5 ms·
To me this feels like saying, "My program doesn't have a bug, it's executing the code that I wrote correctly." The actual bug is that the code isn't correct. I
by Deimorz 9y ago
To me this feels like saying, "My program doesn't have a bug, it's executing the code that I wrote correctly." The actual bug is that the code isn't correct.
In Intel's case, even though the operation is correct, it's the actual design that's flawed.
- netsharc 9y agoYeah... "Hey Mr. CPU-supplier, if I do these things then I can see with 100% certainty the contents of memory areas which I'm not allowed to read!" "Well, that's an interesting hack, I guess you can! But everything works as designed, so there's no flaw!"
- hackbinary 9y agoI think what Intel is trying to say that this feature makes the chips insecure by design. It’s kind of like in Python where can get around the week protection for classes, methods, and variable to make them pseudo private by putting underscores in front of them.
- coliveira 9y agoExcept that these CPUs were not designed to be insecure. CPU makers spent decades marketing their architectures as able to support the implementation of secure operating systems. All of a sudden it is clear that this is not possible without heavy dose of software stopgaps. It is a fundamental flaw on CPU architecture that was not disclosed by these companies.
- pkaye 9y agoNeither was anyone else aware of these class of security issues with CPUs until recently.
- pixl97 9y agoOh people were aware, we just neglected the issues IBM and other time sharing systems learned in the 70s.
- pkaye 9y agoIf they were aware, why didn't anyone raise this issue till now?
- ionforce 9y agoThe people that were aware were probably extracting value out of the fact that not everyone knew. Could be not worth making a public stink, could be weaponizing the exploit, could be coordinated disclosure.
- pkaye 9y agoyou mean all these security researchers kept it a secret for the last decade or two?
- coliveira 9y agoUntil a few days, researchers couldn't prove that this was possible because there was no example of such exploits. But there was the idea that this could be possible. Also this doesn't mean that people with other interests didn't have their own versions of this exploit and kept it a secret.
- pas 9y agoWas there anything like this back then? (Speculative execution, L1 cache, branch prediction all in the same ISA?)
- oh-kumudo 9y agoNot a bug, but a feature.
- Florin_Andrei 9y agoIf you fall 10 floors and die, it's not the architect's fault for not putting a handrail around the balcony. It's your fault for improper use of gravity. /s
- amygdyl 9y agoI lived on the seventh floor, so always wondered if that meant I could safely keep a cat? [Urban legend, afaik, cats can't right themselves with less than the seventh floor height to fall..]
- prewett 9y agoActually not an urban legend. Veternarians in NYC have enough cats fall out of skyscrapers that they have actual data. http://www.nytimes.com/1989/08/22/science/on-landing-like-a-cat-it-is-a-fact.html http://www.nytimes.com/1989/08/22/science/on-landing-like-a-...
- hornbaker 9y agoCats can right themselves in about 12 inches. The problem is they land with legs extended down from floors 1 to about 7 (bad: impact is transmitted up through shoulders and hips), while higher than about floor 7 they spread their legs out and attempt to parachute (better: impact is uniform over entire ventral surface, terminal velocity is lower, mortality rate drops). Source: am DVM and interned at AMC in Manhattan.
- amygdyl 9y agoVery cool thank you! Also prewitt and Travis above and below.. Mortality rates.. Got it ,:-$ so, marketing for 7th floor Homes with kitty life policy in the service charge bill technically not the Blatant fraud I assumed, and if the building manager had run into trouble the lives of many injured kitties luckily lookalike to the residents could be the hardest sentencing hearing for any animal lover judge. English cities badly need dog license reintroduction. Asked to help a former neighbor become tramp beg court to return his dog. Second I met the man, who certainly was denied due process and on paper atrociously mistreated, he introduced the dog, unknown potential dominant bulldog mongrel, getting it to l so and lock it's jaw on his agitated arm. I passed him again, alone in rain, dog coat sodden, he was high and drunk careless no train still disgorge the fool he requires. Dogs need sorting out in London before brexit chaos
- wavegeek 9y agoBad in the old days, IBM used to call this "BAD": Broken As Designed.