Intel process security bug

[Yw-slayer]

https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/

TLDR version: Massive security bug can't be patched in-processor, Windows, Linux (hence also MacOS) etc. speeds will all need to be patched which will result in double-digit % speed hits to all processors from the last decade.

FFFFFFFUUUUUUUUUUUUUU and I smell class-action lawsuit.

With that said, at least we got this out of it:


The fix is to separate the kernel's memory completely from user processes using what's called Kernel Page Table Isolation, or KPTI. At one point, Forcefully Unmap Complete Kernel With Interrupt Trampolines, aka FUCKWIT, was mulled by the Linux kernel team, giving you an idea of how annoying this has been for the developers.

[Rare White Ape]

Shhheeeeeit.

Has Intel been using German-brand diesel-fuelled People's Processors or something?

Metal-level security flaws? A lot of people will jump ship to AMD in the short term. I wasn't too keen on Ryzen but who knows now? Could take Intel years to fix this one.

[Cam]

I'm not really a techie, but even I can tell that is a major eff-up. :eek:

Not the first time Intel has faced a shitstorm. Remember back in the '90s when some scientists realized Intel processors did math wrong? :lol: Intel's response was basically, "We did not think anyone would notice." :smh:

[dodint]

This kind of reminds me of Superfish, but a lot worse.

[Yw-slayer]

http://fortune.com/2018/01/03/intel-kernel-security-flaw-amd/

Apparently amd and arm are also affected, but to a different degree.

[Jacee]

As stated here: https://www.infosecurity-magazine.com/news/major-chip-flaws-confirmed/


The National Cyber Security Centre (NCSC) claimed in a statement that it had seen “no evidence of any malicious exploitation” and advised users and IT admins to install patches as soon as they are made available.

[dodint]

Yeah. This is going to be a headache for me. At least Tenable already has plugins for it.

[Rare White Ape]

Updates are rolling in for a bunch of devices. iOS 11.2.2 came in for my iPhone and iPad today. Apparently Microsoft was real quick with the Win 10 update as soon as this all leaked, but I’m not seeing any mention of it in the update notes for one that I received on the 6th.

I’m getting mixed info from the (few) sites that I’ve checked, however. I’m still up in the air about whether I have to update the processor itself, as well as the OS. I’ve read some scary phrases such as BIOS update as well. This is all very confusing.

[Rare White Ape]

Benchmarks from Digital Foundry:

http://www.eurogamer.net/articles/digitalfoundry-2018-does-patching-cpu-security-flaws-impact-gaming-performance

Overall there’s not much to worry about performance-wise if you’re a home user, and gaming performance only loses 1-5%; the worst of the games they tested being The Witcher III which is very CPU intensive in its heavily NPC populated areas.

The main effects will be felt by workstation users and in data centres, where threads and cores take center stage far more than that sort of workload is seen on the average desktop.

[Tom Servo]

Judging by my searches yesterday, it looks like I'm not the only one that just cannot get the OSX update to install.

[CudaMan]

It's funny - W10 seems like it's frequently bugging me about updates and restarts required. Ever since this important bug came about, it's crickets.