4 ms·
That's actually an interesting accidental point. How many embedded CPU's with speculation might be affected? You may say "none" but there are Cortex CPUs embed
by katastic 9y ago
That's actually an interesting accidental point.
How many embedded CPU's with speculation might be affected? You may say "none" but there are Cortex CPUs embedded into FPGAs (either directly or form of IP cores). What if enterprise routers have them? What if TVs have them?
I know many Cortex's aren't affected. The point is, anything that needs a "fast enough" CPU to benefit from OoO scheduling is possibly at risk, right? So while most embedded devices use cheaper, less complex CPUs, there are plenty that don't--as more powerful CPUs (which offer speculation) are becoming cheaper and cheaper.
A Raspberry Pi 3 has a Cortex-A53 (because they're cheap). They're luckily not affected, but those CPUs and faster are cheap enough to throw onto a $35 retail price computer. What's running in your $800 internet-connected 4K TV?
Per the Pi 3 explaination page:
>Examples of out-of-order processors include the Intel Pentium 2 (and most subsequent Intel and AMD x86 processors with the exception of some Atom and Quark devices), and many recent ARM cores, including Cortex-A9, -A15, -A17, and -A57.
https://www.raspberrypi.org/blog/why-raspberry-pi-isnt-vulnerable-to-spectre-or-meltdown/ https://www.raspberrypi.org/blog/why-raspberry-pi-isnt-vulne...
The A9, 15, 17, and A57 are all affected and used across TONS of devices in the world. They're very popular not just in chip form (as the primary CPU), but also in IP cores (inside an FPGA), as well as "secondary CPU" systems attached to FPGAs or other CPU's.
And that's just one brand of one type of CPU. Who knows what else is out there. PowerPCs are in everything. Even your dust-covered Gamecube has out-of-order speculation!
Here's a link mentioning that PowerPC CPUs are affected:
http://tenfourfox.blogspot.com/2018/01/is-powerpc-susceptible-to-spectre-yep.html http://tenfourfox.blogspot.com/2018/01/is-powerpc-susceptibl...
So there goes all your PowerMacs. (And likely the Gamecube
and Wii too!)
- klibertp 9y agoThis comment was dead. I have no idea why would it be; if there's something factually incorrect in it it would be better to write what exactly in a comment...
- gumby 9y agoWeird, my parent comment too (at the moment). What point are the down voters trying to make?
- cm2187 9y agoUnless these embedded CPU run third party code, they aren't really vulnerable. This is more of a general computing problem.
- pixl97 9y agoMany of these devices can run 3rd party code in user context (java script in browser). The big issue is they rarely have updates and many if not most are impossible to do a good security audit on.
- AnimalMuppet 9y agoNot many embedded devices run browsers. That leaves you no place to run the javascript.
- 3chelon 9y ago> What's running in your $800 internet-connected 4K TV? Not my banking website, for one thing. Your point is completely valid, but sadly no-one in the media cares whether your TV or toaster is vulnerable. Perhaps they should be, because in reality, all these devices could be used in a botnet. But then again, it's so much easier to hack those devices with default admin/password123 than it is using speculative branch predication exploits...