PDA

View Full Version : Intel process security bug



Yw-slayer
January 3rd, 2018, 05:34 AM
https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/

TLDR version: Massive security bug can't be patched in-processor, Windows, Linux (hence also MacOS) etc. speeds will all need to be patched which will result in double-digit % speed hits to all processors from the last decade.

FFFFFFFUUUUUUUUUUUUUU and I smell class-action lawsuit.

With that said, at least we got this out of it:


The fix is to separate the kernel's memory completely from user processes using what's called Kernel Page Table Isolation, or KPTI. At one point, Forcefully Unmap Complete Kernel With Interrupt Trampolines, aka FUCKWIT, was mulled by the Linux kernel team, giving you an idea of how annoying this has been for the developers.

Rare White Ape
January 3rd, 2018, 05:54 AM
Shhheeeeeit.

Has Intel been using German-brand diesel-fuelled People's Processors or something?

Metal-level security flaws? A lot of people will jump ship to AMD in the short term. I wasn't too keen on Ryzen but who knows now? Could take Intel years to fix this one.

Cam
January 3rd, 2018, 09:35 AM
I'm not really a techie, but even I can tell that is a major eff-up. :eek:

Not the first time Intel has faced a shitstorm. Remember back in the '90s when some scientists realized Intel processors did math wrong? :lol: Intel's response was basically, "We did not think anyone would notice." :smh:

dodint
January 3rd, 2018, 10:03 AM
This kind of reminds me of Superfish, but a lot worse.

Yw-slayer
January 3rd, 2018, 02:27 PM
http://fortune.com/2018/01/03/intel-kernel-security-flaw-amd/

Apparently amd and arm are also affected, but to a different degree.

Jacee
January 8th, 2018, 07:26 PM
As stated here: https://www.infosecurity-magazine.com/news/major-chip-flaws-confirmed/


The National Cyber Security Centre (NCSC) claimed in a statement that it had seen ďno evidence of any malicious exploitationĒ and advised users and IT admins to install patches as soon as they are made available.

dodint
January 8th, 2018, 07:32 PM
Yeah. This is going to be a headache for me. At least Tenable already has plugins for it.

Rare White Ape
January 9th, 2018, 11:50 PM
Updates are rolling in for a bunch of devices. iOS 11.2.2 came in for my iPhone and iPad today. Apparently Microsoft was real quick with the Win 10 update as soon as this all leaked, but Iím not seeing any mention of it in the update notes for one that I received on the 6th.

Iím getting mixed info from the (few) sites that Iíve checked, however. Iím still up in the air about whether I have to update the processor itself, as well as the OS. Iíve read some scary phrases such as BIOS update as well. This is all very confusing.

Rare White Ape
January 10th, 2018, 02:48 PM
Benchmarks from Digital Foundry:

http://www.eurogamer.net/articles/digitalfoundry-2018-does-patching-cpu-security-flaws-impact-gaming-performance

Overall thereís not much to worry about performance-wise if youíre a home user, and gaming performance only loses 1-5%; the worst of the games they tested being The Witcher III which is very CPU intensive in its heavily NPC populated areas.

The main effects will be felt by workstation users and in data centres, where threads and cores take center stage far more than that sort of workload is seen on the average desktop.

Tom Servo
January 11th, 2018, 08:06 AM
Judging by my searches yesterday, it looks like I'm not the only one that just cannot get the OSX update to install.

CudaMan
January 11th, 2018, 10:14 AM
It's funny - W10 seems like it's frequently bugging me about updates and restarts required. Ever since this important bug came about, it's crickets.