Intel processor design flaw - Hackable chip

Discussion in 'Digital Currencies' started by ParanoidAndroid, Jan 5, 2018.

  1. ParanoidAndroid

    ParanoidAndroid Well-Known Member

    Joined:
    Dec 2, 2015
    Messages:
    1,009
    Likes Received:
    644
    Trophy Points:
    113
    Location:
    Over there
  2. leo25

    leo25 Well-Known Member Silver Stacker

    Joined:
    Jun 8, 2010
    Messages:
    3,590
    Likes Received:
    1,948
    Trophy Points:
    113
    I think everyone has already released patches. I installed the windows patch for this yesterday and I haven't noticed any performance slow down yet. Also note you can't really fix the issue, but software patches can just make it harder to exploit.

    Spectre doesn't seem to be an issue for the average desktop user, but Meltdown could be an issue if you store usernames and passwords in the web browses or something like that.

    I don't think it's an issue for a crypto wallet where you manually enter the password every time. But someone please correct me if I'm wrong.
     
    Last edited: Jan 5, 2018
    ParanoidAndroid likes this.
  3. Stoic Phoenix

    Stoic Phoenix Well-Known Member Silver Stacker

    Joined:
    Nov 12, 2014
    Messages:
    4,226
    Likes Received:
    1,994
    Trophy Points:
    113
    ^ or have 2 factor authentication
     
  4. ParanoidAndroid

    ParanoidAndroid Well-Known Member

    Joined:
    Dec 2, 2015
    Messages:
    1,009
    Likes Received:
    644
    Trophy Points:
    113
    Location:
    Over there
    Just that I've been in the market for a new laptop and desktop.

    This may have convinced me to go for the AMD models.

    Edit that to add that it would appear AMD also suffer from the same flaw.
     
    Last edited: Jan 5, 2018
  5. leo25

    leo25 Well-Known Member Silver Stacker

    Joined:
    Jun 8, 2010
    Messages:
    3,590
    Likes Received:
    1,948
    Trophy Points:
    113
    So from my understanding AMD is still affected by Spectre (this is where the CPU tries to predict and execute code that might be needed ahead of time in order to speed up things) This won't really be an issue for the average user.

    Regarding Meltdown (this is where an application gets access to memory space it should not have access too) it's said AMD is not effected. But this should be fixable in software, so i would think this will no longer be an issue once all software is patched.

    So for you i wouldn't really worry either way what CPU you go with.

    Also as always never use password managers.
     
    ParanoidAndroid likes this.
  6. leo25

    leo25 Well-Known Member Silver Stacker

    Joined:
    Jun 8, 2010
    Messages:
    3,590
    Likes Received:
    1,948
    Trophy Points:
    113
    I've done some further tests and have noticed a small 5%~ drop in my SSD read/write IOPS since applying the patch. It's not something i will notice in my everyday use, but it does show in a benchmark. Sequential Read/write speeds are unaffected.
    note, my SSD is a Samsung 850 Pro running on Windows 7. Can anyone else confirm IOPS drop after the patch?
     
  7. jerrygold

    jerrygold Active Member Silver Stacker

    Joined:
    Dec 9, 2017
    Messages:
    223
    Likes Received:
    91
    Trophy Points:
    43
    Location:
    Australia
    Is this separate than the intel management engine vulnerabilties or connected to it? Are there any in the wild hacks for it yet?
     
  8. leo25

    leo25 Well-Known Member Silver Stacker

    Joined:
    Jun 8, 2010
    Messages:
    3,590
    Likes Received:
    1,948
    Trophy Points:
    113
    It’s different. Intel is not doing to well lately. The lack of competition has made them complacent.
     
  9. jerrygold

    jerrygold Active Member Silver Stacker

    Joined:
    Dec 9, 2017
    Messages:
    223
    Likes Received:
    91
    Trophy Points:
    43
    Location:
    Australia
    So much bad news for them if that is the case! I believe that most of these vulnerabilities are put in place on purpose so that if there is a target there is a way in to their system. Doesn't even have to be a company plan either, just one tech guy working for some agency who puts in a bug no one notices and there you go.
     
  10. Big A.D.

    Big A.D. Well-Known Member Silver Stacker

    Joined:
    Oct 30, 2009
    Messages:
    6,278
    Likes Received:
    186
    Trophy Points:
    83
    Location:
    Sydney
    I still believe in the mantra "Never attribute to malice that which can be adequately explained by stupidity".
     
  11. jerrygold

    jerrygold Active Member Silver Stacker

    Joined:
    Dec 9, 2017
    Messages:
    223
    Likes Received:
    91
    Trophy Points:
    43
    Location:
    Australia
    All intelligence agencies would rely on such thinking, even if you are correct or not.
     

Share This Page