Intel Procs Again hit By Massive Vulnerability (called Spoiler)
Yeah, not exactly the most fun pun, but this is a spoiler alert. The vulnerability was given the name Spoiler and was discovered by the Worcester Polytechnic Institute and the University of Lübeck. it involves a leak in page mapping of working memory, making other attacks much easier to perform.
To perform tasks faster, speculative execution is applied to processes in working memory. In this case, data from the working memory is already cached in advance with so-called load and store instructions. However, if a physical memory address does not exist, data leaks away over the timing - the time it took to reach a physical memory address. The researchers mention , Rowhammer, cache and javascript attacks can be executed in merely seconds.
-- The Register --
This security shortcoming can be potentially exploited by malicious JavaScript within a web browser tab, or malware running on a system, or rogue logged-in users, to extract passwords, keys, and other data from memory. An attacker therefore requires some kind of foothold in your machine in order to pull this off. The vulnerability, it appears, cannot be easily fixed or mitigated without significant redesign work at the silicon level.
Speculative execution, the practice of allowing processors to perform future work that may or may not be needed while they await the completion of other computations, is what enabled the Spectre vulnerabilities revealed early last year.
In a research paper distributed this month through pre-print service ArXiv, "SPOILER: Speculative Load Hazards Boost Rowhammer and Cache Attacks," computer scientists at Worcester Polytechnic Institute in the US, and the University of Lübeck in Germany, describe a new way to abuse the performance boost.
Intel has was notified of the problem on December 1st. According to the researchers, a solution via a software update is virtually impossible and can only be remedied with an adjustment in architecture. If this is done, it will undoubtedly lead to lower performance. Whether there is a solution is very doubtful.
Arm and AMD processors are not vulnerable to this attack.
Intel Processor Refresh in Spring - 100 MHz bumps - 02/21/2019 10:10 AM
Earlier this week you've already read the funny news about a KFC edition, in the upcoming weeks more processors will be added into the lineup from Intel, they, however, all are refreshes mostly 100 M...
Shuttle launches DH370 Mini-PC for 6-core 8th Gen Intel Processors - 02/06/2019 09:49 AM
The 1.3-litre DH370 sports a new chassis design which accommodates Intel processors of the 8th generation for socket LGA1151v2, relies on the faster H370 chipset and offers a total of four USB 3.1 po...
Intel processor shortages to continue into 2Q19 says ASUS - 11/15/2018 10:01 AM
We've touched the topic a couple of times but it's now confirmed by ASUS as well. With the issues on 10nm fabrication, Intel is running out of fabrication space on 14nm, and they have a lot of proc...
Three new vulnerabilities in Intel processors discovered - L1TF - 08/15/2018 08:54 AM
Intel has announced that three new serious vulnerabilities have been discovered in its processors, allowing unauthorized access to data in the L1 cache. The vulnerabilities are named L1 Terminal Faul...
Intel Promotes Its Three Corporate Officers - 07/25/2018 05:05 AM
Intel today announced that its board of directors has promoted three corporate officers. "These promotions recognize the expanded scope and significance of the organizations for each of these pr...
Senior Member
Posts: 1259
Joined: 2013-02-22
And with this any ipc advantage intel still had will be gone lol. looks like everything will be on who can get moar cores and or moar clock speed
Senior Member
Posts: 2549
Joined: 2012-04-16
Why do I get the feeling that Intel has been compromised by the intelligence agencies?
Senior Member
Posts: 3404
Joined: 2013-03-10
Intel is well past caring already. Back when Spectre was revealed, Intel was somewhat worried, or at least acted as if it was. But in the end, today, Intel can't produce enough merchandise to meet the demand, no matter how high they set the prices. I bet this particular vulnerability earned wide yawns from Intel execs, nothing more.
Senior Member
Posts: 180
Joined: 2013-02-07
Is a "Culnerability" a play on words I am ignorant to? Or just a typo in the title?
Senior Member
Posts: 14586
Joined: 2014-07-21
spec-exec is just the plague of anything security related.
Do not wait for a fix for this in any form, Intel still hasn't been able to fix four year old CPUs, and they seem to do nothing to get such issues with spec-exec out of their system.
Just one more reason I'm waiting for Zen 3000 CPUs...