Registre uma conta gratuita hoje para se tornar um membro! Uma vez conectado, você poderá participar neste site adicionando seus próprios tópicos e postagens, além de se conectar com outros membros por meio de sua própria caixa de entrada privada!
eu sem brincadeira vi por aí mesmo de diferença aqui de desligar essas porras.
Se precisou um programinha te dizer que está habilita é porque o impacto não é significante para você perceber.
Nas novas falhas descobertas não adianta usar virtualização
onde baixa issae?Engraçado que eu ja tinha usado esse programa e desativado o a proteção do Spectre, mas agora rodei ele de novo e vejam só:
Não sei como reativou essas merdas, mas ja corrigí.
Eu desabilitaria.Mesmo estando com performance GOOD é melhor desabilitar? Tô realmente por fora dessas porras.. minha placa é uma Asrock Z370 fatal1ty gaming k6, nunca atualizei a BIOS dela por medo de perder performance com essas zoeiras da Intel, devo me preocupar ou fiz o correto? Foda que se for usar processador de nona vou ter que atualizar de qualquer jeito... O 9900k foi corrigido?
Enviado de meu MI 8 usando o Tapatalk
Mas tem algo aqui que seja diretamente relacionado com o caso atual?Aquela mitigação marota: https://www.phoronix.com/scan.php?page=article&item=mds-zombieload-mit&num=1
Isso lá em 2007 e os caras já falavam nisso.
'Intel Core 2' - MARC
marc.info
www.techspot.com
thehackernews.com
Uma verdadeira PENEIRA esses processadores.Mais um:
Intel now suffers from TPM-FAIL
Intel has fixed two vulnerabilities discovered by a team of academics called TPM-FAIL that could allow an attacker to retrieve cryptographic keys stored inside TPMs.
TPM stands for Trusted Platform Module and in the early days TPMs were separate chips added to a motherboard where a CPU would store and manage sensitive information such as cryptographic keys.
They were used to ensure hardware integrity during the boot-up process or to attest various cryptographic operations, such as handling digital certificates, ensuring HTTPS connections on servers, or verifying authentication-related processes.
With the rise of smart devices, there was no room for a separate TPM chipset on all devices and they became software in firmware-based known as fTPMs.
Boffins at Worcester Polytechnic Institute (USA), the University of Lübeck (Germany), and the University of California, San Diego (USA) have disclosed two vulnerabilities that impact two very widely used TPM solutions.
The first vulnerability is CVE-2019-11090 and impacts Intel's Platform Trust Technology (PTT).
Intel PTT is Intel's fTPM software-based TPM solution. It is widely used on servers, desktops, and laptops, being supported on all Intel CPUs released since 2013, starting with the Haswell generation.
The second is CVE-2019-16863 and impacts the ST33 TPM chip made by STMicroelectronics.
But the novelty and danger factor surrounding TPM-FAIL rely on the fact that this attack is also fully weaponisable in a real-world scenario.
Similar attacks on TPMs usually recover partial keys or take too long to execute. TPM-FAIL does not.
"A local adversary can recover the ECDSA key from Intel fTPM in 4-20 minutes depending on the access level. We even show that these attacks can be performed remotely on fast networks, by recovering the authentication key of a virtual private network (VPN) server in five hours."
Performing a five hour long attack on a remote VPN server isn't as hard as it sounds. Per the research team, the attack involves initiating around 45,000 authentication handshakes against a remote VPN server and recording the responses.
Intel now suffers from TPM-FAIL
Allows an attacker to retrieve cryptographic keysIntel has fixed two vulnerabilities discovered by a team of academics called TPM-FAIL that could allow an attacker to retrieve cryptographic keys stored inside TPMs. TPM stands for Trusted Platform Module and in the early days TPMs were separate...fudzilla.com
A Intel jura que consertou, mas ela também jurava que tinha consertado o ZombieLoad, LOL
Ou seja... ir de AMD?
, eu mesmo não to nem ai (e nem tem por que estar) com estes "furos" do processador.
Linux Distributions Running On Intel CPUs Are About To Get A Lot Slower
Resumo: a Intel quer que todo mundo se foda graças as brechas de segurança nos processadores dela, fazendo com que até os processadores que não são fabricados por ela tenham queda de performance devido a códigos para mitigar essas falhas de segurança.
