
Originally Posted by
Almagnus1
Eh, not really, but it is amusing watching people that think they have a clue wring their hands at the "evil corporation" when the reality is it's all a bunch of virtue signaling grandstanding that
Let me put it to you this way:
There's a security flaw in any datacenter where an actor can use social engineering to walk into the datacenter without proper authorization, take a machine for "maintenance" and walk out with it, with a lot of high business impact data on it. In said scenario, physical access is required, but the security flaw in that scenario is a breach in the security protocols... yet no one is really losing sleep over this because corporations treat high business impact data as if it's super top secret and are extremely strict (to the point of firing people that breach protocol) about who has access to it.
Same is true with physical access to any computer. If I can access your computer, I can dump all of your storage to an external device and also compromise your operating system (so given enough time) I will be able to access all your data and use your computer for nefarious ends..
Or I can get access to a computer with the affected Intel CPUs and mod the motherboard to exploit the vulnerability.
In all of these scenarios, one simple question renders this issue moot:
Why did that actor have access to the computer in the first place?
So you missed the part about Microsoft already having a fix ready to be deployed...
Which basically means you're just grandstanding about something you clearly don't understand.
If you only knew how many bugs are in the software products and hardware products you are using now... you'd prolly die of shock.
I'm not planning on replacing my Intel i7 anytime soon...
And this isn't the first time that someone has found a bug in an Intel CPU, and it definitely won't be the last time...
I see you are not up to date on the issue. It is the AMD CPUs that physical access is needed to exploit due to a different kernel paging access method, Intel can be accessed remotely.
Knew about MSs fix and its release date, 9 Jan. Did not miss it, did mention it - remeber the comment about OS manufacturers having to patch their OSs?
Since I have been in IT; programmed, designed, built and secured both government and private systems and networks, I think I would not be shocked by the number of bugs in computer systems. However, I do admit I am not as up to date on that rodeo since I retired in 1994.
Any way nice attempt to discredit a post taking you to task for minimizing others concern over an issue they may not be as well versed in as others, that nonetheless has an impact on them..
Ujest - 140 Lore-master, Opun Tia – 107 Warden, Tummi - 105 Captain, Veneur - 75 Hunter, Cneasai - 66 Minstrel, plus alts and mules
Officer, Pipeweed and Ale, Arkenstone (formerly – Friends of Frodo, Vilya)
and Star Citizen…