5 ms·

You can find the details below. They've tried AMD CPUs also. https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html https://go

You can find the details below. They've tried AMD CPUs also. https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html https://googleprojectzero.blogspot.com/2018/01/reading-privi...

forgot-my-pw 9y ago
"We reported this issue to Intel, AMD and ARM on 2017-06-01" What!
- static_noise 9y ago
  How much in advance do the intel managers have to register a stock sell?
  - PuffinBlue 9y ago
    For his sake, I hope longer than 6 months!
  - chc 9y ago
    You mean without getting whomped for insider trading? I don't think they're allowed to do it in advance at all.
    - static_noise 9y ago
      As far as I know they HAVE to register a trade in advance. I.E. three months ahead: "I will sell 600 shares on 15th of December if the share price is above 50". This information is public and other people can use this information before the trade actually happens.
      - eindiran 9y ago
        It looks like he registered for the trade in October, well after Intel was made aware of the issue.
      - YurtleTheTurtle 9y ago
        Note that's not a legal requirement. That's just a policy many companies have to lower the risk of insider trading.
  - taurath 9y ago
    The CEO dropped his stock holdings down to the minimum allowed by their board bylaws in December. https://www.fool.com/investing/2017/12/19/intels-ceo-just-sold-a-lot-of-stock.aspx https://www.fool.com/investing/2017/12/19/intels-ceo-just-so...
- cesarb 9y ago
  You know it's a bad one when Project Zero allows more than its usual 90-day deadline...
  - blattimwind 9y ago
    "Which systems are affected?" – "All systems." – "Come again?"
    - Ajedi32 9y ago
      From the FAQ on spectreattack.com: > Q: Am I affected by the bug? > A: Most certainly, yes. Scary.
    - Symmetry 9y ago
      If you're using an in order processor, a Nexus 9 tablet say, then you should be safe.
      - Symmetry 9y ago
        I wasn't thinking straight last night. Basically all in order application processors use speculative execution.
        blattimwind 9y ago
        Even a low-power core like a Cortex-M7 can do some speculative execution through its branch predictor. Though of course a M7 isn't running VMs, and probably isn't running any kind of attacker-controlled code (scripting included - its there, but rare), so many of the vectors aren't present.
  - jsmthrowaway 9y ago
    Then front-runs the negotiated timeline anyway, catching projects like Xen off guard (it seems like)[0]. Will be interested to read the postmortem of the entire process from start to finish, and Xen is promising one from their perspective. I'd be especially interested to understand whether public intel was concrete enough to rush this out the door, because it didn't seem like it was, but I probably missed something. [0]: https://xenbits.xen.org/xsa/advisory-254.html https://xenbits.xen.org/xsa/advisory-254.html

forgot-my-pw 9y ago

"We reported this issue to Intel, AMD and ARM on 2017-06-01" What!

static_noise 9y ago
How much in advance do the intel managers have to register a stock sell?
- PuffinBlue 9y ago
  For his sake, I hope longer than 6 months!
- chc 9y ago
  You mean without getting whomped for insider trading? I don't think they're allowed to do it in advance at all.
  - static_noise 9y ago
    As far as I know they HAVE to register a trade in advance. I.E. three months ahead: "I will sell 600 shares on 15th of December if the share price is above 50". This information is public and other people can use this information before the trade actually happens.
    - eindiran 9y ago
      It looks like he registered for the trade in October, well after Intel was made aware of the issue.
    - YurtleTheTurtle 9y ago
      Note that's not a legal requirement. That's just a policy many companies have to lower the risk of insider trading.
- taurath 9y ago
  The CEO dropped his stock holdings down to the minimum allowed by their board bylaws in December. https://www.fool.com/investing/2017/12/19/intels-ceo-just-sold-a-lot-of-stock.aspx https://www.fool.com/investing/2017/12/19/intels-ceo-just-so...
cesarb 9y ago
You know it's a bad one when Project Zero allows more than its usual 90-day deadline...
- blattimwind 9y ago
  "Which systems are affected?" – "All systems." – "Come again?"
  - Ajedi32 9y ago
    From the FAQ on spectreattack.com: > Q: Am I affected by the bug? > A: Most certainly, yes. Scary.
  - Symmetry 9y ago
    If you're using an in order processor, a Nexus 9 tablet say, then you should be safe.
    - Symmetry 9y ago
      I wasn't thinking straight last night. Basically all in order application processors use speculative execution.
      - blattimwind 9y ago
        Even a low-power core like a Cortex-M7 can do some speculative execution through its branch predictor. Though of course a M7 isn't running VMs, and probably isn't running any kind of attacker-controlled code (scripting included - its there, but rare), so many of the vectors aren't present.
- jsmthrowaway 9y ago
  Then front-runs the negotiated timeline anyway, catching projects like Xen off guard (it seems like)[0]. Will be interested to read the postmortem of the entire process from start to finish, and Xen is promising one from their perspective. I'd be especially interested to understand whether public intel was concrete enough to rush this out the door, because it didn't seem like it was, but I probably missed something. [0]: https://xenbits.xen.org/xsa/advisory-254.html https://xenbits.xen.org/xsa/advisory-254.html