5 ms·

These issues are new to us (not just on Apple). But I wonder how long they have been know to the NSA.

by ape4 9y ago

andr 9y ago
In the past few days there were a handful of links dated as far back as 2006, directly explaining the attack vector, or strongly hinting at it. So, the likelihood that NSA and a bunch of other groups knew is 100%. Unfortunately, Intel knew, too, and didn't bother fixing it in the next 6 generations of their CPUs since they originally admitted the issue with the Intel Core 2.
- njitram 9y ago
  Can you provide those links?
  - rogueresearch 9y ago
    Maybe he's referring to this: https://marc.info/?l=openbsd-misc&m=118296441702631&w=2 https://marc.info/?l=openbsd-misc&m=118296441702631&w=2
    - cmroanirgo 9y ago
      Just. Wow.
- crypticlizard 9y ago
  so, conspiracy?
  - thelittleone 9y ago
    Interesting question. I think it's fairly reasonable to assume that: 1) The NSA knew about it and had exploits for it. 2) Google Project Zero spoke with the NSA prior to releasing the advisory. An exploit for such a pervasive vulnerability represents a susbtantial asset to one intelligence agency. Right up until the enemy discovers and develops the same capability.
- bunfunton 9y ago
  How can you say the likelihood is near 100%? I'd bet much smarter people work at Google than the NSA.
  - chillacy 9y ago
    I would point out that nearly all those smart people at google are working on product teams, not security teams, and that enough good security researchers still go to the NSA. Also, the NSA still tapped google for up to 6 years, and might have continued doing so to this day if it weren't for Snowden. But then again, these weren't in his leaked documents so maybe not.
snowwrestler 9y ago
> WH Cyber Coordinator @RobJoyce45 on Intel chip flaw: "NSA did not know about the flaw, has not exploited it and certainly the U.S. government would never put a major company like Intel in a position of risk like this to try to hold open a vulnerability." https://twitter.com/nakashimae/status/949451178110279680 https://twitter.com/nakashimae/status/949451178110279680
- williamscales 9y ago
  Well that one statement certainly puts my mind at ease! /s
- HugoDaniel 9y ago
  So Microsoft, Facebook and Google are not major companies ?

These issues are new to us (not just on Apple). But I wonder how long they have been know to the NSA.

by ape4 9y ago

These issues are new to us (not just on Apple). But I wonder how long they have been know to the NSA.

andr 9y ago

In the past few days there were a handful of links dated as far back as 2006, directly explaining the attack vector, or strongly hinting at it. So, the likelihood that NSA and a bunch of other groups knew is 100%. Unfortunately, Intel knew, too, and didn't bother fixing it in the next 6 generations of their CPUs since they originally admitted the issue with the Intel Core 2.

njitram 9y ago
Can you provide those links?
- rogueresearch 9y ago
  Maybe he's referring to this: https://marc.info/?l=openbsd-misc&m=118296441702631&w=2 https://marc.info/?l=openbsd-misc&m=118296441702631&w=2
  - cmroanirgo 9y ago
    Just. Wow.
crypticlizard 9y ago
so, conspiracy?
- thelittleone 9y ago
  Interesting question. I think it's fairly reasonable to assume that: 1) The NSA knew about it and had exploits for it. 2) Google Project Zero spoke with the NSA prior to releasing the advisory. An exploit for such a pervasive vulnerability represents a susbtantial asset to one intelligence agency. Right up until the enemy discovers and develops the same capability.
bunfunton 9y ago
How can you say the likelihood is near 100%? I'd bet much smarter people work at Google than the NSA.
- chillacy 9y ago
  I would point out that nearly all those smart people at google are working on product teams, not security teams, and that enough good security researchers still go to the NSA. Also, the NSA still tapped google for up to 6 years, and might have continued doing so to this day if it weren't for Snowden. But then again, these weren't in his leaked documents so maybe not.

snowwrestler 9y ago

> WH Cyber Coordinator @RobJoyce45 on Intel chip flaw: "NSA did not know about the flaw, has not exploited it and certainly the U.S. government would never put a major company like Intel in a position of risk like this to try to hold open a vulnerability." https://twitter.com/nakashimae/status/949451178110279680 https://twitter.com/nakashimae/status/949451178110279680

williamscales 9y ago
Well that one statement certainly puts my mind at ease! /s
HugoDaniel 9y ago
So Microsoft, Facebook and Google are not major companies ?