Technology

37608 readers

243 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago

MODERATORS

alyaza@beehaw.org

TheRtRevKaiser@beehaw.org

gyrfalcon@beehaw.org

rs5th@beehaw.org

SemioticStandard@beehaw.org

TheRtRevKaiser@kbin.social

Los@beehaw.org

coldredlight@beehaw.org

remington@beehaw.org

AMD "INCEPTION" CPU Vulnerability Disclosed (www.phoronix.com)

submitted 1 year ago by pnutzh4x0r@lemmy.ndlug.org to c/technology@beehaw.org

10 comments fedilink hide all child comments

AMD-SB-7005 "Return Address Security Bulletin" outlines this new speculative side channel attack affecting recent EPYC and Ryzen processors.

AMD has received an external report titled ‘INCEPTION’, describing a new speculative side channel attack. AMD believes ‘Inception’ is only potentially exploitable locally, such as via downloaded malware, and recommends customers employ security best practices, including running up-to-date software and malware detection tools. AMD is not aware of any exploit of ‘Inception’ outside the research environment, at this time.

you are viewing a single comment's thread
view the rest of the comments

[–] yum13241@lemm.ee 3 points 1 year ago* (last edited 1 year ago) (2 children)

Maybe CPU manufactures shouldn't add hacks to their CPUs for more performance, and therefore more $$$'s. If they were held liable this'd never happen.

Do you know why Zen 2 and Zen 1 don't have this issue? Because they didn't come up with the hack they used to increase performance (and therefore $$$'s) back then because they knew it'd leak like crazy. This time it didn't seem like they cared.

[–] Nicbudd@beehaw.org 4 points 1 year ago (1 children)

How is getting more performance out of a CPU greedy? Is making a better product that people want greedy? Stagnation is lazy, and making CPUs faster is better for the consumer. So is AMD putting pressure on Intel by releasing faster and faster CPUs. This is a large part of why we have such powerful computers now that shape our modern world.

What "hack" are you talking about that they implemented in Zen 3? Speculative Execution has been around for years, and speculative execution vulnerabilities have been happening ever since. Thankfully, the fix is available and not incredibly difficult to implement, which seems to be the case for most of these bugs. Why should we sacrifice speed for the potential that maybe we implement a bug that can be fixed with a BIOS upgrade?

[–] yum13241@lemm.ee 1 points 1 year ago

Getting more performance is not greedy. What is greedy is adding hacks for performance for $$$'s which is greedy considering the security nightmares that come with it. Also, how the hell are you supposed to update your BIOS if it's not supported by fwupd and you can't use Windows?

Also, what Zen 3 added was not flushing what Zen 2 flushed.