3 ms·
> This begs the question: if old features are this broken, what about the new ones You can find so called "specification updates", which - as the name implies
by qb45 9y ago
> This begs the question: if old features are this broken, what about the new ones
You can find so called "specification updates", which - as the name implies - update the specs to match actually released hardware ;)
Available for all CPU families from both Intel and AMD, easily go into tens or hundreds of positions. (Though I haven't seen the Ryzen one released yet).
And then somebody recently linked this (2010) - allegedly there are bugs exploitable for privilege escalation:
http://cs.dartmouth.edu/~sergey/cs258/2010/D2T1%20-%20Kris%20Kaspersky%20-%20Remote%20Code%20Execution%20Through%20Intel%20CPU%20Bugs.pdf http://cs.dartmouth.edu/~sergey/cs258/2010/D2T1%20-%20Kris%2...
- dom0 9y ago> Transfer of the file you were trying to download or upload has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error. That comes from their end.
- qb45 9y agoWeird, maybe you are IP banned or it actually is some corp firewall on your side. It's a conference presentation titled "Remote Code Execution through Intel CPU Bugs" by Kris Kaspersky and Alice Chang. Google finds copies elsewhere. I can't say that I see how the "remote" part could possibly work, but as for local exploitation, errata often state that things like "data corruption" or "unpredictable behavior" can happen under "certain internal conditions" so this stuff may be exploitable if one can execute arbitrary instructions which trigger these internal conditions.
- dom0 9y agoThanks. This link works for me: https://zadereyko.info/downloads/library/D2T1_Kris_Kaspersky_Remote_Code_Execution_Through_Intel_CPU_Bugs.pdf https://zadereyko.info/downloads/library/D2T1_Kris_Kaspersky...