Questions tagged [cpu]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
1 answer
280 views

AMD SEV - attack through the hypervisor console

AMD SEV enables creating a trusted encrypted VM where the memory of the whole VM is encrypted using cryptographic keys and features on the CPU and thus not visible to the cloud provider (in theory if ...
  • 31
2 votes
1 answer
155 views

Does malware ever check CPUID?

CPUID is an instruction that identifies CPU type and features. Has there ever been a case of either targeting or the opposite - ignoring of specific CPUIDs by malware in the wild?
3 votes
0 answers
132 views

How to select a CPU to buy for the best security?

Various versions of Spectre, Meltdown, Foreshadow and ZombieLoad make it quite the jungle trip to navigate which CPUs are affected, how to mitigate them. Right now, my problem is that I need a new ...
  • 131
1 vote
1 answer
627 views

What is the latest version of ThinkPad laptops that doesn't have Intel Management Engine or similar remote controller built-in?

I work in cybersecurity and would like to find an older laptop that doesn't have the Intel Management Engine built-in, while still able to run a Debian OS well. I have an IBM ThinkPad t42 with 42T0273 ...
  • 61
15 votes
1 answer
5k views

Security considerations of x86 vs x64

What if any, are the security considerations of deciding to use an x64 vs x86 architecture?
0 votes
0 answers
211 views

Feasibility of CPU Backdoors

Recently I was thinking of the feasibility of hardware backdoors in the CPU introduced by manufacturers at the behest of three letter agencies. I can think of two potential backdoors that seem ...
0 votes
1 answer
402 views

Is it possible to extract encryption keys from software executing on your own system?

I'm a newbie in this field so forgive me in advance if this question is stupid in anyway. Say we have a software that is executing on our system and encrypting files using a secret key that is not ...
  • 3
0 votes
2 answers
146 views

Can a custom built CPU break hard drive encryption?

While a hard drive is decrypted on boot up, can the original phrase be intercepted at some comparison calculation step by a specially built CPU or is there some higher math involved? This would be ...
user avatar
0 votes
0 answers
119 views

Secure code makes exploitation easier with CPU vulnerabilities?

I researched CPU vulnerabilities in the past, such as Specter and Meltdown. I read that one of those attacks is made easier if the code is a certain way. I cannot remember if it was related to being ...
2 votes
1 answer
415 views

Would an anti-virus software make any other processes consume more CPU?

Would an anti-virus software make any other processes that it scans to consume more CPU? We recently switched to a new Next-Gen, AI based Anti-Virus software. On couple of our Linux servers that runs ...
  • 1,317
1 vote
0 answers
294 views

Is it possible to debunk Intel Management Engine conspiracy theories using a data usage monitor device?

If there would be any backdoor in recent Intel CPU's, then it should send and receive data secretly. Isn't it possible to easily debunk this conspiracy theory by implementing a third physical device ...
  • 139
1 vote
1 answer
162 views

are small SOC chips also affected by Meltdown and Spectre?

How can I find out, if given CPU is affected by the Meltdown and Spectre bugs ? My CPU is relatively older, and it is a SOC chip: AMD GX-412TC SOC I was not able to find, whether these chips also ...
0 votes
0 answers
137 views

Anti-Theft Mobile CPU

The newest Android phones use the Qualcomm Snapdragon 855 chipset with its TrustZone/TEE. The Android OS makes sure that a stolen phone, in its assembled form, is not usable. Does Trustzone further ...
  • 230
4 votes
1 answer
3k views

Sacrificing 30% of my CPU performance (by disabling Hyper-Threading) to fully mitigate CPU vulnerabilities, necessary?

I used the spectre-meltdown-checker, version 0.42, without any option resulting in all-green results. But, in a help page, I found the --paranoid switch, which resulted in about a half of later CVEs ...
1 vote
0 answers
114 views

How would one compare Cache Allocating Technology against MIT's Dynamically Allocated Way Guard for prevention of the Spectre side-channel Attack?

Upon research, I'm finding it difficult to identify a way to compare each solution. Is it correct in saying both solutions are software based? Therefore, could I compare overall PC perfomance with ...
  • 11
2 votes
2 answers
408 views

Can javascript damage data and hardware?

I once had a script looking like the one below: window.open("SameSiteUrl"); alert("spamspamspam"); it had some strange laggy effects... Anyways, a friend "pranked" me by running the script overnight....
1 vote
3 answers
3k views

If x86 architecture has overflow flag in the CPU, then why can't we use it to detect integer overflows in C binaries? [closed]

I'm talking about the overflow flag that is used in some architectures like x86: https://en.wikipedia.org/wiki/Overflow_flag why aren't operating systems using this overflow flag to stop integer ...
1 vote
2 answers
516 views

Are the CPU protection rings meant to protect against malicious programs or against unintentional programming mistakes?

I am trying to understand what is the purpose of the CPU protection rings (specifically user mode and kernel mode). I don't think that the CPU protection rings are meant to protect against malicious ...
2 votes
0 answers
222 views

How dangerous is the ME on non-vPro CPUs?

I’ve seen plenty of Intel ME vulnerabilities and other security-related issues with the co-processor. However, most seem to be focusing on the extended ME features available on vPro CPUs, which allow ...
0 votes
1 answer
102 views

The main things a cloud data center could inject into its hardware

So some cloud service providers like Amazon use custom hardware to improve different characteristics of their servers. This also means they can control the security better, because there is nothing ...
  • 598
0 votes
0 answers
65 views

If you buy a used hard drive or CPU, how to guarantee it doesn't have anything installed or running on it [duplicate]

Say you buy a used hard drive, or a computer (wondering about both cases, something that is just a drive for storage, and something that is an actual running chip). I am not interested in whether or ...
  • 598
1 vote
2 answers
500 views

Effects of new random Session token for each HTTP Request

On successful authentcation, a web application issues a session cookie that is a constant length string of apparently random hex characters. ...
2 votes
1 answer
1k views

Data Execution Prevention X vs NX

My lecturer posted this in his slides and I have no idea what he is trying to say. I quote from his slide: Windows DEP = Data Execution Prevention Old “X” idea: must allow explicitly, current ...
1 vote
1 answer
151 views

Security implications of running multiple virtual machines on shared CPU cores

Recently there has been the recommendation to disable hyperthreading. I was wondering if there is an increased risk of an attack or information disclosure when multiple virtual machines use the same ...
  • 11
14 votes
1 answer
4k views

New CVE-2018-5407 "PortSmash vulnerablity" in Intel CPU

I just heard in the news: Intel CPUs impacted by new PortSmash side-channel vulnerability. Is it as threatening as Meltdown/Spectre? Is it patched? What should we do to be safe? Does it affect AMD CPU'...
  • 1,142
1 vote
0 answers
230 views

Will More vCPU's and RAM Help Protect Against Some Smaller Scale DDoS Attacks?

Obviously having more vCPU's (virtual CPU's) and more RAM by them self won't be able to alone help stop and/or prevent a DDoS attack, but let's say after a DDoS attack is finished and/or slowing down ...
  • 41
32 votes
7 answers
24k views

If I know the CPU architecture of a target, can I send instructions embedded in an image?

Can I send instructions embedded in an image to a target, if I know his CPU architecture?
0 votes
1 answer
167 views

Do any speculative executation attacks affect ARMv7 CPUs?

Do we know if there are speculative execution attacks that affect ARMv7 CPUs at this time? Are there any theoretical risks that need further investigation?
user avatar
16 votes
2 answers
3k views

Are new AMD processors more secure than Intel ones?

Since the discovery of Meltdown and Spectre, CPU security has been compromised and trust to the main manufacturers reduced, particularly Intel. 8 months later I wonder, what CPUs are more secure at ...
5 votes
1 answer
1k views

Can speculative execution on intel cpu be disabled?

In the light of all the recent Intel Vulnerabilities with speculative execution, can speculative execution be fully disabled to protect from all this vulnerabilities, from BIOS or OS kernel? Maybe ...
2 votes
2 answers
2k views

How protected mode in CPU is really implemented?

I know what is real and protected mode of cpu execution. But how CPU implements protected mode ? AFAIK cpu does everything what the program says it to do. Where is the protected mode behaviour ...
3 votes
2 answers
387 views

Why are Protection Rings called rings?

Protection rings are different privilege levels granted to software, with the kernel being the most privileged, applications the least privileged, and drivers somewhere in between. My question is why ...
  • 133
3 votes
1 answer
375 views

How to fix Spectre variant 3a and variant 4?e

How I can fix CVE-2018-3640 [rogue system register read] aka 'Variant 3a' and CVE-2018-3639 [speculative store bypass] aka 'Variant 4'? My status for them is VULNERABLE. I have Intel CPU and using ...
3 votes
2 answers
664 views

What can give physical access to CPU?

If an attacker has an unlimited physical access to CPU, but does not have access to memory, including RAM, can he attack and gain access to the user's data? I heard the opinion that this is ...
user avatar
-1 votes
2 answers
181 views

Extracting passwords from recycled machine using Spectre and Meltdown

With Spectre and Meltdown, hackers can extract your password from the CPU cache. If I give someone my computer without the hard drive, can he extract my passwords through the CPU?
1 vote
1 answer
122 views

Does Speculative Store Bypass Attack Require Assembly/Source Code Knowledge?

ok, so the gist of speculative store bypass attack to my understanding is that, cpu chooses the most frequent code path, bypass the if/else test and just assumes that it's true/false and then execute ...
  • 281
1 vote
1 answer
186 views

Do Spectre(-NG) and Meltdown affect Mill?

Given what is publicly known about the Mill CPU, would it be affected by Spectre(-NG) or Meltdown style attacks? Why/why not?
  • 301
1 vote
0 answers
233 views

What Spectre V2 patches fixes which vulnerabilties on Linux?

Let's assume I have a computer with a pre-Skylake Intel processor that doesn't have microcode mitigating the Spectre V2 attack. Then to my understanding, if the kernel and all user-space applications ...
9 votes
3 answers
337 views

How can CPU designers prevent information leaks from speculated execution?

We know about short-term measures to mitigate the Meltdown and Spectre vulnerabilities in certain microprocessors where speculative execution has measurable effects on cache timings (mainly patches to ...
  • 1,226
8 votes
1 answer
1k views

Intel firmware/microcode updates that make processors "immune" to both Spectre and Meltdown?

Recently Intel has claimed the following in a press release (emphasis added): SANTA CLARA, Calif., Jan. 4, 2018 — Intel has developed and is rapidly issuing updates for all types of Intel-based ...
6 votes
2 answers
1k views

Capability of microcode hacking?

Before Spectre and Meltdown, I've never heard of users updating microcode on a chip through firmware or otherwise. I actually thought it was written into the silicon and immutable. Now I'm seeing a ...
  • 2,579
11 votes
2 answers
642 views

Does recent Intel hardware mitigate Meltdown at the hardware level?

Recently a security researcher made the following claim via Twitter (emphasis added): If you're running Windows, I'm about to publish a tool that checks if you have the "Variant 3: rogue data cache ...
5 votes
2 answers
1k views

Are VIA CPUs vulnerable to Spectre/Meltdown attacks?

I couldn't find any information about the recently published Spectre/Meltdown attacks affecting VIA CPUs. Are they also affected by this vulnerabilities?
  • 153
5 votes
1 answer
575 views

What was state of the art knowledge on security of speculative evaluation when it was introduced to Intel CPUs?

Many sources claim that almost all Intel x86 CPUs back to Pentium Pro are vulnerable to the Meltdown attack. Pentium Pro was introduced to the market in 1995. What was the state of the art knowledge ...
  • 161
4 votes
3 answers
958 views

Do the Spectre and Meltdown CPU bugs affect AMD in addition to Intel?

If a server or or PC is running AMD CPUs, will those be affected by the Spectre and/or Meltdown bugs currently effecting Intel chips? Why or why not? What makes it affect one and not the other? How ...
1 vote
2 answers
531 views

How does the Intel CPU design flaw affect us? [closed]

Today, I saw this in the news. I'm hesitant to install the fix, because I've heard it would slow down IO 50%, which is not acceptable for me. But a guy said that the flaw allows JavaScript in the ...
  • 137
5 votes
1 answer
2k views

Does the main OS run "virtualised" under the ring -1 hypervisor?

After reading this answer which explains that modern CPUs have a ring -1 that is running a hypervisor on the CPU and handles vmenter & stuff, I am wondering: The main operating system, like the ...
  • 153
4 votes
3 answers
697 views

Understanding the scope of Intel hyperthreading errata KBL095

Recently, many motherboards supporting skylake or kabylake, got a uefi update described as cpu microcode security update for a specific Intel errata, described by Intel as : Short Loops Which Use AH/...
  • 1,422
2 votes
1 answer
2k views

Intel Management Engine vulnerabilities in CPUs without vPro

Intel Management Engine (ME) imposes a security risk (see here for example). As I understand ME is a part of Intel vPro. Does having an Intel CPU without vPro support mean ME is not fully functional ...
  • 233
1 vote
0 answers
332 views

Frequent heavy CPU load from firefox browser -> malware? [closed]

Since recently I started to get very heavy CPU load on my 64bit Debian 9.0 Cinnamon machine. I have all my packages up to date including Firefox-ESR. Often the load is so heavy that I can hear my CPU. ...