Re: [Fed-Talk] Intel Core 2 Duo microcode bug?
Re: [Fed-Talk] Intel Core 2 Duo microcode bug?
- Subject: Re: [Fed-Talk] Intel Core 2 Duo microcode bug?
- From: Joshua Krage <email@hidden>
- Date: Thu, 2 Aug 2007 16:42:26 -0400
- Mail-followup-to: email@hidden
The original Theo de Raadt posting which raised the issue as a major
security concern:
<http://marc.info/?l=openbsd-misc&m=118296441702631>
Intel Core2 Duo Has 'Non-Fixable' Bugs, OpenBSD Founder Alleges (ExtremeTech)
<http://www.extremetech.com/article2/0,1697,2152458,00.asp>
HP's tech bulletin on the Core2Duo issue, with links to the specific Intel
bulletins:
<http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?&objectID=c01020735>
Linus Torvald's response to the Intel issue:
<http://www.realworldtech.com/forums/index.cfm?action=detail&id=80552&threadid=80534&roomid=2>
I'm unaware of an official statement from Apple on what this affects and
how.
Some OSs are less susceptible to some of the bugs. Some can correct
microcode via live patching at OS load.
Also worth nothing that microcode bugs and processor bugs are nothing new.
The issue in this case is that the potential exploitability of this bug may
be of significant concern. And of course, someone needs to demonstrate the
exploitability of the bug, which has yet to happen.
On Thu, Aug 02, 2007 at 11:11:50AM -0400, David Emery wrote:
> A friend who runs mostly BSD was telling me he bought a new Intel dual
> core machine that didn't work right for several months, and the problem
> turned out to be a problem in the Intel microcode. One of the
> problems/manifestations of this problem was that the machine would
> ignore page protection registers, which caught my friend's attention as
> a security problem. For Windows, I remember seeing a fix to this
> problem, but I don't remember seeing anything on the Apple side about a
> fix.
>
> Does this ring a bell with anyone? Was this part of a recent security
> update?
>
> dave
>
> --
> David Emery, DSCI, supporting PdM FCS (BCT) SW Integration
> 703 298 3473 (office/cell), 703 272 7496 (fax)
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
--
-------------------------------------------------------------------------
F. Joshua Krage, CISSP IT and Communications Directorate
email@hidden NASA Goddard Space Flight Center
Chief Information Security Officer/Associate CIO for Information Security
also serving as (Acting) Information Technology Security Manager for GSFC
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden