News for hackers. Stuff that matters.
Re:Intel Issues Updates to Protect Systems from Security Exp... by Deimorz on Thursday January 04, 2018 @01:29PM (#16072724)
To me this feels like saying, "My program doesn't have a bug, it's executing the code that I wrote correctly." The actual bug is that the code isn't correct.

In Intel's case, even though the operation is correct, it's the actual design that's flawed.

Re:Intel Issues Updates to Protect Systems from Security Exp... by netsharc on Thursday January 04, 2018 @01:40PM (#16072835)
Yeah... "Hey Mr. CPU-supplier, if I do these things then I can see with 100% certainty the contents of memory areas which I'm not allowed to read!"

"Well, that's an interesting hack, I guess you can! But everything works as designed, so there's no flaw!"

Re:Intel Issues Updates to Protect Systems from Security Exp... by sandov on Thursday January 04, 2018 @02:20PM (#16073209)
This reads like the Patrick Star's "Not my Wallet" meme.
Re:Intel Issues Updates to Protect Systems from Security Exp... by jrs235 on Thursday January 04, 2018 @02:15PM (#16073168)
"Works as coded"
Re:Intel Issues Updates to Protect Systems from Security Exp... by hackbinary on Thursday January 04, 2018 @01:48PM (#16072907)
I think what Intel is trying to say that this feature makes the chips insecure by design. It’s kind of like in Python where can get around the week protection for classes, methods, and variable to make them pseudo private by putting underscores in front of them.
Re:Intel Issues Updates to Protect Systems from Security Exp... by coliveira on Thursday January 04, 2018 @02:18PM (#16073187)
Except that these CPUs were not designed to be insecure. CPU makers spent decades marketing their architectures as able to support the implementation of secure operating systems. All of a sudden it is clear that this is not possible without heavy dose of software stopgaps. It is a fundamental flaw on CPU architecture that was not disclosed by these companies.
Re:Intel Issues Updates to Protect Systems from Security Exp... by pkaye on Thursday January 04, 2018 @02:22PM (#16073234)
Neither was anyone else aware of these class of security issues with CPUs until recently.
Re:Intel Issues Updates to Protect Systems from Security Exp... by pixl97 on Thursday January 04, 2018 @03:25PM (#16073742)
Oh people were aware, we just neglected the issues IBM and other time sharing systems learned in the 70s.
Re:Intel Issues Updates to Protect Systems from Security Exp... by pas on Thursday January 04, 2018 @04:24PM (#16074225)
Was there anything like this back then? (Speculative execution, L1 cache, branch prediction all in the same ISA?)
Re:Intel Issues Updates to Protect Systems from Security Exp... by pkaye on Thursday January 04, 2018 @03:45PM (#16073914)
If they were aware, why didn't anyone raise this issue till now?
Re:Intel Issues Updates to Protect Systems from Security Exp... by ionforce on Thursday January 04, 2018 @03:54PM (#16073988)
The people that were aware were probably extracting value out of the fact that not everyone knew.

Could be not worth making a public stink, could be weaponizing the exploit, could be coordinated disclosure.

Re:Intel Issues Updates to Protect Systems from Security Exp... by pkaye on Thursday January 04, 2018 @04:05PM (#16074076)
you mean all these security researchers kept it a secret for the last decade or two?
Re:Intel Issues Updates to Protect Systems from Security Exp... by coliveira on Thursday January 04, 2018 @05:02PM (#16074495)
Until a few days, researchers couldn't prove that this was possible because there was no example of such exploits. But there was the idea that this could be possible. Also this doesn't mean that people with other interests didn't have their own versions of this exploit and kept it a secret.
Re:Intel Issues Updates to Protect Systems from Security Exp... by amygdyl on Thursday January 04, 2018 @03:27PM (#16073757)
I'm scarred by the CISC - RISC wars, which were serious for my business at the time. So in a year I'm anticipating Open VMS I'm x64 , having a indelible memory of the memory space rings and system calls depending on explicit separation, I remember thinking to myself, well only four rings in Alpha are critical to VMS, and Intel Pentium has that many rings...so why don't they port straight to the main Intel platform? Is this leaking mode the reason?
Re:Intel Issues Updates to Protect Systems from Security Exp... by Florin_Andrei on Thursday January 04, 2018 @02:17PM (#16073181)
If you fall 10 floors and die, it's not the architect's fault for not putting a handrail around the balcony. It's your fault for improper use of gravity.

/s

Re:Intel Issues Updates to Protect Systems from Security Exp... by amygdyl on Thursday January 04, 2018 @03:30PM (#16073778)
I lived on the seventh floor, so always wondered if that meant I could safely keep a cat?

[Urban legend, afaik, cats can't right themselves with less than the seventh floor height to fall..]

Re:Intel Issues Updates to Protect Systems from Security Exp... by hornbaker on Thursday January 04, 2018 @09:06PM (#16075914)
Cats can right themselves in about 12 inches.

The problem is they land with legs extended down from floors 1 to about 7 (bad: impact is transmitted up through shoulders and hips), while higher than about floor 7 they spread their legs out and attempt to parachute (better: impact is uniform over entire ventral surface, terminal velocity is lower, mortality rate drops).

Source: am DVM and interned at AMC in Manhattan.

Re:Intel Issues Updates to Protect Systems from Security Exp... by amygdyl on Friday January 05, 2018 @08:28PM (#16083268)
Very cool thank you! Also prewitt and Travis above and below..

Mortality rates.. Got it ,:-$ so, marketing for 7th floor Homes with kitty life policy in the service charge bill technically not the Blatant fraud I assumed, and if the building manager had run into trouble the lives of many injured kitties luckily lookalike to the residents could be the hardest sentencing hearing for any animal lover judge. English cities badly need dog license reintroduction. Asked to help a former neighbor become tramp beg court to return his dog. Second I met the man, who certainly was denied due process and on paper atrociously mistreated, he introduced the dog, unknown potential dominant bulldog mongrel, getting it to l so and lock it's jaw on his agitated arm. I passed him again, alone in rain, dog coat sodden, he was high and drunk careless no train still disgorge the fool he requires. Dogs need sorting out in London before brexit chaos

Re:Intel Issues Updates to Protect Systems from Security Exp... by prewett on Thursday January 04, 2018 @03:46PM (#16073921)
Actually not an urban legend. Veternarians in NYC have enough cats fall out of skyscrapers that they have actual data.

http://www.nytimes.com/1989/08/22/science/on-landing-like-a-...

Re:Intel Issues Updates to Protect Systems from Security Exp... by traviscj on Thursday January 04, 2018 @11:41PM (#16076599)
An interesting related video: Slow Motion Flipping Cat Physics [1]

[1]: https://www.youtube.com/watch?v=RtWbpyjJqrU

Re:Intel Issues Updates to Protect Systems from Security Exp... by amygdyl on Friday January 05, 2018 @08:36PM (#16083311)
Can parachutes deploy automatically safely?

I mean in cities I keep imagining much greater extent of elevation, moment we figure how. Above the smog line... I'm sure I was in 94 but 16 same place, in the middle, ugh.

Could it become unlawful to rent (Live in generally) homes without harmful particle filtration?

I'm thinking of renting out my filters just before tenant viewings, because this eliminates the obviously fresh air chill, takes out fat or any food Smell beyond the kitchen, let's a visitor smoke even..(friend closed rental dear by offering a cigarette excused by filters, it's your residence now) but from flu season to the decoration next door, the cost needs a artificial boost. Wish was a swapHN channel..

Re:Intel Issues Updates to Protect Systems from Security Exp... by wavegeek on Friday January 05, 2018 @03:32AM (#16077360)
Bad in the old days, IBM used to call this "BAD": Broken As Designed.
Re:Intel Issues Updates to Protect Systems from Security Exp... by oh-kumudo on Thursday January 04, 2018 @01:55PM (#16072980)
Not a bug, but a feature.