[SOLVED] AMD allegedly has its own Spectre-like security flaws

Originally Posted by kjhambrick Didier Spaier -- You're already famous in my book, but how much money did you make on this Thread ? -- kjh

0.00 €. Sorry it it made me 'look like a re-tweeter

Originally Posted by Skaendo It's not that AMD doesn't have problems, it's just that it has been blown *WAY* out of proportion by some person(s) looking for fame or money.

The ability to install a rootkit in the hardware is way out of proportion?

Just imagine that your computer will be hacked indifferent how many times you reinstall the operating system and what you use, or how careful you will treat your hard-drives with a 10Kg hammer...

OK, those vulnerabilities are not exactly for script-kiddies, but I bet that the Men in Black from the honorable Three Letters Companies would not be so happy that those things became public.

Originally Posted by Darth Vader The ability to install a rootkit in the hardware is way out of proportion? Just imagine that your computer will be hacked indifferent how many times you reinstall the operating system and what you use, or how careful you will treat your hard-drives with a 10Kg hammer... OK, those vulnerabilities are not exactly for script-kiddies, but I bet that the Men in Black from the honorable Three Letters Companies would not be so happy that those things became public.

Motherboards are cheaper than storage so, if you're paranoid, check your firewall* logs and make you choice?
*ARM device, etc...

Originally Posted by Darth Vader The ability to install a rootkit in the hardware is way out of proportion?

Did you miss the part where it said, "require administrative access to the system"?

Quit sensationalizing it. Honestly IMO you have a "The end is nigh" attitude about everything and anything and it gets boring.

Sure Windows might have some issues there, but *less likely* with Linux as long as you follow the common sense guidelines. Unless you are handing out your root password. I'm not saying impossible, just *less likely*.

Plus, I don't know about you, but I have a decent firewall (70,000+ blocked & updated nightly), a decent host file (724,000+ lines) and I don't give out my root password.

The real issue that I see is that the only things not being updated for these hardware level exploits are "older" routers and modems that after what a few years the manufacturer refuses to push firmware updates (Linksys).

Originally Posted by Skaendo Did you miss the part where it said, "require administrative access to the system"? Quit sensationalizing it. Honestly IMO you have a "The end is nigh" attitude about everything and anything and it gets boring. Sure Windows might have some issues there, but *less likely* with Linux as long as you follow the common sense guidelines. Unless you are handing out your root password. I'm not saying impossible, just *less likely*. Plus, I don't know about you, but I have a decent firewall (70,000+ blocked & updated nightly), a decent host file (724,000+ lines) and I don't give out my root password. The real issue that I see is that the only things not being updated for these hardware level exploits are "older" routers and modems that after what a few years the manufacturer refuses to push firmware updates (Linksys).

Why you insists on Linux, its administration rights and on-line attacks? That's bullshit.

Just imagine a rogue guy visiting ONE TIME in a night a whatever office, booting ONE TIME the manager's computer from a live system (instant administrative rights), then installing an basically undetectable hardware rootkit or keylogger. That's industrial espionage, and could well happen.

Also, could happen some rogue guy to visit your hotel room, where you leave your laptop, doing the same things. And if happened that you are part of some nasty anti-governmental organization in particular countries, that can ends with you (and others) as client(s) of a firing squad. Shit happens.

Originally Posted by Darth Vader Just imagine a rogue guy visiting ONE TIME in a night a whatever office, booting ONE TIME the manager's computer from a live system (instant administrative rights), then installing an basically undetectable hardware rootkit or keylogger. That's industrial espionage, and could well happen. Also, could happen some rogue guy to visit your hotel room, where you leave your laptop, doing the same things. And if happened that you are part of some nasty anti-governmental organization in particular countries, that can ends with you (and others) as client(s) of a firing squad. Shit happens.

You should be a screenwriter.