News for hackers. Stuff that matters.
Re:VME Broken on AMD Ryzen by qb45 on Saturday May 13, 2017 @03:08AM (#14329860)
> This begs the question: if old features are this broken, what about the new ones

You can find so called "specification updates", which - as the name implies - update the specs to match actually released hardware ;)

Available for all CPU families from both Intel and AMD, easily go into tens or hundreds of positions. (Though I haven't seen the Ryzen one released yet).

And then somebody recently linked this (2010) - allegedly there are bugs exploitable for privilege escalation:

http://cs.dartmouth.edu/~sergey/cs258/2010/D2T1%20-%20Kris%2...

Re:VME Broken on AMD Ryzen by dom0 on Saturday May 13, 2017 @04:44AM (#14330044)
> Transfer of the file you were trying to download or upload has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error.

That comes from their end.

Re:VME Broken on AMD Ryzen by qb45 on Saturday May 13, 2017 @06:32AM (#14330261)
Weird, maybe you are IP banned or it actually is some corp firewall on your side.

It's a conference presentation titled "Remote Code Execution through Intel CPU Bugs" by Kris Kaspersky and Alice Chang. Google finds copies elsewhere.

I can't say that I see how the "remote" part could possibly work, but as for local exploitation, errata often state that things like "data corruption" or "unpredictable behavior" can happen under "certain internal conditions" so this stuff may be exploitable if one can execute arbitrary instructions which trigger these internal conditions.

Re:VME Broken on AMD Ryzen by dom0 on Saturday May 13, 2017 @08:24AM (#14330602)