lemmy.imagisphe.re
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
nzmaa@lemy.lol to Technology@lemmy.worldEnglish · 9 months ago

‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

www.wired.com

external-link
message-square
53
fedilink
  • cross-posted to:
  • technology@beehaw.org
184
external-link

‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

www.wired.com

nzmaa@lemy.lol to Technology@lemmy.worldEnglish · 9 months ago
message-square
53
fedilink
  • cross-posted to:
  • technology@beehaw.org
Researchers warn that a bug in AMD’s chips would allow attackers to root into some of the most privileged portions of a computer—and that it has persisted in the company’s processors for decades.
  • Riskable@programming.dev
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    9 months ago

    A list of the effected processors would’ve been nice, Wired.

    • Vik@lemmy.world
      link
      fedilink
      English
      arrow-up
      16
      ·
      9 months ago

      The article links to this:

      https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html

      • BlackLaZoR@kbin.run
        link
        fedilink
        arrow-up
        30
        arrow-down
        2
        ·
        9 months ago

        it may be possible for an attacker with ring 0 access to modify the configuration of System Management Mode (SMM) even when SMM Lock is enabled.

        If attacker has a ring 0 access he can already screw you up any way he wants

        • Vik@lemmy.world
          link
          fedilink
          English
          arrow-up
          9
          ·
          9 months ago

          that’s all well and good, I was just responding to someone who wanted the list of affected products

          • WHYAREWEALLCAPS@fedia.io
            link
            fedilink
            arrow-up
            5
            ·
            9 months ago

            It only mentions ring 0 access in your link, ergo they responded to your post because it was the most appropriate. At least that’s how I see it.

            • Vik@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              9 months ago

              The link includes ‘CVE-2023-31315’

        • SzethFriendOfNimi@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          9 months ago

          True. This does allow for persistent recurring infection post clean and cold boot.

          Interesting flaw to keep an eye on.

    • mox@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      9 months ago

      AMD hadn’t published a list when the article was first run, but it has since been updated:

      but it pointed to a full list of affected products that can be found on its website’s [security bulletin page](but it pointed to a full list of affected products that can be found on its website’s security bulletin page..

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 2.85K users / day
  • 9.56K users / week
  • 18.1K users / month
  • 37.7K users / 6 months
  • 1 local subscriber
  • 69.9K subscribers
  • 13.2K Posts
  • 549K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.world
  • L3s@hackingne.ws
  • L4s@hackingne.ws
  • BE: 0.19.5
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org