Major security flaw found in Intel processors

[Miska]

At least ARM64 seems to be affected too (and maybe some more recent 32-bit Cortex-A's too), so it is not just Intel or x86 architecture...

 

Anyway, for our audio playback use cases, this shouldn't make much performance difference.

 

Some cloud installations may have interesting times though...

[Miska]

Google's blog post on the topic:

https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html

 

[Miska]

20 hours ago, cjf said:

I suppose by your line of thinking that those folks you listed are also the ones involved in stealing/using credit card info and peoples personal identities, launching DOS attacks responsible for taking down major internet providers and corporations across the globe all just to say they could do it and take credit for it publicly while collecting a paycheck and paying taxes? Its no different then burning down your own neighborhood.

 

Or NSA/GRU installing malware on computers, screwing up democratic elections, installing spyware, etc. And generally spying everybody on the globe to the extent technically possible.

 

I have much less sympathy for nation state actors compared to individual hackers who's actions are much more visible, than the governments silently screwing half of the world.

 

Quote

If the other parasites spent half as much time putting their skills to work for good and useful things the world would be in a much better place.

 

You must mean governments and politicians...

 

[Miska]

Note, one of my favorite white-hat hacker groups is Google's Project Zero, who found also this bug. Since nation state actors and criminals don't publish their vulnerability findings, it is extremely important that we have such people who are paid to responsibly find bugs and vulnerabilities so those can be fixed and overall security improves.

https://googleprojectzero.blogspot.com

 

There are also companies who do similar work on order, to test security before the products come out. Hackers who are paid to analyze and try to break your/my software. This helps fixing problems before products face real jungle out there. Many who are very professional and clever people. I'm happy to know and have worked with such people and have my utmost respect.