From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 64FFF1382C5 for ; Sat, 17 Mar 2018 13:53:12 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 93249E088B; Sat, 17 Mar 2018 13:53:03 +0000 (UTC) Received: from mail-qk0-x243.google.com (mail-qk0-x243.google.com [IPv6:2607:f8b0:400d:c09::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 2286CE081B for ; Sat, 17 Mar 2018 13:53:02 +0000 (UTC) Received: by mail-qk0-x243.google.com with SMTP id 132so13997656qkd.5 for ; Sat, 17 Mar 2018 06:53:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=cJ4eMyrTswEOEBAvV3xo6+J2cFaeXOfrF3fkrOck+yU=; b=cxc9ttY6JMpoFCrbb4j0AfdnY3MgOU3gcpOhQrFdSeTUVUeZ8DujCfKM9nTVhemKj5 rhv0E9/cJIYuklJiYT/luxHHCfzcuvOpqQJf5IjHyWYsVLuJ9bMa+dO0sUoEftF0Gw10 fMd/dT9+Uj8Uk67VIbX/rrkpwnoj/xfnJfj8337CZm20TkQD1zvWjycrdeAMbxrZrmWa kc2C8vkuLORa5gVcKp2pDCvfR0ZDihLXJEk4RluPA3xMAvpwyr+h9O9OXQr/br0TCVeO vk8AWwgE2v71Ati7MgwDWKA3yuRVV8SnOBQWzPzgMZBMuVttIx2X4/t/slSpXCrmDmdn fuGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=cJ4eMyrTswEOEBAvV3xo6+J2cFaeXOfrF3fkrOck+yU=; b=ds0TS5zu+XAvgwkyOgylUTyJmTM+MZdtSBgg5DBp/+U30q4n1TfkoGYTr9//jGnIpi YKA8Tpfj+1IJXfhGb5u+yIpYvHS8ShuiwrxvMiRSPSTAwIYPRvHI2KxdGGR3glMDaipq 6B1/QGivAErhoeoTj7zNuPXk06MjK0KiFlD4xmW8tHewZXD6K5JzMy2wMbcNYN96agPp 4VQGDdNXr7s3aH08mOSJBXLrAqP+vR/+vcTi+EcaVNs/g4qKZBo3xCfTBku5sgslhRLn 4p8Ol5xNIRqkqA/5FDJeGgjO0rGLqrdostNqlcTOF26VnuWsnTMG5LtEn0qe4nL7pQul leaQ== X-Gm-Message-State: AElRT7GbqKnntSYNShaN5Ruih+XQyvwXKaHAoh3t9NHfGMSzjexjXYfR WUpUf/ePpBW8rVOLt0InRxiLuDj6tze/Dh9gqUQ= X-Google-Smtp-Source: AG47ELuFb/79yBgA3dvhZfp0B+D0USudlzFcXdyWxJcKHwk2fBvcu3OsUdw5+qzaa+cPNaSSw2NSzprqEC2a8VWI2IY= X-Received: by 10.55.173.1 with SMTP id f1mr7251173qkm.204.1521294782106; Sat, 17 Mar 2018 06:53:02 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.12.138.101 with HTTP; Sat, 17 Mar 2018 06:53:01 -0700 (PDT) In-Reply-To: References: <20180314005408.7pfj7jphsmnlkeek@matica.foolinux.mooo.com> From: Fast Turtle Date: Sat, 17 Mar 2018 06:53:01 -0700 Message-ID: Subject: Re: [gentoo-user] Re: A new AMD CPU weakness? To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset="UTF-8" X-Archives-Salt: e15ec10c-0762-449e-80fd-b45920c8ce22 X-Archives-Hash: eada4cb58d1d3bdc84423ff827c3b1a0 Main issue is you need "PHYSICAL"access to carry these attacks out. It's that god damn simple. If they can physically access the system, it doesn't matter how good the security it because "THEY' own it. All this does is makes damn sure I will not buy any used hardware since you can change embed into the UEFI firmware what ever you want - keep in mind that most boards now have 64M of storage for UEFI firmware (I haven't seen an update that needed then 2.5M. So ask youself, why in hell they needed more then 4M? I could see 8M being a selling point but 64M - hell the first computer I build only had 16M (that was a 386 system). On Wed, Mar 14, 2018 at 6:05 PM, Nikos Chantziaras wrote: > On 14/03/18 02:54, Ian Zimmerman wrote: >> >> https://v.gd/PZkiuR >> >> Does anyone know more details? > > > This looks like it's either completely fake, or based on half-truths: > > http://www.guru3d.com/news-story/amd-security-vulnerability-%E2%80%93-the-day-after-seems-financially-motivated.html > >