Intelpocalypse

Discussion in 'Offtopic Discussions' started by JDTAY, Jan 3, 2018.

  1. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    11,076
    Location:
    Somewhere off the coast of the EU
    Good for them. What are they doing about the spectre attacks now?
     
  2. Klumpen

    Klumpen Run away! Run away!

    Joined:
    Jan 5, 2012
    Messages:
    6,646
    Location:
    Uncanny Valley
  3. bubblebee

    bubblebee Member

    Joined:
    Mar 27, 2012
    Messages:
    32
    There is another quite interesting PoC for spectre. Maybe someone with a Pyra/Pandora can use/test this ?
     
  4. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    11,076
    Location:
    Somewhere off the coast of the EU
    Falls over in exactly the same way on my Atom and Pentium machines.

    It won't build on ARM machines because of the include on line 8. I'm not sure exactly what it's using out of this file at the moment (probably a few constants at most), but it won't run on Pandora without some changes at least.
     
  5. klapse

    klapse Central Scrutinizer

    Joined:
    Aug 30, 2012
    Messages:
    1,932
    Location:
    Germany
    Tested the meltdown patch on a Gimp compile. 8.2% slowdown.

    I'm not even gonna talk about spectre tests.
     
    FBnil likes this.
  6. Grench

    Grench Forum Addict!

    Joined:
    Oct 3, 2008
    Messages:
    6,096
    Are there any modern CPUs that are truly immune? I'm thinking latest generation embedded, etc.
     
  7. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    11,076
    Location:
    Somewhere off the coast of the EU
    Nobody really knows yet. Some CPUs might be safer than others, but it's still not really clear. If I had to place a bet on every individual modern CPU being affected, I'd bet that every OoO CPU is likely to have some exploitable flaw or other, and I reckon I'd probably end up making a profit.
     
  8. Silent-Hunter

    Silent-Hunter Hardcore Member

    Joined:
    May 29, 2010
    Messages:
    3,046
    I think RISC-V is?
     
  9. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    11,076
    Location:
    Somewhere off the coast of the EU
    I'm not counting RISCv as being comparable to the latest round of fast cpus. It's a very interesting project, especially if you're running FPGAs, but not really a drop in replacement for anything much yet.

    I also don't really like RISCv's explanation as to why they're safe. These exploits target the very theory behind branch prediction, speculative execution and cacheing. If I had to guess they might be safe because they don't do any of that yet, but their claim that they're safe because their architecture is crowd reviewable seems bold when nobody knew these basic theories could be abused this way until very recently.
     
  10. Klumpen

    Klumpen Run away! Run away!

    Joined:
    Jan 5, 2012
    Messages:
    6,646
    Location:
    Uncanny Valley
    Did I get this right, that the Raspberry PI is not only the cheapest but also the most secure computer now?
     
  11. Linux-SWAT

    Linux-SWAT Hardcore Member

    Joined:
    Feb 13, 2010
    Messages:
    8,194
    klapse and FBnil like this.
  12. Linux-SWAT

    Linux-SWAT Hardcore Member

    Joined:
    Feb 13, 2010
    Messages:
    8,194
  13. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    11,076
    Location:
    Somewhere off the coast of the EU
    Sounds like another good reason not to download and install random crap without checking checksums and reliabilty.

    Edit: Otherwise known as 'stop internet javascript'.
     

Share This Page

Loading...