#zenbleed — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #zenbleed, aggregated by home.social.
-
#AMD discloses slew of high severity #security #vulnerabilities for #Zen systems, from the original Zen chips to the latest #Zen4 #CPU, that attacks #BIOS chips, we finally have a #Zenbleed fix. AMD is patching the vulnerabilities through new versions of #AGESA, for #Zen2-based chips, in particular, many of these new AGESAs also patch Zenbleed, including #Epyc #Server chips https://bit.ly/3I1JKds https://www.tomshardware.com/pc-components/cpus/amd-discloses-slew-of-high-severity-security-vulnerabilities-for-zen-chips-that-attack-bios-chips-updates-aim-to-patch-bugs-finally-fix-zenbleed
-
#AMD discloses slew of high severity #security #vulnerabilities for #Zen systems, from the original Zen chips to the latest #Zen4 #CPU, that attacks #BIOS chips, we finally have a #Zenbleed fix. AMD is patching the vulnerabilities through new versions of #AGESA, for #Zen2-based chips, in particular, many of these new AGESAs also patch Zenbleed, including #Epyc #Server chips https://bit.ly/3I1JKds https://www.tomshardware.com/pc-components/cpus/amd-discloses-slew-of-high-severity-security-vulnerabilities-for-zen-chips-that-attack-bios-chips-updates-aim-to-patch-bugs-finally-fix-zenbleed
-
#AMD discloses slew of high severity #security #vulnerabilities for #Zen systems, from the original Zen chips to the latest #Zen4 #CPU, that attacks #BIOS chips, we finally have a #Zenbleed fix. AMD is patching the vulnerabilities through new versions of #AGESA, for #Zen2-based chips, in particular, many of these new AGESAs also patch Zenbleed, including #Epyc #Server chips https://bit.ly/3I1JKds https://www.tomshardware.com/pc-components/cpus/amd-discloses-slew-of-high-severity-security-vulnerabilities-for-zen-chips-that-attack-bios-chips-updates-aim-to-patch-bugs-finally-fix-zenbleed
-
#AMD discloses slew of high severity #security #vulnerabilities for #Zen systems, from the original Zen chips to the latest #Zen4 #CPU, that attacks #BIOS chips, we finally have a #Zenbleed fix. AMD is patching the vulnerabilities through new versions of #AGESA, for #Zen2-based chips, in particular, many of these new AGESAs also patch Zenbleed, including #Epyc #Server chips https://bit.ly/3I1JKds https://www.tomshardware.com/pc-components/cpus/amd-discloses-slew-of-high-severity-security-vulnerabilities-for-zen-chips-that-attack-bios-chips-updates-aim-to-patch-bugs-finally-fix-zenbleed
-
#AMD discloses slew of high severity #security #vulnerabilities for #Zen systems, from the original Zen chips to the latest #Zen4 #CPU, that attacks #BIOS chips, we finally have a #Zenbleed fix. AMD is patching the vulnerabilities through new versions of #AGESA, for #Zen2-based chips, in particular, many of these new AGESAs also patch Zenbleed, including #Epyc #Server chips https://bit.ly/3I1JKds https://www.tomshardware.com/pc-components/cpus/amd-discloses-slew-of-high-severity-security-vulnerabilities-for-zen-chips-that-attack-bios-chips-updates-aim-to-patch-bugs-finally-fix-zenbleed
-
This Week in Security: 1Password, Polyglots, and Roundcube
#hackadaycolumns #news #securityhacks #1password #polyglot #roundcube #zenbleed #hackaday
-- Delivered by RssEverything service
-
This Week in Security: 1Password, Polyglots, and Roundcube
#hackadaycolumns #news #securityhacks #1password #polyglot #roundcube #zenbleed #hackaday
-- Delivered by RssEverything service
-
This Week in Security: 1Password, Polyglots, and Roundcube - This week we got news of a security incident at 1Password, and we’re certain we ar... - https://hackaday.com/2023/10/27/this-week-in-security-1password-polyglots-and-roundcube/ #hackadaycolumns #securityhacks #1password #roundcube #polyglot #zenbleed #news
-
This Week in Security: 1Password, Polyglots, and Roundcube - This week we got news of a security incident at 1Password, and we’re certain we ar... - https://hackaday.com/2023/10/27/this-week-in-security-1password-polyglots-and-roundcube/ #hackadaycolumns #securityhacks #1password #roundcube #polyglot #zenbleed #news
-
This Week in Security: 1Password, Polyglots, and Roundcube - This week we got news of a security incident at 1Password, and we’re certain we ar... - https://hackaday.com/2023/10/27/this-week-in-security-1password-polyglots-and-roundcube/ #hackadaycolumns #securityhacks #1password #roundcube #polyglot #zenbleed #news
-
This Week in Security: 1Password, Polyglots, and Roundcube - This week we got news of a security incident at 1Password, and we’re certain we ar... - https://hackaday.com/2023/10/27/this-week-in-security-1password-polyglots-and-roundcube/ #hackadaycolumns #securityhacks #1password #roundcube #polyglot #zenbleed #news
-
This Week in Security: 1Password, Polyglots, and Roundcube - This week we got news of a security incident at 1Password, and we’re certain we ar... - https://hackaday.com/2023/10/27/this-week-in-security-1password-polyglots-and-roundcube/ #hackadaycolumns #securityhacks #1password #roundcube #polyglot #zenbleed #news
-
Pretty good video to watch on the #zenbleed vulnerability, feat. Tacos Ormandy:
https://youtu.be/neWc0H1k2Lc -
Pretty good video to watch on the #zenbleed vulnerability, feat. Tacos Ormandy:
https://youtu.be/neWc0H1k2Lc -
Pretty good video to watch on the #zenbleed vulnerability, feat. Tacos Ormandy:
https://youtu.be/neWc0H1k2Lc -
Pretty good video to watch on the #zenbleed vulnerability, feat. Tacos Ormandy:
https://youtu.be/neWc0H1k2Lc -
When looking at all the CPU vulnerabilities in the recent years even until this day. We see mitigations taking place in microcode or OS level. But the performance impact is huge! Sometimes 30%-50% decrease in performance on specific tasks like databases!
Question: can we get some compensation as consumer? Since both Intel and AMD sold hardware that doesn't give the promised results.
#specre #meltdown #hertzbleed #Zenbleed #Inception #vulnerability #security #secops #compensation #money -
When looking at all the CPU vulnerabilities in the recent years even until this day. We see mitigations taking place in microcode or OS level. But the performance impact is huge! Sometimes 30%-50% decrease in performance on specific tasks like databases!
Question: can we get some compensation as consumer? Since both Intel and AMD sold hardware that doesn't give the promised results.
#specre #meltdown #hertzbleed #Zenbleed #Inception #vulnerability #security #secops #compensation #money -
When looking at all the CPU vulnerabilities in the recent years even until this day. We see mitigations taking place in microcode or OS level. But the performance impact is huge! Sometimes 30%-50% decrease in performance on specific tasks like databases!
Question: can we get some compensation as consumer? Since both Intel and AMD sold hardware that doesn't give the promised results.
#specre #meltdown #hertzbleed #Zenbleed #Inception #vulnerability #security #secops #compensation #money -
When looking at all the CPU vulnerabilities in the recent years even until this day. We see mitigations taking place in microcode or OS level. But the performance impact is huge! Sometimes 30%-50% decrease in performance on specific tasks like databases!
Question: can we get some compensation as consumer? Since both Intel and AMD sold hardware that doesn't give the promised results.
#specre #meltdown #hertzbleed #Zenbleed #Inception #vulnerability #security #secops #compensation #money -
When looking at all the CPU vulnerabilities in the recent years even until this day. We see mitigations taking place in microcode or OS level. But the performance impact is huge! Sometimes 30%-50% decrease in performance on specific tasks like databases!
Question: can we get some compensation as consumer? Since both Intel and AMD sold hardware that doesn't give the promised results.
#specre #meltdown #hertzbleed #Zenbleed #Inception #vulnerability #security #secops #compensation #money -
#Linux Kernel Updated To Add #Zenbleed Fix For Valve's #SteamDeck :steamdeck:
-
#Linux Kernel Updated To Add #Zenbleed Fix For Valve's #SteamDeck :steamdeck:
-
#Linux Kernel Updated To Add #Zenbleed Fix For Valve's #SteamDeck :steamdeck:
-
#Linux Kernel Updated To Add #Zenbleed Fix For Valve's #SteamDeck :steamdeck:
-
#Linux Kernel Updated To Add #Zenbleed Fix For Valve's #SteamDeck :steamdeck:
-
Ooopsie!
Linux Kernel Updated To Add Zenbleed Fix For Valve's Steam Deck - Phoronix https://www.phoronix.com/news/Linux-Zenbleed-Steam-Deck
#Linux #Kernel #Zenbleed #Fix #Valve #SteamDeck #AMD #Ryzen #Vulnerability #Hardware #GamingNews #TechNews
-
Ooopsie!
Linux Kernel Updated To Add Zenbleed Fix For Valve's Steam Deck - Phoronix https://www.phoronix.com/news/Linux-Zenbleed-Steam-Deck
#Linux #Kernel #Zenbleed #Fix #Valve #SteamDeck #AMD #Ryzen #Vulnerability #Hardware #GamingNews #TechNews
-
Ooopsie!
Linux Kernel Updated To Add Zenbleed Fix For Valve's Steam Deck - Phoronix https://www.phoronix.com/news/Linux-Zenbleed-Steam-Deck
#Linux #Kernel #Zenbleed #Fix #Valve #SteamDeck #AMD #Ryzen #Vulnerability #Hardware #GamingNews #TechNews
-
Ooopsie!
Linux Kernel Updated To Add Zenbleed Fix For Valve's Steam Deck - Phoronix https://www.phoronix.com/news/Linux-Zenbleed-Steam-Deck
#Linux #Kernel #Zenbleed #Fix #Valve #SteamDeck #AMD #Ryzen #Vulnerability #Hardware #GamingNews #TechNews
-
Ooopsie!
Linux Kernel Updated To Add Zenbleed Fix For Valve's Steam Deck - Phoronix https://www.phoronix.com/news/Linux-Zenbleed-Steam-Deck
#Linux #Kernel #Zenbleed #Fix #Valve #SteamDeck #AMD #Ryzen #Vulnerability #Hardware #GamingNews #TechNews
-
I added a known-good microcode check to my #FreeBSD #Zenbleed MSR chicken-bit rc script, and a reminder to check it all again in mid-December.
I don't have the relevant CPUs to hand to test it directly so do let me know how you get on.
https://gist.github.com/Freaky/2560975d3c94246b86f464b8be75c967
-
I added a known-good microcode check to my #FreeBSD #Zenbleed MSR chicken-bit rc script, and a reminder to check it all again in mid-December.
I don't have the relevant CPUs to hand to test it directly so do let me know how you get on.
https://gist.github.com/Freaky/2560975d3c94246b86f464b8be75c967
-
I added a known-good microcode check to my #FreeBSD #Zenbleed MSR chicken-bit rc script, and a reminder to check it all again in mid-December.
I don't have the relevant CPUs to hand to test it directly so do let me know how you get on.
https://gist.github.com/Freaky/2560975d3c94246b86f464b8be75c967
-
I added a known-good microcode check to my #FreeBSD #Zenbleed MSR chicken-bit rc script, and a reminder to check it all again in mid-December.
I don't have the relevant CPUs to hand to test it directly so do let me know how you get on.
https://gist.github.com/Freaky/2560975d3c94246b86f464b8be75c967
-
@Violet This years #defcon looks ripe with CPU vulnerabilities.
#Zenbleed last week for AMD
today:
#Downfall for Intel#Inception for AMD
-
@Violet This years #defcon looks ripe with CPU vulnerabilities.
#Zenbleed last week for AMD
today:
#Downfall for Intel#Inception for AMD
-
@Violet This years #defcon looks ripe with CPU vulnerabilities.
#Zenbleed last week for AMD
today:
#Downfall for Intel#Inception for AMD
-
@Violet This years #defcon looks ripe with CPU vulnerabilities.
#Zenbleed last week for AMD
today:
#Downfall for Intel#Inception for AMD
-
@Violet This years #defcon looks ripe with CPU vulnerabilities.
#Zenbleed last week for AMD
today:
#Downfall for Intel#Inception for AMD
-
Maximum oof:
> It took a bit of work, but I found a variant that can leak about 30 kb per core, per second.
There's a nice clear explanation here: https://lock.cmpxchg8b.com/zenbleed.html
-
Maximum oof:
> It took a bit of work, but I found a variant that can leak about 30 kb per core, per second.
There's a nice clear explanation here: https://lock.cmpxchg8b.com/zenbleed.html
-
Maximum oof:
> It took a bit of work, but I found a variant that can leak about 30 kb per core, per second.
There's a nice clear explanation here: https://lock.cmpxchg8b.com/zenbleed.html
-
Maximum oof:
> It took a bit of work, but I found a variant that can leak about 30 kb per core, per second.
There's a nice clear explanation here: https://lock.cmpxchg8b.com/zenbleed.html
-
Haven't seen it mentioned much #zenbleed is a new vulnerability found on Zen 2 processors, surrounding speculative execution.
https://lock.cmpxchg8b.com/zenbleed.html -
Unfortunately @theregister published misleading and incorrect information that using QEMU (i.e. KVM / Firecracker) mitigates the AMD #Zenbleed exploit.
_It does not_
We demo the exploit in a GitHub Action and show how to mitigate it.
https://actuated.dev/blog/amd-zenbleed-update-now#bot
Original tweet : https://nitter.it/alexellisuk/status/1685952872125460480 -
Unfortunately @theregister published misleading and incorrect information that using QEMU (i.e. KVM / Firecracker) mitigates the AMD #Zenbleed exploit.
_It does not_
We demo the exploit in a GitHub Action and show how to mitigate it.
https://actuated.dev/blog/amd-zenbleed-update-now#bot
Original tweet : https://nitter.it/alexellisuk/status/1685952872125460480 -
Unfortunately @theregister published misleading and incorrect information that using QEMU (i.e. KVM / Firecracker) mitigates the AMD #Zenbleed exploit.
_It does not_
We demo the exploit in a GitHub Action and show how to mitigate it.
https://actuated.dev/blog/amd-zenbleed-update-now#bot
Original tweet : https://nitter.it/alexellisuk/status/1685952872125460480 -
Unfortunately @theregister published misleading and incorrect information that using QEMU (i.e. KVM / Firecracker) mitigates the AMD #Zenbleed exploit.
_It does not_
We demo the exploit in a GitHub Action and show how to mitigate it.
https://actuated.dev/blog/amd-zenbleed-update-now#bot
Original tweet : https://nitter.it/alexellisuk/status/1685952872125460480 -
Unfortunately @theregister published misleading and incorrect information that using QEMU (i.e. KVM / Firecracker) mitigates the AMD #Zenbleed exploit.
_It does not_
We demo the exploit in a GitHub Action and show how to mitigate it.
https://actuated.dev/blog/amd-zenbleed-update-now#bot
Original tweet : https://nitter.it/alexellisuk/status/1685952872125460480 -
FIxes for AMD 'Zenbleed' CVE-2023-20593 has landed in Debian archives. For stable (bookworm), vulnerability is fixed in Linux version 6.1.38-2 and for old-stable (bullseye) fix is in version 5.10.179-3.
This only fixes for 2nd gen Epyc CPUs, further CPUs to follow in later releases. Please update your Debian (and downstream) servers.
-
FIxes for AMD 'Zenbleed' CVE-2023-20593 has landed in Debian archives. For stable (bookworm), vulnerability is fixed in Linux version 6.1.38-2 and for old-stable (bullseye) fix is in version 5.10.179-3.
This only fixes for 2nd gen Epyc CPUs, further CPUs to follow in later releases. Please update your Debian (and downstream) servers.
-
FIxes for AMD 'Zenbleed' CVE-2023-20593 has landed in Debian archives. For stable (bookworm), vulnerability is fixed in Linux version 6.1.38-2 and for old-stable (bullseye) fix is in version 5.10.179-3.
This only fixes for 2nd gen Epyc CPUs, further CPUs to follow in later releases. Please update your Debian (and downstream) servers.
-
FIxes for AMD 'Zenbleed' CVE-2023-20593 has landed in Debian archives. For stable (bookworm), vulnerability is fixed in Linux version 6.1.38-2 and for old-stable (bullseye) fix is in version 5.10.179-3.
This only fixes for 2nd gen Epyc CPUs, further CPUs to follow in later releases. Please update your Debian (and downstream) servers.
-
Eine neu entdeckte Sicherheitslücke bedroht zahlreiche -AMD-Prozessoren. Die meisten Patches kommen erst in Richtung Jahresende. #Zenbleed https://winfuture.de/news,137655.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
