Advanced Micro Devices Inc., Intel Corp.’s main rival in computer microprocessors, said a report earlier this month alleging that its chips have widespread, fundamental vulnerabilities greatly exaggerated the severity of the threat.
There are 13 potential exploits that will be fixed within weeks through software updates, the chipmaker said Tuesday in a statement. There’s no evidence that of any of those holes has been used for malevolent purposes, and it would be extremely difficult to use any of them to attack computers, the Sunnyvale, California-based company said. AMD saw reports of unusual trading activity in its stock about a week ago when an Israeli company called CTS Labs went public with a report on the flaws and has reported it to the relevant authorities.
“It’s important to note that all the issues raised in the research require administrative access to the system, a type of access that effectively grants the user unrestricted access to the system,” AMD’s Chief Technology Officer Mark Papermaster said in the statement, referring to the recent report. “Any attacker gaining unauthorized administrative access would have a wide range of attacks at their disposal well beyond the exploits identified in this research.”
CTS estimated that it would take “many months” to address the issue. The researcher didn’t give AMD that amount of time to fix the holes before drawing public attention to them, something that goes against standard practice in these situations.
Source
AMD's report also states that the bios and firmware fixes will have no impact on performance.
I wonder what the boys at Intel who paid for all this think right now.
Why would they ? The company's sole purpose in its existence was to defamate and kill AMD financially.
More specifically, their whole purpose was to profit off of causing a devaluation in AMD stock.
IIRC it wasn't necessarily Intel who came up with it, it was just awfully convenient timing for whoever wanted to fuck with AMD's stock prices, what better way to start a market panic than to say "LOOK AMD ALSO A BUG AND THIS BAD TRUST!"
Does anybody know the legality of what they did? This reeks of white-collar crime.
Intel has been pulling this shit for years and that's why AMD has been unable to compete for quite sometime. I love my ryzen cpu and I'm not looking back.
There is no evidence Intel was involved. The group that did it have a history of doing this, they create news sensations about companies to force their stock prices down, buy while they're low, then when their manufactured shitstorm passes they sell it when its high again.
As far as I know it doesn't count as insider trading (like some people were talking about when this first came out), since they're not part of AMD. It's technically legal, but scummy.
That's what I said, it wasn't necessarily them. I include "necessarily" because while there's no clear connection currently, people are wary of Intel as this sort of cut-throat marketing isn't beneath them.
Keep in mind that this company could've been paid REALLY good money if they had just contacted AMD first and gave them the industry standard amount of time to react to the findings. AMD would've paid them top dollar to keep quiet about this sort of thing for as long as possible with their upcoming Ryzen refresh.
That means that someone was willing to pay even more to have them release this to the public and scare monger. Not necessarily Intel, obviously, but a company with a lot of money to throw around and financial interest in discrediting AMD had to be behind this.
It doesn't mean someone paid them anything. They're a group literally notorious for this sort of thing. They pay themselves via the stock market by tanking company stocks and buying cheap then selling after they recover. They literally did this just to manipulate the stock market.
Believe it or not, the AMD stock didn't really get impacted that much, so it's unlikely they profited substantially from this.
No, but that was their intention.
[Citation Needed]
It was brought up extensively in the first thread about this: https://forum.facepunch.com/f/sh/umyc/AMD-has-a-Spectre-Meltdown-like-security-flaw-of-its-own/1/
The company Viceroy has done this before to other companies.
Viceroy isn't CTS labs.
It's more likely somebody paid CTS to research exploits for AMD, then hired viceroy to add additional smear about AMD.
IIRC both viceroy and CTD have said they don't have AMD stock. What we do know is that CTS was paid by somebody to conduct this research, and it wasn't AMD.
What doesn't add up to me is that Viceroy doesn't seem to actually be a shortseller - their gig seems to be getting paid to drum up public releases and getting a skim off someone elses short sale. Someone was clearly paying CTS to target AMD as well considering the amount of effort and focus they put in.
So who's the third party?
If anything this exploit could be used in the future to disabled the PSP similarly to how you can disable the Management Engine in Intel Processors, thus making it more secure.
https://twitter.com/marcan42/status/973600592143806465
Sorry, you need to Log In to post a reply to this thread.