiracy. I don’t know all the details but it wouldn’t be exceptional to identify a bug that has existed in processor firmware or legacy code for a long time.

People are looking at this stuff all the time, both professionally and for fun. You could make the case that it’s inevitable that there will be exploits found that affect a huge population.

In the end, as long as the layman gets smarter about computer security, the better people will react to vuln drops.

source
sudo42@lemmy.world ⁨5⁩ ⁨months⁩ ago
Not too unusual. There have been a lot of new vulnerabilities announced lately. A few months ago they announced one that exposed all (?) mainstream CPUs, even Apple’s new chips.
Some of the vulns are serious, but many require very specific circumstances to actually work.

source
megaman@discuss.tchncs.de ⁨5⁩ ⁨months⁩ ago
The folks who found it are presenting at Defcon this weekend, according to the article.

I imagine some of the industry press (i.e. Wired) are just looking through the Defcon agenda to figure out what to write. I saw two or three other articles about hacks or exploits and things like that that also mentioned it was bring presented at Defcon.

source
ruse8145@lemmy.sdf.org ⁨5⁩ ⁨months⁩ ago
Was there a real user risk to any of the flaws since heart bleed? Or did people mostly want to hate on Intel? I’m no tinfoil hatter either I’m just asking questions.

source
- Passerby6497@lemmy.world ⁨5⁩ ⁨months⁩ ago
  13th and 14th generation Intel processors can be physically damaged and degrade over time on the latest issue from Intel.
  
  source
  - auzy@lemmy.world ⁨5⁩ ⁨months⁩ ago
    Yep. Reminds me of when ubiquiti damaged the radios on the unifi pro through dodgy firmware.
    
    We ended up replacing them all just in case because we didn’t want customers affected
    
    The Intel issue is far worse because they’re not even patching it quickly, and it is slowly frying cpus
    
    source
beefbot@lemmy.blahaj.zone ⁨5⁩ ⁨months⁩ ago
Every last news article you see, you must ask: who benefits from this article’s appearance?

It’s not just judges who can be bought.

source