News for hackers. Stuff that matters.
Re:20GB leak of Intel data: whole Git repositories, dev tool... by intelleak on Thursday August 06, 2020 @04:09PM (#24074924)
In what ways can an end user of intel processor expect to benefit from this? I'm guessing none, since ever consumer interface is already a standard ... Can anybody chime in?
Re:20GB leak of Intel data: whole Git repositories, dev tool... by molticrystal on Thursday August 06, 2020 @05:49PM (#24075839)
While it doesn't mean it will happen, depending on what is leaked now and in the future, possibilities include:

1. Verify that debug features that are remotely exploitable are actually disabled in consumer releases of their hardware.

2. Re-implement proprietary parts of the boot sequence, such as activating memory controllers, in an open and public manner that can be more easily looked over for flaws, security and otherwise.

3. Modify parameters and tweak hardware for additional stability or performance enhancements, especially undocumented or disabled(on lower graded chips of the same architecture) aspects of the hardware that may be present.

On the other hand barriers include legal issues depending on what country people working on these originate from, ethical issues, and even industry barring, and this is not exhaustive. Consumers, especially consumers in countries not concerned about the legal aspects will likely gain the most advantages, if any are present.

Re:20GB leak of Intel data: whole Git repositories, dev tool... by dleslie on Thursday August 06, 2020 @04:13PM (#24074967)
Optimistically, the exposure of backdoors in the firmware may cause Intel to patch and close them.

Realistically, Intel will patch the firmware and replace the backdoors with new ones.

Re:20GB leak of Intel data: whole Git repositories, dev tool... by intelleak on Thursday August 06, 2020 @04:17PM (#24075000)
Besides the backdoors I mean, I was thinking about performance or usability improvements...
Re:20GB leak of Intel data: whole Git repositories, dev tool... by eitland on Thursday August 06, 2020 @04:25PM (#24075074)
Might finally get certain big PC vendors to consider using AMD which will increase competition and make sure we get better hardware in the future..?
Re:20GB leak of Intel data: whole Git repositories, dev tool... by mhh__ on Thursday August 06, 2020 @04:19PM (#24075021)
Other than disabling security features, Intel already publish extensive optimization manuals, so I don't think there's anything to go on here.
Re:20GB leak of Intel data: whole Git repositories, dev tool... by wmf on Thursday August 06, 2020 @04:17PM (#24075004)
It would be illegal, but some of that code might help Coreboot development.
Re:20GB leak of Intel data: whole Git repositories, dev tool... by outworlder on Thursday August 06, 2020 @04:21PM (#24075041)
> but some of that code might help Coreboot development

Unlikely.

Most projects won't come anywhere near this sort of thing. There may be a possibility of doing clean room implementation, but writing the spec based on stolen IP is the problematic step.

Then again, there is a high chance that none of this will be useful.

Re:20GB leak of Intel data: whole Git repositories, dev tool... by ATsch on Thursday August 06, 2020 @04:38PM (#24075211)
It will be more or less impossible to prove or disprove that anyone obtained some crucial information from there. The info will always somehow make it's way into the places it's needed eventually.
Re:20GB leak of Intel data: whole Git repositories, dev tool... by dogma1138 on Thursday August 06, 2020 @05:16PM (#24075543)
It doesn’t matter if it’s provable or not, most developers won’t risk it especially if they want to keep their jobs or be hireable.

If you review the content and publish say a blog post, even without legal repercussions it can impact your ability to be hired in the future since everything you do from that point can be tainted.

So if you do look you should keep it quite or publish it under a pen name that you can’t ever take credit for.

Re:20GB leak of Intel data: whole Git repositories, dev tool... by ATsch on Thursday August 06, 2020 @09:30PM (#24077118)
My point was that even without anyone taking that risk, the information will spread.

Someone reads the code, mentions it to a friend, who adds it to a blog post, which gets cited in a wiki, which gets read by a developer unaware of the source. If the information is useful, it will end up getting spread.

Re:20GB leak of Intel data: whole Git repositories, dev tool... by johnnyfaehell on Thursday August 06, 2020 @05:53PM (#24075872)
Say we use the Microsoft Windows code that got leaked, was anyone black listed for that?

Also, I would assume other processor companies hire people from other processor companies and everyone all wants the best, most of the basic knowledge would have already made it's way to AMD and other companies.

Re:20GB leak of Intel data: whole Git repositories, dev tool... by dogma1138 on Thursday August 06, 2020 @06:47PM (#24076230)
But that isn’t basic knowledge, if you work in firmware development, embedded, SOC design etc. and your employer or future employers might be competing against Intel in some market segment (which given the sheer amount of products Intel has isn’t an unlikely scenario) I would be very careful about admitting not to mention publishing content based on this leak.

If you work in a completely unrelated field then you don’t need to care as much.

Re:20GB leak of Intel data: whole Git repositories, dev tool... by johnnyfaehell on Thursday August 06, 2020 @06:52PM (#24076264)
But if you've worked at Intel those should be part of your job for a majority of people and when they leave that knowledge goes to.
Re:20GB leak of Intel data: whole Git repositories, dev tool... by gsich on Thursday August 06, 2020 @06:00PM (#24075933)
You can always say you reverse engineered it yourself. Hard to disprove.
Re:20GB leak of Intel data: whole Git repositories, dev tool... by Zpalmtree on Thursday August 06, 2020 @05:24PM (#24075605)
Maybe, but are you sure you want to end up in a very expensive court battle with Intel?