Personal computing discussed

Moderators: renee, Flying Fox, morphine

 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19335
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 6:37 am

1: i7-9700K, NH-D15, Z390M Pro4, 32GiB, RX Vega64, ½TB 960Pro +2TB MX500, Define Mini-C, SSR-850PX, LG 32UD99 + UltraSharp U2410, RK9000V2-BR
2: R5-3600X, Wraith Spire, B450M Steel Legend, 32GiB, RX5500XT, 2TB SX8200Pro, P160, SS-660XP2, TV, G610
 
just brew it!
Administrator
Posts: 53996
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 8:42 am

It's the new normal, I'm afraid. Both for CPU exploits and forum breakage. :cry:
Nostalgia isn't what it used to be.
 
K-L-Waster
Gerbil XP
Posts: 499
Joined: Thu Feb 12, 2015 8:10 pm
Location: Hmmm, I was *here* a second ago...

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 9:27 am

From 2020 forward, the only safe computing involves an abacus.
Main System: i7-8700K, ASUS ROG STRIX Z370-E, 16 GB DDR4 3200 RAM, MSI GTX 1080 TI, 1 TB CRUCIAL MX500, Corsair 550D

HTPC: I5-4460, ASUS H97M-E, 8 GB RAM, GTX 970, CRUCIAL 256GB MX100, SILVERSTONE GD09B
 
just brew it!
Administrator
Posts: 53996
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 9:45 am

K-L-Waster wrote:
From 2020 1996 forward, the only safe computing involves an abacus.

FTFY.

x86 CPUs have implemented speculative execution since the Pentium II and K5. People just hadn't seriously started to explore how it might be exploited "in the wild" until recently.
Nostalgia isn't what it used to be.
 
Wirko
Gerbil Team Leader
Posts: 257
Joined: Fri Jun 15, 2007 4:38 am
Location: Central Europe

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 10:09 am

K-L-Waster wrote:
From 2020 forward, the only safe computing involves an abacus.


PEBKAC thus becomes PEBAAC, which is great for security.
 
K-L-Waster
Gerbil XP
Posts: 499
Joined: Thu Feb 12, 2015 8:10 pm
Location: Hmmm, I was *here* a second ago...

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 10:16 am

Wirko wrote:
K-L-Waster wrote:
From 2020 forward, the only safe computing involves an abacus.


PEBKAC thus becomes PEBAAC, which is great for security.



...but today the pattern of beads is all wrong!

https://xkcd.com/722/
Main System: i7-8700K, ASUS ROG STRIX Z370-E, 16 GB DDR4 3200 RAM, MSI GTX 1080 TI, 1 TB CRUCIAL MX500, Corsair 550D

HTPC: I5-4460, ASUS H97M-E, 8 GB RAM, GTX 970, CRUCIAL 256GB MX100, SILVERSTONE GD09B
 
Waco
Grand Gerbil Poohbah
Posts: 3348
Joined: Tue Jan 20, 2009 4:14 pm
Location: Los Alamos, NM

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 12:48 pm

Sigh. Another round of patching, another round of performance loss. Thankfully I don't rely on TSX for any gains in my systems...
Desktop: X570 Gaming X | 3900X | 32 GB | Alphacool Eisblock Radeon VII | Heatkiller R3 | Samsung 4K 40" | 1 TB SX8200 Pro + 2 TB 660p + 2 TB SATA SSD
NAS: 1950X | Designare EX | 32 GB ECC | 7x8 TB RAIDZ2 | 8x2 TB RAID10 | FreeNAS | ZFS | LSI SAS
 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19335
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 8:41 pm

https://pcper.com/2019/11/not-the-best- ... el-inside/
Jeremy Hellstrom wrote:
Not The Best Day To Have Intel Inside
If you use Intel PMxDrv drivers, for integration with software such as LabVIEWTM, DIAdem, MLab your own inhouse .NET API you had better patch as soon as you can!
1: i7-9700K, NH-D15, Z390M Pro4, 32GiB, RX Vega64, ½TB 960Pro +2TB MX500, Define Mini-C, SSR-850PX, LG 32UD99 + UltraSharp U2410, RK9000V2-BR
2: R5-3600X, Wraith Spire, B450M Steel Legend, 32GiB, RX5500XT, 2TB SX8200Pro, P160, SS-660XP2, TV, G610
 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19335
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Intel CPUs vulnerable to Zombieload v2

Tue Jan 28, 2020 6:24 am

https://www.techpowerup.com/263355/cach ... processors
AleksandarK wrote:
Another day, another speculative execution vulnerability found inside Intel processors.
1: i7-9700K, NH-D15, Z390M Pro4, 32GiB, RX Vega64, ½TB 960Pro +2TB MX500, Define Mini-C, SSR-850PX, LG 32UD99 + UltraSharp U2410, RK9000V2-BR
2: R5-3600X, Wraith Spire, B450M Steel Legend, 32GiB, RX5500XT, 2TB SX8200Pro, P160, SS-660XP2, TV, G610
 
Igor_Kavinski
Gerbil Jedi
Posts: 1747
Joined: Fri Dec 22, 2006 2:34 am

Re: Intel CPUs vulnerable to Zombieload v2

Tue Jan 28, 2020 10:14 am

Good to see my Ivy bridge and Haswell CPUs are not affected. For once, I'm glad that I don't have a recent CPU.
 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19335
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Intel CPUs vulnerable to Zombieload v2

Wed Mar 11, 2020 9:02 pm

Unfixable ROM vulnerability in Intel's Converged Security and Management Engine:
https://techreport.com/news/3469107/unf ... ntel-cpus/
https://www.techpowerup.com/264535/rese ... intel-cpus


Intel load-value-injection vulnerability is fixable, but the fix causes a MAJOR performance hit:
https://techreport.com/news/3469163/int ... erability/
https://www.techpowerup.com/264676/inte ... mance-hard
1: i7-9700K, NH-D15, Z390M Pro4, 32GiB, RX Vega64, ½TB 960Pro +2TB MX500, Define Mini-C, SSR-850PX, LG 32UD99 + UltraSharp U2410, RK9000V2-BR
2: R5-3600X, Wraith Spire, B450M Steel Legend, 32GiB, RX5500XT, 2TB SX8200Pro, P160, SS-660XP2, TV, G610
 
Igor_Kavinski
Gerbil Jedi
Posts: 1747
Joined: Fri Dec 22, 2006 2:34 am

Re: Intel CPUs vulnerable to Zombieload v2

Wed Mar 11, 2020 10:07 pm

https://lviattack.eu
https://software.intel.com/sites/defaul ... f-2019.pdf

Again, thank God, I didn't get a recent Intel CPU. The impact of LVI is for SGX computations and SGX first appeared in Skylake.

Who is online

Users browsing this forum: No registered users and 3 guests
GZIP: On