ZombieLoad Variant 2, yet another Intel-only side-channel dataleak vulnerability - Page 1
Forum section: electronics / general

author: I wanted a rude username
author_rank: Frequent Contributor
timestamp: November 13, 2019, 11:42:04 pm
content: Quote(emphasis added)Official pageZDNet article

author: Black Phoenix
author_rank: Super Contributor
timestamp: November 14, 2019, 05:06:32 am
content: The speculative execution process that Intel uses leaks like a sieve, that's for sure already know. What I still don't know is why Intel still doesn't block the process in any CPU currently in the market and releases a new method on the new products without know vulnerabilities for a while. Yes we are going to see drops in performance in some cases more the 40%, but it's better than having a house without a door. The AMD way of doing the same is not affected (for now). Better to take all the backlash and simply close the vulnerability for ever, and prevent future variants, that simply update the microcode, get a performance hit and then another vulnerability is discovered, update the microcode again, another hit in performance.Intel, how about physical cores without HT, or small slow cores for some tasks not intensive and faster large cores for task intensive calculations. Intel CPU with ARM cores?

author: I wanted a rude username
author_rank: Frequent Contributor
timestamp: November 14, 2019, 10:23:08 am
content: Possibly one or more of:The design decisions that make their implementation both fast and vulnerable are so deep that it will take them years to switch to an alternative designThey have an alternative, but it's slowerThey didn't take the problem seriously at first, and delayed committing to a rearchitectureThe complexity was already too great for them (see their delays in getting to 10 nm) and they can no longer manage itThey think the market will keep buying Intel regardless

author: Black Phoenix
author_rank: Super Contributor
timestamp: November 14, 2019, 02:57:22 pm
content: Quote from: I wanted a rude username on November 14, 2019, 10:23:08 amI think is all at the same time...

author: Mr. Scram
author_rank: Super Contributor
timestamp: November 14, 2019, 03:36:32 pm
content: Quote from: Black Phoenix on November 14, 2019, 05:06:32 amThey'd probably open themselves up to huge liabilities. It's better to go on and pretend their world isn't burning.

author: madires
author_rank: Super Contributor
timestamp: November 14, 2019, 04:15:34 pm
content: Executive summary:- Intel doesn't care about security- buy CPUs from AMD

author: Black Phoenix
author_rank: Super Contributor
timestamp: November 14, 2019, 04:24:13 pm
content: Quote from: Mr. Scram on November 14, 2019, 03:36:32 pmHeck, they world is not burning, is a hell currently:- Problems in the 10nm process that being delaying the new node, leaving them to reveal 14nm+++++++++++++++++ processor for the last 3 years (I think, maybe more);- The AMD attack on the Desktop CPU market with the Ryzen, the HEDT attack by Threadripper and the Server market (the last bastion) by Epyc;- This vulnerabilities that keep being discovered, mining even more what they been doing to change the current wind;- The change of the CEO, after an internal probe found that he had engaged in a consensual relationship with a subordinate, something that violated Intel's anti-fraternization policy;- The problems with the 5G modems and Apple contract, making Apple to settle with Qualcomm via count (https://www.anandtech.com/show/14676/apple-to-buy-bulk-of-intels-smartphone-modem-business), and Apple later buying the Intel modem division (https://www.anandtech.com/show/14676/apple-to-buy-bulk-of-intels-smartphone-modem-business)A lot of things burning yes...Currently the only market where they still have the big names are the laptop one, but with the rumours of ARM also joining that battle, and AMD also going to release new processors for that market well...Fun fact - The above image is always printed in A3 and hang behind my work place. Been doing this in the last 6 years, since it first appeared in 2013 on a webtoon. It encapsulate this problem and the lack of action perfectly!