Lanky_Pomegranate530@lemmy.world to Technology@lemmy.worldEnglish · 1 year agoEncryption-breaking, password-leaking bug in many AMD CPUs could take months to fixarstechnica.comexternal-linkmessage-square91fedilinkarrow-up1548arrow-down116cross-posted to: privacy@lemmy.mlcybersecurity@sh.itjust.works
arrow-up1532arrow-down1external-linkEncryption-breaking, password-leaking bug in many AMD CPUs could take months to fixarstechnica.comLanky_Pomegranate530@lemmy.world to Technology@lemmy.worldEnglish · 1 year agomessage-square91fedilinkcross-posted to: privacy@lemmy.mlcybersecurity@sh.itjust.works
minus-squareAtemu@lemmy.mllinkfedilinkEnglisharrow-up47arrow-down1·1 year ago Planned fix December 2023 Yikes.
minus-squareevatronic@lemm.eelinkfedilinkEnglisharrow-up37·1 year agoIt’s worth noting these are the firmware / microcode fixes. There’s already a software solution available, There is a software workaround, you can set the chicken bit DE_CFG[9]. This may have some performance cost, and the microcode update is preferred. source: https://www.openwall.com/lists/oss-security/2023/07/24/3 AMD has also already released a fix for the big boy - the EPYC processor.
minus-squareDr. Dabbles@lemmy.worldlinkfedilinkEnglisharrow-up1·1 year agoThe MSR bit is potentially a large performance loss and AMD recommends their partners not use it. In my tests is was 5-15% on EPYC depending on workload. “Some performance cost” is really hiding the reality of that bit.
Yikes.
It’s worth noting these are the firmware / microcode fixes.
There’s already a software solution available,
AMD has also already released a fix for the big boy - the EPYC processor.
The MSR bit is potentially a large performance loss and AMD recommends their partners not use it. In my tests is was 5-15% on EPYC depending on workload. “Some performance cost” is really hiding the reality of that bit.