Though about referencing that but didn't know how well known it was generally. (Love that show)
You are being watched.
-
Support.2@XOTIC PC Company Representative
-
KY_BULLET and Support.2@XOTIC PC like this.
-
Importing the Steam Library if installed on a non-C: drive is a nice exception, but a lot of people install Steam and the game Library on the C partition as default, and the Steam Library is also lost and needs reinstallation if you don't do an image back up of the C drive.Last edited: Jan 12, 2018ajc9988 likes this. -
alexhawker, Vasudev and hmscott like this.
-
Active Management Technology defaults allow anyone to take control of many PCs.
https://arstechnica.com/information...r-security-flaw-in-intel-management-firmware/
"But the latest vulnerability—discovered in July of 2017 by F-Secure security consultant Harry Sintonen and revealed by the company today in a blog post—is more of a feature than a bug. Notebook and desktop PCs with Intel AMT can be compromised in moments by someone with physical access to the computer—even bypassing BIOS passwords, Trusted Platform Module personal identification numbers, and Bitlocker disk encryption passwords—by rebooting the computer, entering its BIOS boot menu, and selecting configuration for Intel’s Management Engine BIOS Extension (MEBx)."
This has been known for years. It's kind of like the more familiar BIOS management / administrator password. If someone can get access to your BIOS they can set all kinds of things and then lock you out of your own laptop, making it useless. Same for this, set it up when you get the laptop, most corporations will already set this up before it reaches the user.
You would want this under independent control, away from the normal BIOS settings, possibly administered by a different group.
It is a feature, and as with all BIOS passwords, you need to lock others out when you set it up, don't leave it at "null" defaults, or anyone can boot into it and mess it up.Last edited: Jan 13, 2018 -
I think it has been shown that these patch(s)/fix(s) do not really affect gaming nor I imagine affect gaming benchmarking much if at all. I am talking about those out there that just a few days ago would trust nothing but the stead fastness, security and reliability of Intel for their workflows and would never recommend anything else.
-
-
Papusan, Vasudev, Raiderman and 1 other person like this.
-
But, if you wind up having 20% performance hit on a 5GHz processor, that is the same as a 4GHz processor, which is a huge hit in the nuts to consumers.Papusan, Vasudev, Raiderman and 1 other person like this. -
Last edited: Jan 12, 2018Raiderman, Vasudev, ajc9988 and 1 other person like this.
-
AMD CEO Lisa Su: Security Is 'Job One' For High-Performance Processors | CNBC
AMD's Mark Papermaster Talk Processors, Meltdown, Spectre, and more - Interview at CES 2018
-
DARPA-funded ‘unhackable’ computer could avoid future flaws like Spectre and Meltdown
UPDATE 1/9/2018: Microsoft Windows update "bricks" computers with AMD processor
January 8, 2018
A University of Michigan (U-M) team has announced plans to develop an “unhackable” computer, funded by a new $3.6 million grant from the Defense Advanced Research Projects Agency (DARPA).
The goal of the project, called MORPHEUS, is to design computers that avoid the vulnerabilities of most current microprocessors, such as the Spectre and Meltdown flaws announced last week.*
The $50 million DARPA System Security Integrated Through Hardware and Firmware (SSITH) program aims to build security right into chips’ microarchitecture, instead of relying on software patches.*
The U-M grant is one of nine that DARPA has recently funded through SSITH.
Future-proofing
The idea is to protect against future threats that have yet to be identified. “Instead of relying on software Band-Aids to hardware-based security issues, we are aiming to remove those hardware vulnerabilities in ways that will disarm a large proportion of today’s software attacks,” said Linton Salmon, manager of DARPA’s System Security Integrated Through Hardware and Firmware program.
Under MORPHEUS, the location of passwords would constantly change, for example. And even if an attacker were quick enough to locate the data, secondary defenses in the form of encryption and domain enforcement would throw up additional roadblocks.
More than 40 percent of the “software doors” that hackers have available to them today would be closed if researchers could eliminate seven classes of hardware weaknesses**, according to DARPA.
DARPA is aiming to render these attacks impossible within five years. “If developed, MORPHEUS could do it now,” said Todd Austin, U-M professor of computer science and engineering, who leads the project. Researchers at The University of Texas and Princeton University are also working with U-M.
* Apple released today (Jan. 8) iOS 11.2.2 and macOS 10.13.2 updates with Spectre fix for Safari and WebKit, according to MacWorld. Threatpost has an update (as of Jan. 7) on efforts by Intel and others in dealing with Meltdown and Spectre processor vulnerabilities .
** Permissions and privileges, buffer errors, resource management, information leakage, numeric errors, crypto errors, and code injection.
UPDATE 1/9/2018: BLUE-SCREEN ALERT: Read this if you have a Windows computer with an AMD processor: Microsoft announced today it has temporarily paused sending some Windows operating system updates (intended to protect against Spectre and Meltdown chipset vulnerabilities) to devices that have impacted AMD processors. “Microsoft has received reports of some AMD devices getting into an unbootable state after installation of recent Windows operating system security updates.” -
Papusan, Raiderman, Dr. AMK and 1 other person like this.
-
Last edited: Jan 13, 2018ajc9988, Raiderman, Vasudev and 1 other person like this.
-
-
Last edited: Jan 13, 2018alexhawker, ajc9988, Raiderman and 2 others like this.
-
-
ajc9988, Papusan, Raiderman and 1 other person like this.
-
Vasudev likes this.
-
The goal of the project, called MORPHEUS, is to design computers that avoid the vulnerabilities of most current microprocessors, such as the Spectre and Meltdown flaws announced last week.*"
"The $50 million DARPA System Security Integrated Through Hardware and Firmware (SSITH) program aims to build security right into chips’ microarchitecture, instead of relying on software patches.*
The U-M grant is one of nine that DARPA has recently funded through SSITH."
"DARPA is aiming to render these attacks impossible within five years. “If developed, MORPHEUS could do it now,” said Todd Austin, U-M professor of computer science and engineering, who leads the project. Researchers at The University of Texas and Princeton University are also working with U-M."Last edited: Jan 13, 2018 -
Govt introduces amendment to Data Protection Bill to shield security researchers
The government has introduced an amendment to the Data Protection Bill which seeks to ensure that security researchers who test security protocols will not be treated at par with hackers with criminal motives.
The new amendment to the Data Protection Bill will help security researchers conduct detailed security testing and assessments without fear of criminal prosecution or harassment by authorities.
-
FBI chief bats for ‘exclusive’ encryption backdoor for authorities
The FBI Director has once again called for encryption backdoors to be created in mobile devices so that authorities can exclusively use them to access data stored on citizens' devices.
Christopher Wray says encryption has weakened the FBI's ability to deal with cases involving terrorism, child exploitation, organised crime and trafficking.
-
just waiting for that optane. -
I can tell you on 4.1 with the TR it is very snappy No complaints here except when W10 decides to slow things down. Good thing about the AMD stock as Intel's has been taking a beating.
Raiderman, Vasudev, ajc9988 and 1 other person like this. -
-
alexhawker, Raiderman, Starlight5 and 2 others like this. -
Spectre Wreaks Havoc As iPhone 6 Performance Drops By 40% In Both Single And Multi-Core Benchmarks
“Looks like Apple’s close hardware and software integration isn’t enough to keep Spectre at bay” -
Starlight5 Yes, I'm a cat. What else is there to say, really?
-
Dr. AMK, Raiderman, Vasudev and 1 other person like this.
-
Intel cancels WiGig cards and 802.11ad docking parts
http://www.guru3d.com/news-story/intel-cancels-wigig-cards-and-802-11ad-docking-parts.html
There was a rumor Intel was going to pursue another high speed local area wireless tech instead, but I haven't seen anything since the announcement canceling the WiGig hardware, and program.Dr. AMK, Raiderman, Vasudev and 1 other person like this. -
-
None of these backdoors are needed to stop crime - all they are doing is opening a vulnerability for you to be hacked and for your data to be taken by either governments or criminals (neither of which I would trust with it). The only way to stop serious crime, such as terrorism, is enforce the law properly, punish those who commit serious crimes, control who enters your country and to stop wasting police resources on stuff like "hate crimes" (thought crime) where they will spend all day looking at social media to threaten people with the wrong opinions (actually happens here in the UK). Stopping crime and terrorism has nothing to do with consumer electronics. If terrorists want to they can go completely offline and plan their attacks the old fashioned way, and if there is a vulnerability in a certain app or website they use they will just switch to another. The only reason these backdoors are added is to make people live in fear so they can be controlled by the government.
-
Starlight5 Yes, I'm a cat. What else is there to say, really?
All the while I have a WiGiG dock now, use it every day, and expect to continue doing so after getting a new machine in a few months.
alexhawker, hmscott and Dr. AMK like this. -
I am confused a bit?? Are you basing your next cpu purchase on a wireless standard?
ajc9988 likes this. -
Starlight5 Yes, I'm a cat. What else is there to say, really?
@Raiderman yes. I've been waiting for such functionality for years, it is simply perfect for my particular use case - and I'm not going to give it up, even if it's labeled as discontinued.
-
[which was not even listed on Dells fix list when the Intel ME debacle hit the fan, even though it is vulnerable]
@hmscott: First off, thanks for the awesome work on informing everyone about the vulnerabilities. I do have one minor suggestion: Add in the 1st post the Security Advisories of each major OEM, if they have one. It's more easier for someone to find if their machine will be patched and when can they expect the firmware fix. So far I've managed to uncover these:
Lenovo Spectre and Meltdown Advisory
HP Spectre and Meltdown Advisory
HP Enterprise Spectre and Meltdown Advisory Spreadsheet
Gigabyte Spectre and Meltdown BIOS Updates
Dell Consumer Spectre and Meltdown Advisory
Dell Enterprise Spectre and Meltdown Advisoryajc9988, hmscott, Mr. Fox and 1 other person like this. -
- security breach? from whom?
- chances of it happen to my pc, close to nil
- speed slower than ryzen after patch? LOLLL. ryzen is that of ivybridge's IPC.
- after i patch it, which i probably won't, my performance would go up, because optane SSD benefit more from patching under windows 10.
-
Most MB bundle a wireless card that fits like you said in an m.2. Most people did not waste time with the standard, which is why it died. MB manufacturers didn't want to waste the resources to increase costs of their boards by sticking on an expensive niche adapter on it, mostly due to historic sales data for those that bought AMD, which was bucked last year and AMD will likely receive more attention on their new boards versus ports from intel designs like this last year.
Next, what is your point on complaining on PCIe throughput. You put it on a slot and that 8 or 16 throughput BEATS your ad throughput. I actually pull out the wifi on my boards as security risks and hard line behind a firewall for the LAN, so I couldn't care what my phone connects at (which is currently AC). If you plan on upgrading once available, and the availability is this year after the new CPUs, the new AMD cpus and MBs likely support it and you'll get better performance.
Also, you realize PCIe 4.0 boards drop this year, right? As with final standard on DDR5 this summer.
This year is not the year to upgrade anything anyways, nor to make buying decisions on such a small factor. 2019 you get Ryzen 7nm, Intel 10nm+, PCIe 4 at minimum and PCIe5 standard finalized early in the year. DDR5 will start filtering down to consumer high end from the server markets. You have 7nm graphics from both Nvidia and AMD. I could go on and on. My point is you should change your mindset. Hell, even 802.11ax should be out then. We are talking about worlds of change and this is the start. The next big jump in tech is when we move beyond 3nm or 2nm around 2025-28, depending on miniaturization in that time-frame and developments on graphene and optical processing. So, I just don't understand basing it on wigig when I teamport 4x1Gb ports and you have affordable 10Gb cards now. Either way, that is only going to effect your LAN, as you are still limited by your ISP! I have a 28-port switch for the house, 1GB standard. So I would have to expend lots more to update to 10Gb, and it only effects MY LAN. Not an expense needed at this point. It won't help gaming, just helps on wireless, which if you are talking a desktop, is senseless if you are able to hard line.hmscott, Dennismungai and Raiderman like this. -
But, I understand, long fought hard won battles - sunk investments - of dollar and mind - are hard to lose and let go so far down the road, this is all going to upset lots of people in the long run.
Hopefully others will pick up the slack for the wireless developments we need moving forward as Intel falters. The same for everything else.
Intel needs to focus on the re-architecture of their core CPU's, solve the problem at the source, stop investing in other flights of fantasy, Intel need's to release new CPU's, motherboard chipsets, and get right with the world again.ajc9988, Raiderman and Starlight5 like this. -
Many of the previous posts with links to commercial coverage have such lists in their articles, but it would be good to have the vendor update links here too, I'll add these you supplied to the 1st post - and hopefully others will post some too - and I will add them to the 1st post too. Thanks again.Last edited: Jan 13, 2018 -
Starlight5 Yes, I'm a cat. What else is there to say, really?
Some people prefer sitting in one place when working at home - but I don't. The whole room is my workshop; I prefer standing in front of my working table (of appropriate height) when doing serious work which benefits from second monitor and/or additional hardware, while sitting in a comfy chair or sofa when doing more relaxed stuff, especially reading or drawing - both in portrait device orientation - or sometimes just walking across the room with the device in my hands. Wires simply take away my freedom, and waste my time for no good reason.
Before getting a WiGiG dock, every time I wanted to access my external HDDs or broadcast audio through stereo system with zero lag and best quality, I had to get to the table where the dock stands and put the convertible in (optionally connecting stereo system to the dock instead of BT4.0 receiver). WiGiG dock solved both those problems, with the added bonus of connecting TV wirelessly, again without any lag or image degradation; despite what official documents say about its range, I am able to use it across a large room without any problems, even with TV connected to it - unless someone or something is standing between convertible and docking station, or I am covering WiGiG antenna location with my hand while holding it in tablet mode.
The dock and parts for upgrading my machine ended up costing me exactly $100 after selling the replaced/unnecessary parts - thanks to very expensive shipping fee I paid for the docking station; would spend even less if I was in US. That's cheaper than buying any TB3, and most USB-C docks. If I won't be able to make WiGiG work with my next machine, I will have to invest in both a NAS and Bluetooth 5.0 hardware - the latter wasn't even available when I assembled my WiGiG setup - in hopes that the experience won't be much worse after paying noticeably more.Last edited: Jan 13, 2018 -
But, I am still not convinced that it is worth sticking with Intel. I've stated in other threads that Intel is about to hit a hard wall and other vendors will lap them for various reasons. They are bleeding cash in many areas and have reshaped how the departments look making it harder to see their losses and expenditures in recent years. Besides that, you have Broadcom and Qualcom working to accomplish the same (I say with an intel server NIC in two builds, which makes me, in a way, a hypocrite I suppose). But that is the thing, if you try to make it proprietary to lock people into other products made by you, you are literally trying to limit competition and acting as a monopoly. To me, there is nothing more disgusting. Apple acts similarly, but I hate them for more reasons than just that. LOL!
But, as I said, you are jumping the gun on your commitments without looking at what is over the horizon and the upcoming changes in tech. It is like those that push Intel Optane. Very little benefit for many, huge cost, and the more consumer based ones are so small that they are better used as cache drives. Meanwhile, when Samsung drops their equivalent that is cheaper and open to all platforms, who do you think will win? Not only that, since completing the work, Micron and Intel have dissolved their joint venture recently. So I'm really finding it hard to speak well on Intel with this breach.
We will see how it plays out, but I think I've laid my arguments out, here and elsewhere, as to why Intel is going to no longer have its magic. You may want to keep an eye open moving forward, though, as things can change drastically, including support.Starlight5 and Raiderman like this. -
https://www.techspot.com/article/1556-meltdown-and-spectre-cpu-performance-windows/
3 to 4% decrease across the board for most benchmarks. NVME slowdowns of 30 to 40% -
-
"To mitigate the chances of this exploit being used, F-Secure says that a strong password for AMT needs to be used or AMT should be disabled completely if possible."
Intel's response to the issue was to remind users to follow its guidelines for changing MEBx passwords and points fingers at system manufacturers for being lax, and not mitigating the potential attack. An Intel spokesperson responded to Ars Technica, writing:
We appreciate the security research community calling attention to the fact that some system manufacturers have not configured their systems to protect Intel Management Engine BIOS Extension (MEBx). We issued guidance on best configuration practices in 2015 and updated it in November 2017, and we strongly urge OEMs to configure their systems to maximize security. Intel has no higher priority than our customers’ security, and we will continue to regularly update our guidance to system manufacturers to make sure they have the best information on how to secure their data. -
Intel and vendors can't ship the laptops with a "strong password" set out of the box, otherwise noone in the IT staff would be able to login and change it to their own password.
The laptop needs to ship with BIOS and AMT / MBEX passwords set to known defaults so the new owner can set their own strong passwords before giving it to their staff.
This isn't a security hole unless the IT staff doesn't do their job.jclausius, Starlight5 and Raiderman like this. -
-
-
Robbo99999 Notebook Prophet
Vasudev likes this. -
CPU Vulnerabilities, Meltdown and Spectre, Kernel Page Table Isolation Patches, and more
Discussion in 'Hardware Components and Aftermarket Upgrades' started by hmscott, Jan 2, 2018.