Personal computing discussed

Moderators: renee, Flying Fox, morphine

 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19673
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 6:37 am

· R7-5800X, Liquid Freezer II 280, RoG Strix X570-E, 64GiB PC4-28800, Suprim Liquid RTX4090, 2TB SX8200Pro +4TB S860 +NAS, Define 7 Compact, Super Flower SF-1000F14TP, S3220DGF +32UD99, FC900R OE, DeathAdder2
 
just brew it!
Administrator
Posts: 54500
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 8:42 am

It's the new normal, I'm afraid. Both for CPU exploits and forum breakage. :cry:
Nostalgia isn't what it used to be.
 
K-L-Waster
Gerbil Elite
Posts: 576
Joined: Thu Feb 12, 2015 8:10 pm
Location: Hmmm, I was *here* a second ago...

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 9:27 am

From 2020 forward, the only safe computing involves an abacus.
Main System: i7-8700K, ASUS ROG STRIX Z370-E, 16 GB DDR4 3200 RAM, ASUS 6800XT, 1 TB WD_Black SN750, Corsair 550D

HTPC: I5-4460, ASUS H97M-E, 8 GB RAM, GTX 970, CRUCIAL 256GB MX100, SILVERSTONE GD09B
 
just brew it!
Administrator
Posts: 54500
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 9:45 am

K-L-Waster wrote:
From 2020 1996 forward, the only safe computing involves an abacus.

FTFY.

x86 CPUs have implemented speculative execution since the Pentium II and K5. People just hadn't seriously started to explore how it might be exploited "in the wild" until recently.
Nostalgia isn't what it used to be.
 
Wirko
Gerbil Team Leader
Posts: 296
Joined: Fri Jun 15, 2007 4:38 am
Location: Central Europe

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 10:09 am

K-L-Waster wrote:
From 2020 forward, the only safe computing involves an abacus.


PEBKAC thus becomes PEBAAC, which is great for security.
 
K-L-Waster
Gerbil Elite
Posts: 576
Joined: Thu Feb 12, 2015 8:10 pm
Location: Hmmm, I was *here* a second ago...

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 10:16 am

Wirko wrote:
K-L-Waster wrote:
From 2020 forward, the only safe computing involves an abacus.


PEBKAC thus becomes PEBAAC, which is great for security.



...but today the pattern of beads is all wrong!

https://xkcd.com/722/
Main System: i7-8700K, ASUS ROG STRIX Z370-E, 16 GB DDR4 3200 RAM, ASUS 6800XT, 1 TB WD_Black SN750, Corsair 550D

HTPC: I5-4460, ASUS H97M-E, 8 GB RAM, GTX 970, CRUCIAL 256GB MX100, SILVERSTONE GD09B
 
Waco
Maximum Gerbil
Posts: 4850
Joined: Tue Jan 20, 2009 4:14 pm
Location: Los Alamos, NM

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 12:48 pm

Sigh. Another round of patching, another round of performance loss. Thankfully I don't rely on TSX for any gains in my systems...
Victory requires no explanation. Defeat allows none.
 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19673
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Intel CPUs vulnerable to Zombieload v2

Wed Nov 13, 2019 8:41 pm

https://pcper.com/2019/11/not-the-best- ... el-inside/
Jeremy Hellstrom wrote:
Not The Best Day To Have Intel Inside
If you use Intel PMxDrv drivers, for integration with software such as LabVIEWTM, DIAdem, MLab your own inhouse .NET API you had better patch as soon as you can!
· R7-5800X, Liquid Freezer II 280, RoG Strix X570-E, 64GiB PC4-28800, Suprim Liquid RTX4090, 2TB SX8200Pro +4TB S860 +NAS, Define 7 Compact, Super Flower SF-1000F14TP, S3220DGF +32UD99, FC900R OE, DeathAdder2
 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19673
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Intel CPUs vulnerable to Zombieload v2

Tue Jan 28, 2020 6:24 am

https://www.techpowerup.com/263355/cach ... processors
AleksandarK wrote:
Another day, another speculative execution vulnerability found inside Intel processors.
· R7-5800X, Liquid Freezer II 280, RoG Strix X570-E, 64GiB PC4-28800, Suprim Liquid RTX4090, 2TB SX8200Pro +4TB S860 +NAS, Define 7 Compact, Super Flower SF-1000F14TP, S3220DGF +32UD99, FC900R OE, DeathAdder2
 
Igor_Kavinski
Minister of Gerbil Affairs
Posts: 2077
Joined: Fri Dec 22, 2006 2:34 am

Re: Intel CPUs vulnerable to Zombieload v2

Tue Jan 28, 2020 10:14 am

Good to see my Ivy bridge and Haswell CPUs are not affected. For once, I'm glad that I don't have a recent CPU.
 
JustAnEngineer
Gerbil God
Topic Author
Posts: 19673
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Intel CPUs vulnerable to Zombieload v2

Wed Mar 11, 2020 9:02 pm

Unfixable ROM vulnerability in Intel's Converged Security and Management Engine:
https://techreport.com/news/3469107/unf ... ntel-cpus/
https://www.techpowerup.com/264535/rese ... intel-cpus


Intel load-value-injection vulnerability is fixable, but the fix causes a MAJOR performance hit:
https://techreport.com/news/3469163/int ... erability/
https://www.techpowerup.com/264676/inte ... mance-hard
· R7-5800X, Liquid Freezer II 280, RoG Strix X570-E, 64GiB PC4-28800, Suprim Liquid RTX4090, 2TB SX8200Pro +4TB S860 +NAS, Define 7 Compact, Super Flower SF-1000F14TP, S3220DGF +32UD99, FC900R OE, DeathAdder2
 
Igor_Kavinski
Minister of Gerbil Affairs
Posts: 2077
Joined: Fri Dec 22, 2006 2:34 am

Re: Intel CPUs vulnerable to Zombieload v2

Wed Mar 11, 2020 10:07 pm

https://lviattack.eu
https://software.intel.com/sites/defaul ... f-2019.pdf

Again, thank God, I didn't get a recent Intel CPU. The impact of LVI is for SGX computations and SGX first appeared in Skylake.

Who is online

Users browsing this forum: No registered users and 1 guest
GZIP: On