News for hackers. Stuff that matters.
Re:Intel's CEO Just Sold a Lot of Stock by proto-n on Tuesday January 02, 2018 @04:49PM (#16056058)
Re:Intel's CEO Just Sold a Lot of Stock by endymi0n on Tuesday January 02, 2018 @04:53PM (#16056101)
Obviously not. What could an unfixable CPU design bug that will impact every Intel processor (and cost up to 30% performance through the neccessary fixes) possibly do to the companies‘ stock price? /s
Re:Intel's CEO Just Sold a Lot of Stock by Moral_ on Tuesday January 02, 2018 @04:55PM (#16056126)
This "bug" is so blown out of proportion it's sickening. It breaks KASLR, a thing no one uses.
Re:Intel's CEO Just Sold a Lot of Stock by daenney on Tuesday January 02, 2018 @05:05PM (#16056216)
Except everyone that runs kernel 4.12 and onwards, where it was enabled by default and many distributions have had KASLR enabled earlier.

Also, it doesn't just affect KASLR. KASLR isn't even the concern here. Based on the info that is available/has been pieced together, it appears to be a bug, at the hardware desing level, in Intel CPUs speculative execution capabilities.

Re:Intel's CEO Just Sold a Lot of Stock by exportgoldman2 on Wednesday January 03, 2018 @12:04AM (#16058588)
Wrong. Wrong. Wrong. Sigh.

This bug allows a user level process or even a website to read any memory on the pc, including memory of another vm on the same box.

Bitcoin wallets, passwords, keys, all up for grabs by anon.

Can't be fixed by intel so all os providers have to implement fixes in os which slow down pc by approx 30%.

So you gaming pc or aws instances just cost more

Re:Intel's CEO Just Sold a Lot of Stock by candiodari on Wednesday January 03, 2018 @01:29AM (#16058969)
There are many reasons to just get a dedicated machine, especially given that they're like $10/month these days. (kimsufi, hetzner, ...)

This is a major one. On a dedicated box, as long as ssh and your http server are secure, you can run a compromised kernel. In practice, of course, it mostly means that there's an extra layer of exploit necessary before attackers are in. Everybody should insist on that, always.

Performance is another one (to put things bluntly: a 2-year-old atom with 4G straight on hardware, on 99% performance, beats a Quad Xeon with 96 Gigs of ram where you're 1 out of 100 VMs. And even that undersells it. In practice on that quad xeon it will regularly take 1s to jump into your code for a web request. Not generating a response, just the time before it actually processes your packet. If you're I/O bound (ie. every single website), the lowly dedicated Atom will beat the big bad Xeon).

And lastly, included network capacity is the third one. The cheapest dedicated on hetzner comes with $3000 worth of network (Google cloud prices, Amazon's are more expensive, and yes it's FUP bandwidth, so presumably you can use like $500 of it without problems if you're paying $10, not the full $3k)

Re:Intel's CEO Just Sold a Lot of Stock by cjbprime on Tuesday January 02, 2018 @05:02PM (#16056185)
You're likely incorrect. It now looks like a speculative execution exploit/leak. We don't know what the bug is exactly.
Re:Intel's CEO Just Sold a Lot of Stock by _wmd on Tuesday January 02, 2018 @05:10PM (#16056264)
An executive trading on inside information of this sort would be instantly crucified.. pretty sure it's unrelated
Re:Intel's CEO Just Sold a Lot of Stock by sp332 on Tuesday January 02, 2018 @05:19PM (#16056344)
If there's no official embargo, is it really secret enough to be considered insider trading? I mean a lot of people know what the secret is by now. And that blog post showed how much info is widely available even with the embargo in place.