Intel Responds to Security Research Findings

Re:Intel Responds to Security Research Findings by IncRnd on Wednesday January 03, 2018 @05:45PM (#16066102)

> IIUC - you can transpose 'password' with seemingly anything stored in memory managed by the kernel, so Intel using this sort of deceptive language is poor behaviour.

Intel wasn't being deceptive. That is exactly what they said, "software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data." This is in the very first sentence of their response.

[ Parent | on HN ]

Re:Intel Responds to Security Research Findings by tomxor on Wednesday January 03, 2018 @05:52PM (#16066179)

They also stated it does not have the potential to cause deletion, modification or corruption which directly contradicts the "malicious purposes" statement.

[ Parent | on HN ]

Re:Intel Responds to Security Research Findings by IncRnd on Wednesday January 03, 2018 @05:58PM (#16066247)

> They also stated it does not have the potential to cause deletion, modification or corruption which directly contradicts the "malicious purposes" statement.

You are mixing two different notions.

In security CIA = Confidentiality, Integrity, Availability.

Intel said that Confidentiality is broken by a security analysis applied maliciously (i.e. exploit), but Integrity is not. The general belief is that Availability is affected, due to a slowdown that depends on the workload.

[ Parent | on HN ]