[Unconfirmed vulnerability]Warning for Intel CPU users

Intel x86s hide another CPU that can take over your machine (you can't audit it) / Boing Boing basically if you run an intel CPU at all you're vulnerable to a major attack that although hasn't been found out yet, exists

 

haha thats why i use AMD kappa ( ͡° ͜ʖ ͡°)

 

If it has not been found out yet, how does it exist? ROFL sure everything on the internet is 100% fact lol

 

well, it's a theoretical vulnerability, it exists, they know it does, but don't know how to do it

 

If its theoretical then its just a theory and there is no hard evidence of it existing at all. It's is like saying there is life like humans on another planet. In theory it could happen but as of now it is just science fiction and does not exist.

In my opinion you really shouldn't post a warning possibly scaring users into thinking they need to get rid of intel cpu's when in all fact there is nothing to fear at all based on the fact it is just a theory and not true.

 

It's a possible vulnerability, but it takes a long time to figure it out because it's prevented through obscurity

 

Where is evidence this is a true and factual thing though? You say it a possible vulnerability but think about that for a second. If it is a possible vulnerability than it can also be an impossible vulnerability based on evidence provided. Also being the fact that the information is from an unknown unoffical source (boingboing) and they do not provide any links to where they researched or found this possible vulnerability that they report about I would say it is just another internet fake like most online and its not true in any way. No one should have to worry about their Intel CPU for any reason what-so-ever.

And again you should not be posting Warnings for users on these forums for something that is not 100% fact. There is no point in causing a scare making users wonder if they should change out their CPU or not when in fact they have nothing to worry about at all.

 

well, as they say, it's hard to confirm it due to intel's stance on you actually observing the thing, so that makes it much harder, and apparently most people don't need to worry anyways, but it's not a current vulnerability so *shrug*

 

I believe that the thread title should read "Unconfirmed vulnerability for Intel CPU users". Not a Warning. Just saying.

 

fair enough, will edit then

 

But back on subject, For many many years now people have been saying that they are putting hidden recording devices in many different things, I remember back in the day when there was talk our government installed cameras in our tv's so while we are watching tv they can watch us. Now they say they are spying on our cell phones. Next its our computers and cpu's.

The only reason its ever makes out to be an interesting topic is because humans have high expectations when it comes to our privacy rights. We are scared someone might see or hear something we do not want them too. So some people find it amusing to make up stories sounding as convincing as they can just to feed on other people's concerns and worries.

Maybe its true what this story says and maybe it is not. Only way to truly know is to see cases where it has for a fact happen and is not made up. I have been a Intel user for many years, currently I am using the Intel I7 and I have had no issues at all; however, if the Intel x86 processors really do have this secret chip that can release rootkit attacks then I would be very mindful of it. Just need to see it to believe it for now.

 

If you read it's not that it's intended for rootkit, it's poor security that's the cause for it, because it's security through obscurity

 

Me too

 

If I'm correct the government actually did spy on people's phones.....

 

When I was a kid in the 70's my parents told me of all the things the Communist Russians did to invade their peoples privacy and rights. Open their mail, follow them, listen in on private conversations, convince everyone it was "patriotic" to spy and report on your neighbor.


hmmm this all seems vaguely familiar..........


But back on topic, I cant use AMD at work, except for a few specific processors, my software wont install on it. For home, VR seems to just run better on the I7 .

 

yhea, but it isn't a government thing, it's there to increase CPU speed, but it is a vulnerability because of how it works sadly

 

Just skim read the article and this forum thread. What's the vulnerability? It is an intentional feature that's off by default out of the factory for consumers (as far as I'm aware) unless you're buying in batches for your business and tell Intel in advance that you will want to use that feature. The feature is for remote wipe of systems (for example, if some of your business' computers get stolen, you can remotely wipe them at the hardware level to protect your business' confidentiality and work).

If the feature isn't accessible by the OS it isn't going to be easy to attack it maliciously or even spread the attack easily. And boot-stage malicious code injection? As long as you're not running a non-UEFI compliant, legacy OS like Windows 7 it's not possible to infect the boot loader or related code.

 

It's able to override all cpu stuff without any info being given, that's what the warning is, and it's a POSSIBLE rootkit attack, it's not intentionally a rootkit

 

As I said in the part you quoted, it would be incredibly hard to perform a rootkit attack on this CPU feature even if a vulnerability was discovered. The motherboard performs boot code checks with a secure checksum and signature verification if a modern, UEFI-compliant OS is installed. Considering Skylake is the last CPU from Intel to support Windows 7, the chances of infection by a bootcode rootkit if an infection is found will decrease overtime.

What I'm trying to say here is that while it is a possible vulnerability, the potential amount of affected people will be increasing low and spreading the malicious code would be very difficult, too.

 

ofc, that's why it's a theoretical vulnerability vs a known vulnerability, it can be found given time though, nothing is eternal