Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread techlists
While this article may not be factual, it is completely within the realm of possibilities. This is a huge problem and there may be HUGE consequences. What I'd like to know is how these issues persisted for over 20 years without detection. I assume Intel, AMD and the other chip manufactures

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Stephen Partington
Something to consider is the the meltdown and spectre flaws are entirely seperate than the management engine. Which has known vulnerabilities. On Jan 11, 2018 8:41 AM, wrote: > > > While this article may not be factual, it is completely within the realm > of possibilities. This is a huge problem

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Aaron Jones
Two is one and one is none. A single flaw can get patched. Multiple flaws and over lapping issues can be pointed out as mistakes and at least one method might still work. Other than dlink, no one is stupid enough to declare their vulnerabilities and attacks. Right? #Super secret anti iran fla

RE: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Carruth, Rusty
As mentioned earlier, I've done my share of ... um, looking for flaws in design of operating systems back when I was in college. (What, 1976?) We discovered some bad flaws in the design of the . How long had the Univac been around? I don't know, but a while. Unless someone with WAY too much

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Mark Phillips
There is no conspiracy here. 23 years ago no one thought about attack vectors and how to take over machines. It is only recently that we are all sensitized to this problem. Even though the tech world is sensitized to the nature of exploits, companies still ship brand new products (e.g. Nest, cars,

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Aaron Jones
Cyber security didn’t exist until the past couple years? We have been hooking up bugs to telegraphs since the civil war. 2016 wasn't the year we invented cyber security. ... > On Jan 11, 2018, at 9:11 AM, Mark Phillips wrote: > > There is no conspiracy here. 23 years ago no one thought about

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Aaron Jones
Signals intelligence is believed to have been birthed in 1904. But exploiting hardware isn't new. For military, police, or criminal intentions. You work at Intel Mark? Lol > On Jan 11, 2018, at 9:11 AM, Mark Phillips wrote: > > There is no conspiracy here. 23 years ago no one thought about at

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Mark Phillips
No, I don't work at Intel. I am, however, not a believer in all the government conspiracy theories floating around the Internet. Mark On Thu, Jan 11, 2018 at 9:25 AM, Aaron Jones wrote: > Signals intelligence is believed to have been birthed in 1904. > > But exploiting hardware isn't new. For m

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Aaron Jones
We had a silent helicopter we used in Vietnam to tap wires in cambodia. We tapped wires miles under water during the cold war. Russia built a listening device that used the vibrations of speech to power it and hid it in a wooden award given to a diplomat. It was found because his maid acciden

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread techlists
This is basic stuff. Kernel memory must be segregated and each application's memory must be segregated. These are the basics of CPU functionality. That is why I find theses issues perplexing. And it leads me to one basic question. If these problems persisted since 1995, how could these issue go

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Matthew Crews
> Original Message >Subject: Re: Post : INTEL’S SECURITY FLAW IS NO FLAW >Local Time: January 11, 2018 10:36 AM >UTC Time: January 11, 2018 5:36 PM >From: techli...@phpcoderusa.com >To: Main PLUG discussion list > >This is basic stuff.  Kernel memory must be segregated and each ap

Re: Meltdown and Spectre - What to do about it

2018-01-11 Thread Brian Cluff
The Intel microcode that you need to update to go along with the previous patches just hit. https://usn.ubuntu.com/usn/usn-3531-1/ Brian Cluff On 01/09/2018 05:54 PM, Brian Cluff wrote: I just got security notifications that the patches for meltdown for Ubuntu just hit. https://wiki.ubuntu.c

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Steve Litt
While you may not be an agent for Kim Jong-un, it's completely within the realm of possibilities. This is a huge problem and there may be HUGE consequences. Not so fun when YOU'RE the target of accusations masked as ambiguity, is it? There's a reason we were taught at the age of 10 not to spread

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW - Or any other post for that matter

2018-01-11 Thread Nathan O'Brennan
Wow, this group is viscous. Remind me never again to post *any* form of opinion. --- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinf

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW - Or any other post for that matter

2018-01-11 Thread Mark Phillips
Hmmmviscous, as in we are all a little dense? or vicious as in brutal? Perhaps a little bit of both?? ;) Nathan - my apologies if I have offended you, because that was not my intentionjust trying to lighten the mood a little. Mark On Thu, Jan 11, 2018 at 3:23 PM, Nathan O'Brennan wrote:

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Eric Oyen
The management engine has it's own issues, including not allowing non-signed software to be installed or executed (read the FSF article for further details). -eric from the central offices of the Technomage Guild, the "just the facts, Ma'am" Dept. On Jan 11, 2018, at 8:47 AM, Stephen Partington

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Joseph Sinclair
There seems to be a lot of confusion surrounding the recently disclosed CPU hardware issues... A few points to consider: 1) This is a cache timing attack using speculative execution (a key performance feature in the hardware) that exposes data (i.e. it's not an exploit to "take over" a system);

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW - Or any other post for that matter

2018-01-11 Thread Nathan O'Brennan
lol, spell check is no match for my vocabulary! I meant brutal. This group can be brutal. On 2018-01-11 15:59, Mark Phillips wrote: > Hmmmviscous, as in we are all a little dense? or vicious as in brutal? > Perhaps a little bit of both?? ;) > > Nathan - my apologies if I have offended y

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Aaron Jones
Thanks Joe. You should blog an article about this cuz that was the best explanation for the issue I have read so far. > On Jan 11, 2018, at 6:42 PM, Joseph Sinclair > wrote: > > There seems to be a lot of confusion surrounding the recently disclosed CPU > hardware issues... > A few points

LVMCache Google Slide deck Link

2018-01-11 Thread Stephen Partington
https://docs.google.com/presentation/d/1O4GParMvzSODGh2e4yduAOmp7GMW-xSNuoatcvM5Df4/edit?usp=sharing -- A mouse trap, placed on top of your alarm clock, will prevent you from rolling over and going back to sleep after you hit the snooze button. Stephen --

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Steve Litt
On Thu, 11 Jan 2018 10:29:33 -0700 Aaron Jones wrote: > We had a silent helicopter we used in Vietnam to tap wires in > cambodia. > > We tapped wires miles under water during the cold war. [snip] > > But you don't believe someone could be tasked with purposefully > adding a back door to som

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Joseph Sinclair
Feel free to repost anywhere. I don't have a blog site I use; so no real place to post a full article... On 2018-01-11 07:24 PM, Aaron Jones wrote: > Thanks Joe. > > You should blog an article about this cuz that was the best explanation for > the issue I have read so far. > >> On Jan 11, 2

Re: Post : INTEL’S SECURITY FLAW IS NO FLAW

2018-01-11 Thread Stephen Partington
Yes. There were a couple of details I wanted but was not finding. Thank you. On Jan 11, 2018 7:24 PM, "Aaron Jones" wrote: Thanks Joe. You should blog an article about this cuz that was the best explanation for the issue I have read so far. > On Jan 11, 2018, at 6:42 PM, Joseph Sinclair wrote