Re: [gentoo-user] New Intel vulnerability?

2020-03-07 Thread Rich Freeman
On Sat, Mar 7, 2020 at 11:26 AM Ivan T. Ivanov wrote: > > Quoting Rich Freeman (2020-03-06 23:13:55) > > > > The patched firmware executes before any software you boot, assuming > > your device was patched before the hacker got his hands on it. > > > > Well, they say that vulnerability is inside

Re: [gentoo-user] New Intel vulnerability?

2020-03-07 Thread Ivan T. Ivanov
Quoting Rich Freeman (2020-03-06 23:13:55) > On Fri, Mar 6, 2020 at 3:55 PM Wols Lists wrote: > > > > On 06/03/20 19:39, Rich Freeman wrote: > > > > > > They don't detail the effort required. If the firmware is patched it > > > sounds like it still requires tinkering with hardware. > > > > By

Re: [gentoo-user] New Intel vulnerability?

2020-03-06 Thread Rich Freeman
On Fri, Mar 6, 2020 at 3:55 PM Wols Lists wrote: > > On 06/03/20 19:39, Rich Freeman wrote: > > > > They don't detail the effort required. If the firmware is patched it > > sounds like it still requires tinkering with hardware. > > By then it's TOO LATE. The firmware is signed for security, AND

Re: [gentoo-user] New Intel vulnerability?

2020-03-06 Thread Wols Lists
On 06/03/20 19:39, Rich Freeman wrote: > On Fri, Mar 6, 2020 at 2:07 PM Wols Lists wrote: >> >> On 06/03/20 13:48, Rich Freeman wrote: >>> If you fall into this camp you need to still update your firmware to >>> address the non-TPM-user and to avoid making it trivial for software >>> to steal

Re: [gentoo-user] New Intel vulnerability?

2020-03-06 Thread aisha
I just fell in love with Intel a bit more. --- Aisha blog.aisha.cc On 2020-03-06 14:39, Rich Freeman wrote: On Fri, Mar 6, 2020 at 2:07 PM Wols Lists wrote: On 06/03/20 13:48, Rich Freeman wrote: > If you fall into this camp you need to still update your firmware to > address the

Re: [gentoo-user] New Intel vulnerability?

2020-03-06 Thread Rich Freeman
On Fri, Mar 6, 2020 at 2:07 PM Wols Lists wrote: > > On 06/03/20 13:48, Rich Freeman wrote: > > If you fall into this camp you need to still update your firmware to > > address the non-TPM-user and to avoid making it trivial for software > > to steal your keys/etc. However, you need to be aware

Re: [gentoo-user] New Intel vulnerability?

2020-03-06 Thread Wols Lists
On 06/03/20 13:48, Rich Freeman wrote: > If you fall into this camp you need to still update your firmware to > address the non-TPM-user and to avoid making it trivial for software > to steal your keys/etc. However, you need to be aware that you are no > longer secure against physical theft of

Re: [gentoo-user] New Intel vulnerability?

2020-03-06 Thread Michael
On Friday, 6 March 2020 13:48:00 GMT Rich Freeman wrote: > On Fri, Mar 6, 2020 at 3:50 AM Michael wrote: > > I have lost count with the naming scheme of Intel's embedded spyware to > > know if this is yet another vulnerability, or something to convince me to > > throw away the last Intel powered

Re: [gentoo-user] New Intel vulnerability?

2020-03-06 Thread Rich Freeman
On Fri, Mar 6, 2020 at 3:50 AM Michael wrote: > > I have lost count with the naming scheme of Intel's embedded spyware to know > if this is yet another vulnerability, or something to convince me to throw > away the last Intel powered box still in my possession (mind you its >10yr > old): > >

[gentoo-user] New Intel vulnerability?

2020-03-06 Thread Michael
I have lost count with the naming scheme of Intel's embedded spyware to know if this is yet another vulnerability, or something to convince me to throw away the last Intel powered box still in my possession (mind you its >10yr old):