Another Intel Processor flaw

Kick back and talk about anything here. Music or non Music related..Anything goes....within reason!

Moderators: Derek, parametric, Saul

User avatar
Derek
Global Moderator
Global Moderator
Posts: 4248
Joined: Fri Dec 07, 2007 1:00 am
Contact:
Wales

Another Intel Processor flaw

Unread post by Derek » Sat Aug 18, 2018 9:27 am

I'm surprised this has not been more widely reported. I have only seen this from a Telegraph newsletter so far

Details on the Attack

From the Telegraph news letter...
Intel has revealed another potential security flaw in its products which could expose sensitive data, the third time it has had to disclose a vulnerability in its systems since the start of the year.

Intel said the flaw in its SGX technology, nicknamed Foreshadow, had been discovered by separate groups of researchers, and could be exploited to access data from a chip's memory.

The SGX feature, or Software Guard Extensions, was created to protect sensitive data, creating enclaves on the processor that it was thought could not be accessed if the main computer was compromised.

Intel said it was "not aware of reports that any of these methods have been used in real-world exploits, but this further underscores the need for everyone to adhere to security best practices".

It urged users of its products to update their systems, although said a limited number of server computers were at risk.

"We are diligent in these efforts because we recognise bad actors continuously pursue increasingly sophisticated attacks, and it will take all of us working together to deliver solutions," it said.
It appears to circumvent the Software Guard eXtensions (SGX) feature that allows user-level code to allocate private regions of memory, called enclaves, that are protected from processes running at higher privilege levels. Intel designed SGX to be useful for implementing secure remote computation, secure web browsing, and digital rights management (DRM)
Regards
Derek Cook

http://www.carregddu.co.uk
http://www.echoes-music.co.uk
http://www.xfactory-librarians.co.uk
http://www.ex5tech.co.uk
User avatar
Saul
Site Admin
Site Admin
Posts: 10382
Joined: Sun Feb 01, 2004 1:00 am
Contact:
Ireland

Re: Another Intel Processor flaw

Unread post by Saul » Sat Aug 18, 2018 1:30 pm

Yeah I was reading about that on https://www.theregister.co.uk/ and like you Derek I am very surprised this is not getting more media attention. This is BIG! Makes you wonder what other flaws are yet to come to light?
Saul
Site Admin
Subscribe To Our YouTube Channel!
Review Yamahamusicians.com on Trustpilot
Sign up to the Newsletter
Follow us on Twitter @YamahaMusicians
Follow Us On Facebook
Dowina Acoustic Guitars: Dowina Cabernet DC
Dowina Chardonnay GAC DS - Dowina Rustica GAC - Dowina Marus - Dowina Puella

Seagull S6 Original/Vintage VE2000GG Gordon Giltrap/Ashbury AG-160/Roland FA-07/Pianoteq 6 Pro/Amplitube 3.0/Apple iMac 27"/Logic Pro X/Cubase AI 9/Absynth 5/Ableton Live 9/KRK Rokit RP5 G3 Monitors
User avatar
Derek
Global Moderator
Global Moderator
Posts: 4248
Joined: Fri Dec 07, 2007 1:00 am
Contact:
Wales

Re: Another Intel Processor flaw

Unread post by Derek » Sat Aug 18, 2018 2:12 pm

And the irony is it is in the extensions that is meant to prevent such attacks!
Regards
Derek Cook

http://www.carregddu.co.uk
http://www.echoes-music.co.uk
http://www.xfactory-librarians.co.uk
http://www.ex5tech.co.uk
User avatar
Saul
Site Admin
Site Admin
Posts: 10382
Joined: Sun Feb 01, 2004 1:00 am
Contact:
Ireland

Re: Another Intel Processor flaw

Unread post by Saul » Sat Aug 18, 2018 5:50 pm

Yes indeed. So many things apparently out there to protect us that do pretty much the opposite. I think it would be safe to say a lot of the tech we rely on and think of as robust and secure either has hidden flaws in it or at some point a hacker will find a way through the protection. It's inevitable really
Saul
Site Admin
Subscribe To Our YouTube Channel!
Review Yamahamusicians.com on Trustpilot
Sign up to the Newsletter
Follow us on Twitter @YamahaMusicians
Follow Us On Facebook
Dowina Acoustic Guitars: Dowina Cabernet DC
Dowina Chardonnay GAC DS - Dowina Rustica GAC - Dowina Marus - Dowina Puella

Seagull S6 Original/Vintage VE2000GG Gordon Giltrap/Ashbury AG-160/Roland FA-07/Pianoteq 6 Pro/Amplitube 3.0/Apple iMac 27"/Logic Pro X/Cubase AI 9/Absynth 5/Ableton Live 9/KRK Rokit RP5 G3 Monitors
User avatar
tux
Senior Member
Senior Member
Posts: 1174
Joined: Wed Oct 10, 2012 1:42 am
Kiribati

Re: Another Intel Processor flaw

Unread post by tux » Mon Aug 20, 2018 11:13 pm

I wouldn't call them flaws, these are backdoors that were added on purpose to make life easier for the various 3 letter agencies.
Remember the Snowden Documents?
All key US Tech companies collaborate with the 3 letter agencies by providing backdoors in their products, so this is no longer a conspiracy theory but rather a proven fact.

Furthermore basically all Intel cpus of the last 15 years (since the Centrino) have been designed in Israel and the Israelis are well known for putting backdoors for their own security services in their tech products.
My Yamaha RM50 page
My Yamaha synths: RM50, TG77, TG500, EX5R, CS6R (with PLG150-AN and PLG150-DX)
User avatar
Derek
Global Moderator
Global Moderator
Posts: 4248
Joined: Fri Dec 07, 2007 1:00 am
Contact:
Wales

Re: Another Intel Processor flaw

Unread post by Derek » Tue Aug 21, 2018 7:56 pm

I’m not convinced that a speculative execution attack is a deliberate backdoor. what makes you say that? That does sound like conspiracy theory to me.....
Regards
Derek Cook

http://www.carregddu.co.uk
http://www.echoes-music.co.uk
http://www.xfactory-librarians.co.uk
http://www.ex5tech.co.uk
User avatar
tux
Senior Member
Senior Member
Posts: 1174
Joined: Wed Oct 10, 2012 1:42 am
Kiribati

Re: Another Intel Processor flaw

Unread post by tux » Tue Aug 21, 2018 10:20 pm

Of course I have no proof that this specific flaw is a deliberate back door, but given that we know as a fact thanks to the Snowden documents that back doors have been placed deliberately into US IT products, it's reasonable to assume so, especially when it's a flaw that allows you to circumvent a security feature.
My Yamaha RM50 page
My Yamaha synths: RM50, TG77, TG500, EX5R, CS6R (with PLG150-AN and PLG150-DX)
User avatar
Derek
Global Moderator
Global Moderator
Posts: 4248
Joined: Fri Dec 07, 2007 1:00 am
Contact:
Wales

Re: Another Intel Processor flaw

Unread post by Derek » Wed Aug 22, 2018 6:27 pm

I guess just because you’re paranoid it doesn’t mean to say that they are not out to get you. ;)

I still don’t buy this as a deliberate back door, there are much easier ways to circumvent security and it usually revolves around people’s poor security habits (which I have been guilty of in the past as well). Humans are the weakest link in the security chain.
Regards
Derek Cook

http://www.carregddu.co.uk
http://www.echoes-music.co.uk
http://www.xfactory-librarians.co.uk
http://www.ex5tech.co.uk
User avatar
jima
Global Moderator
Global Moderator
Posts: 328
Joined: Tue Oct 18, 2011 11:54 pm
Cayman Islands

Re: Another Intel Processor flaw

Unread post by jima » Thu Aug 23, 2018 11:51 am

Derek wrote:
Wed Aug 22, 2018 6:27 pm
Humans are the weakest link in the security chain.
Nah, you're quite wrong there, Derek. You just can't get a better password than Fr1ght3nedCh1cken666 which I use for all my computers and bank accounts :)

I think you were on the money in one of your earlier comments, DRM and IP theft protection is far more likely to be the driver (pun intended) behind what appears to be poor design.
Jim
Yamaha EX5, AN1X, TG500, Moog Werkstatt, Korg Wavestation SR, Sigma, Legacy Digital, Nord G2 Engine, Focusrite PRO 40, MIDISPORT 8x8/s, Uno
Loves keyboards but so little time :(
User avatar
Derek
Global Moderator
Global Moderator
Posts: 4248
Joined: Fri Dec 07, 2007 1:00 am
Contact:
Wales

Re: Another Intel Processor flaw

Unread post by Derek » Thu Aug 23, 2018 3:01 pm

Right, I'm off to checkout Jima's accounts.

I'll next be posting from a beach in the Bahamas, loaded and surrounded by a host of beauties..... ;)
Regards
Derek Cook

http://www.carregddu.co.uk
http://www.echoes-music.co.uk
http://www.xfactory-librarians.co.uk
http://www.ex5tech.co.uk
User avatar
Miks
Specialist Moderator
Specialist Moderator
Posts: 1701
Joined: Fri Oct 31, 2008 1:00 am
Germany

Re: Another Intel Processor flaw

Unread post by Miks » Thu Aug 23, 2018 3:13 pm

Derek wrote:
Thu Aug 23, 2018 3:01 pm
I'll next be posting from a beach in the Bahamas, loaded and surrounded by a host of beauties..... ;)
Woe betide ...! :wink:
My (key related) gear (in alphabetical order):
Ferrofish: B4000+
Kawai: K1 II
Korg: M1 (up'd to EX, w/ 'Cool Blue'), M1REX (w/ 'Cool Blue'), Poly-800
Roland: D-50, D-110, D-550, PG-1000
Yamaha: AW1600, DX7IID (w/ 'Cool Blue'), EX5R, RM50, RX5, SY99 (w/ 'Cool Blue'), TG500, TX-802, YMM2
Sector101: SYEMB05 (5x), SYEMB06 (3x), EXFLM2 (1kit), MCD Sweet16 (1x), WaveBlade 8MB Card (1x) & 1x Programmer Unit for WaveBlade
User avatar
tux
Senior Member
Senior Member
Posts: 1174
Joined: Wed Oct 10, 2012 1:42 am
Kiribati

Re: Another Intel Processor flaw

Unread post by tux » Thu Aug 23, 2018 10:35 pm

Derek wrote:
Wed Aug 22, 2018 6:27 pm
there are much easier ways to circumvent security and it usually revolves around people’s poor security habits
Well in that case I guess you are calling Snowden a liar and all his papers fabrications... :roll:

Of course humans are the weakest link when you don't have knowledge of back doors, but you can hardly argue that back doors aren't even easier by far, especially when you have designed them and therefore know exactly how to make use of them.

By the way don't bother about clearing out Jimas accounts, how do you think I'm financing my idle beach life on Kiribati? :wink:

Here's a picture I took this morning:
Image
My Yamaha RM50 page
My Yamaha synths: RM50, TG77, TG500, EX5R, CS6R (with PLG150-AN and PLG150-DX)
User avatar
Miks
Specialist Moderator
Specialist Moderator
Posts: 1701
Joined: Fri Oct 31, 2008 1:00 am
Germany

Re: Another Intel Processor flaw

Unread post by Miks » Thu Aug 23, 2018 10:59 pm

Too much action... 8)
My (key related) gear (in alphabetical order):
Ferrofish: B4000+
Kawai: K1 II
Korg: M1 (up'd to EX, w/ 'Cool Blue'), M1REX (w/ 'Cool Blue'), Poly-800
Roland: D-50, D-110, D-550, PG-1000
Yamaha: AW1600, DX7IID (w/ 'Cool Blue'), EX5R, RM50, RX5, SY99 (w/ 'Cool Blue'), TG500, TX-802, YMM2
Sector101: SYEMB05 (5x), SYEMB06 (3x), EXFLM2 (1kit), MCD Sweet16 (1x), WaveBlade 8MB Card (1x) & 1x Programmer Unit for WaveBlade
Post Reply

Return to “Chill Out Room”