When F00F bug hit 20 years ago, Intel reacted the same way
itwire.com
itwire.com
I'd say Linus feels the same: https://lkml.org/lkml/2018/1/3/797
This time they got caught with THEIR poop on OUR lunch-box.
They will deny wrong-doing, they will downplay it. I wonder if these vulns are exploitable, who had prior knowledge (e.g. NSA had 20 years of abuse for MS SME), and if they patch them, what new backdoor they now got (because conspiracy nuts apart, no one burns a card unless they got a better one and they just lost control of the previous one).
What to learn from it? One thing's for sure, Intel could cut the BS when faced with bad PR. It comes across as tone-deaf, defensive, and uninspiring.
The more interesting question is what kind of design changes they make in future designs. Because F00F was a trivial fix compared to this, and as far as I know there hasn't been a security revelation of this impact for CPU design in the modern era. You'd have to go back to a time when things were much simpler and easier to change anyway. If Intel engineering doesn't take this seriously and we see half-baked mitigations in new chips that's when I go long on the competition, because that indicates true incompetence whereas the current statements indicate nothing other than savvy PR.
This one has been present, lurking, and possibly exploited for quite a long time.
existing vs knowing is different, dont you say?
as the saying goes - computers are always in a state of error, you only notice the problem when enough occur simultaneously to make the problem visible .... or something like that.
Just tracking bugs is a billion dollar industry (Atlassian, etc.)
Personally? Tonight my Firefox was rendering all images as black until I rebooted. When I press the 'stop' button after watching something on the HBO app, it doesn't stop.
https://www.reddit.com/r/softwaregore/
These aren't hypothetical vulnerabilities that a skilled attacker could discover after years of searching (as is the case with these CPU bugs) - they're right there on the surface.