+- Sinisterly (https://sinister.li)
+-- Forum: Computers (https://sinister.li/Forum-Computers)
+--- Forum: Hardware & Customization (https://sinister.li/Forum-Hardware-Customization)
+--- Thread: 2 new Intel bugs? (/Thread-2-new-Intel-bugs)
2 new Intel bugs? - phyrrus9 - 01-19-2018
So, while browsing Twitter yesterday, I came across a couple tweets that seem to indicate that two new Intel security bugs have been discovered. Upon doing a little research I found the following article:
https://react-etc.net/entry/skyfall-and-solace-vulnerabilities
It seems like there are potentially two more, dubbed Skyfall and Solace, and according to research they are similar to the existing spec-ex bugs. A few people are calling this a hoax, but everybody agrees that nobody knows anything, and as we all know, absence of evidence is not evidence of absence. If these bugs exist, that would mean that in the first 20 days of 2018, Intel has been faced with 6 0day bugs, 5 of which are in hardware (and therefore unpatchable). This is surely not a good year for Intel. What do you think?
RE: 2 new Intel bugs? - Oni - 01-19-2018
(01-19-2018, 03:29 PM)phyrrus9 Wrote: A few people are calling this a hoax, but everybody agrees that nobody knows anything, and as we all know, absence of evidence is not evidence of absence.
Seems like a hoax to me. It's impossible to speculate with the little information available. If it came from a credible source, I'd be inclined to agree. It's a miracle that Intel's stock hasn't really dropped.
RE: 2 new Intel bugs? - phyrrus9 - 01-19-2018
(01-19-2018, 03:38 PM)Oni Wrote:(01-19-2018, 03:29 PM)phyrrus9 Wrote: A few people are calling this a hoax, but everybody agrees that nobody knows anything, and as we all know, absence of evidence is not evidence of absence.
Seems like a hoax to me. It's impossible to speculate with the little information available. If it came from a credible source, I'd be inclined to agree. It's a miracle that Intel's stock hasn't really dropped.
I would tend to think it's not a hoax but rather just a permutation of the original two bugs, or potentially even an independent discovery of the originals. This is actually pretty common in the security world, and even more common when detailed whitepapers or source code isn't published (they weren't with the original CVEs).
As for Intel stock, after the first two bugs hit, they went hard core into advertising mode, trying to shift the focus of their company away from CPUs and into their new areas, and their agressive marketing is probably what's keeping them alive.
RE: 2 new Intel bugs? - Dr. Keter - 01-21-2018
Jeez, this is equally cool as it is scary. I've been saying they had CPU backdoors for years, but interesting seeing all this get uncovered.
RE: 2 new Intel bugs? - mothered - 01-21-2018
Upon reading the article, there's no conclusive Information confirming the vulnerabilities.
There's an update at the bottom of the article:
Quote:Update: The online publication The Register is stating on Twitter that they are convinced that Skyfall and Solace vulnerabilities are a hoax as their chip manufacturer contacts have not heard of this vulnerability.
Even this Isn't definitive. Just because they "have not heard of this vulnerability", by no means Is that an Indication that It doesn't exist.