Intel processors' unfixable security flaw

[Bradley Prior]

Intel processors' unfixable security flaw

Security firm Positive Technologies has discovered a vulnerability in Intel's processors launched within the past five years which allows malicious parties to extract the chipset key and obtain access to user data.

Such a breach is impossible to detect, the security firm said.

 

[mister]

Can I get a refund?

 

[MirageF1]

Fortunately I never buy the latest and greatest anything...my T420 with Core i5-2520M dual-core processor came out a while b4 2014.

Tend to wait for all the impulsive, wannabe's, got to have latest greatest buyers to guinea pig themselves and then follow wisely.
Call it a few decades of 'puter experience.

 

[dualmeister]

It's only a flaw if someone tries to exploit it

 

[supersunbird]

Fortunately I never buy the latest and greatest anything...my T420 with Core i5-2520M dual-core processor came out a while b4 2014.

Tend to wait for all the impulsive, wannabe's, got to have latest greatest buyers to guinea pig themselves and then follow wisely.
Call it a few decades of 'puter experience.

Nah, you just poor or don't replace what's working well.

 

[rambo919]

Isnt this only a problem if you use encryption?

 

[MirageF1]

Can I get a refund?

What the F for exactly

Nah, you just poor

Neither poor...nor stinking rich.

But even if i was Gates' nephew I wouldn't buy anything just released. Not just technology. Anything.

Call it XP and a sliver of wisdom.

 

[konfab]

Isnt this only a problem if you use encryption?

Yeah, the best way to get around any security problem is to turn off all encryption.

 

[garyc]

The Intel advisory on this is at: https://www.intel.com/content/www/us/en/support/articles/000033416/technologies.html

Ars has a bit more information: https://arstechnica.com/information...psets-have-a-concerning-flaw-thats-unfixable/

They include the following comment.

Exploiting the vulnerability—particularly reading the chipset key—would be a major technical feat that would require specialized gear and years of experience with firmware. Still, the flaw poses a serious threat on unpatched systems and may still be exploitable even on computers that have received updates that computer makers released last year to make exploitation harder.


“While a potential exploit for this issue appears to be fairly complicated, involving multi-stage chain compromising ISH or other firmware [and] then mounting a DMA [direct memory access] attack against CSME, the impact is very broad, and the issue cannot be patched via firmware update because it's in the mask ROM,” Yuriy Bulygin, CEO of Eclypsium, a firm that specializes in the security of firmware, said in an interview.

 

[UrBaN963]

Anyone know if this applies to my 486DX-20?

 

[MirageF1]

Anyone know if this applies to my 486DX-20?

No , millenial hackers have never even heard of NT or Win 3.1

You safe boet.

 

[UrBaN963]

No , millenial hackers have never even heard of NT or Win 3.1

You safe boet.

Christ that's a relief, I was just about to Backup my Sokoban save files for fear of losing progress.

 

[Sl8er]

[ insert AMD quip here ]

 

[CT_Biker]

Christ that's a relief, I was just about to Backup my Sokoban save files for fear of losing progress.

I have.

 

[MirageF1]

Christ that's a relief, I was just about to Backup my Sokoban save files for fear of losing progress.

Ye and your Leisure Suite Larry CGA pinups - don't forget.
Beep.

 

[Swa]

So not much of a vulnerability. Just disable DRM.

 

[UrBaN963]

Ye and your Leisure Suite Larry CGA pinups - don't forget.
Beep.

Use prophylactic

 

[system32]

EPID is used in DRM
...
can also exploit the vulnerability on their own computers to bypass content DRM...

Does this mean that Widevine DRM can be bypassed and is broken?

 

[Realmrbean]

A back door for u.s government.

 

[Lupus]

What the F for exactly


Neither poor...nor stinking rich.

But even if i was Gates' nephew I wouldn't buy anything just released. Not just technology. Anything.

Call it XP and a sliver of wisdom.

Just released? 5 years ago? It's not like it was a CPU released last week, it's been effecting ones from 2015.