Intel are not having a good time lately are they? More vulnerabilities in their CPUs have been made public.
How many is that Intel have had recently that affect them? Quite a lot. This time, it appears AMD are not affected at least. Still, this is a lot of major security problems to go through with Spectre and Meltdown, Foreshadow and ZombieLoad. Currently, Intel are saying that they're "not aware of any use of these issues outside of a controlled lab environment" so you don't need to go and panic just yet. Just keep an eye on updates for your distribution and motherboard BIOS updates.
Here's they two they're now talking about:
CVE-2020-0548 is an information disclosure vulnerability with a CVSS score of 2.8, low, referred to as Vector Register Sampling. This issue is rated “low” as the user would first need to be authenticated on the target system, the high complexity of an attack, and low confidence in the attacker’s ability to target and retrieve relevant data.
CVE-2020-0549 is also an information disclosure vulnerability requiring authenticated local access. The CVSS score is 6.5, medium. Referred to as L1D Eviction Sampling, the severity score is higher on this one because the attack complexity is lower and the ability to target specific data higher. This vulnerability has little to no impact in virtual environments that have applied L1 Terminal Fault mitigations.
If you have an Intel CPU made before Q4 2018, you're likely affected. CVE-2020-0549, which is also being called CacheOut which has a dedicated website mentions that "Intel inadvertently managed to partially mitigate this issue while addressing a previous issue".
You can see Intel's official post on it here.
Article taken from GamingOnLinux.com.
Quoting: Comandante ÑoñardoNo matter how many vulnerabilities they discover on Intel processors, I will keep using them because the LGA system is more robust..
... than the PGA ....
If, someday, AMD decide to implement the LGA system in the mid class processors, I will try them....
Sadly, actually AMD use the LGA system only in the Threadripper processor.
Can you expand on that somewhat?
I actually prefer PGA, I know bent pins can be a pain at times but if you're rough with them it's to be expected.
Better a few bent pins than this
Ok,That's to the extreme but you get my point.
Comandante Ñoñardo Feb 1, 2020
Quoting: pete910Quoting: Comandante ÑoñardoNo matter how many vulnerabilities they discover on Intel processors, I will keep using them because the LGA system is more robust..
... than the PGA ....
If, someday, AMD decide to implement the LGA system in the mid class processors, I will try them....
Sadly, actually AMD use the LGA system only in the Threadripper processor.
Can you expand on that somewhat?
In the LGA system, once locked, the processor is firmly attached to the socket...
In the PGA system, because of a design error, the processor is not firmly attached to the socket. And because of that ...this happen very often ... :|
It happened to me and, because of that, a couple of contacts in the socket were broken and the mobo never worked again...
So,Never again, AMD.... Never again with the PGA socket.
And the AMD Threadripper that use the LGA socket is too expensive for me, so I will keep using Intel until AMD change their mind about the successor of the AM4 socket.
So basically because of your shall we say heavy hand and not looking at what you are doing that's a failing of AMD's/PGA
I've used PGA since the original P100(Socket 7 sPGA) days and I have never ever done that!
Quoting: Comandante ÑoñardoIn the PGA system, because of a design error, the processor is not firmly attached to the socket. And because of that ...this happen very often ... :|How often does this actually happen? Any statistics available anywhere? As an anecdote, I've built and rebuilt many computers over the years and I have never had this problem. I know people who sell and repair hardware and they've never mentioned this either. I've seen bent pins, but nothing that couldn't be easily fixed.
As you said, it can happen. Especially if the socket has a flimsy locking mechanism, like some do. The "very often" part I find less credible.
Quoting: Comandante ÑoñardoIt happened to me and, because of that, a couple of contacts in the socket were broken and the mobo never worked again...
I nearly broke my new Ryzen because I didn't pull the attaching lever. I hope you have been more clever than me? Because with the lever, i used quite some power to attach the fan and the CPU still didn't move (or break)...
Quoting: pete910Quoting: bekoQuoting: EikeNot everybody changed their computer yesterday, and Intel was better for decades.^-- This.
True but a lot did 3 years ago to yesterday :P
I wanted to buy a new processor for some time now, but I couldn't justify buying Ryzen 1000 or 2000. So for me, it's more like half a year instead of three.
Quoting: The_AquabatQuoting: pete910
So basically because of your shall we say heavy hand and not looking at what you are doing that's a failing of AMD's/PGA
I've used PGA since the original P100(Socket 7 sPGA) days and I have never ever done that!
oh the good old days ! did you also had a K6-2?? that sure was a superior cpu, AMD superiority has always been there! ^_^ I ran vista on that.
AMD has always been very linux friendly basically the first full OS that ran in full 64bits mode, when their first 64bits cpus came out was Linux. IT's simply not true that Intel linux support is better. otoh what is actually true is that ATI's support before it was AMD was crap.
I've had both a K6 233 and a k6-2 500 :D
Surprising large amount of people think its AMD's fault in the ATI era.
Patreon
PayPal
See more from me