Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 4 Feb 2018 04:15:23 -0700
From:      "@lbutlr" <kremels@kreme.com>
To:        Freebsd Questions <freebsd-questions@freebsd.org>
Subject:   Re: Response to Meltdown and Spectre
Message-ID:  <DDBDE0D2-C012-4E1D-A877-A62A945ABFCB@kreme.com>
In-Reply-To: <044e62f7-69ca-71fe-34a8-5c5cafc06f08@yahoo.com>
References:  <CY1PR01MB12472D916F78A638731ECCE68FFB0@CY1PR01MB1247.prod.exchangelabs.com> <23154.11945.856955.523027@jerusalem.litteratus.org> <5A726B60.7040606@gmail.com> <92120E50-19A7-4A44-90DF-505243D77259@kreme.com> <CA%2BtpaK2o1nbY2W2JVRtogN=P2VM9rag_dodK=GtLWgKwNsYZkg@mail.gmail.com> <F395799E-2C94-47E9-AA1C-5CB075C50076@kreme.com> <044e62f7-69ca-71fe-34a8-5c5cafc06f08@yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2018-02-02 (04:18 MST), Paul Pathiakis via freebsd-questions =
<freebsd-questions@freebsd.org> wrote:
>=20
> On 02/01/2018 22:14, @lbutlr wrote:
>> On 1 Feb 2018, at 16:04, Adam Vande More amvandemore@gmail.com> =
wrote:
>>> On Thu, Feb 1, 2018 at 3:48 PM, @lbutlr <kremels@kreme.com> wrote:
>>>=20
>>>> the trouble is that AMD's behavior has been at least as bad as =
Intel's, if
>>>> not worse, in regards to Meltdown,
>>>>=20
>>> Can you explain what provoked this assertion?
>> First, they violated (not technically, but they made it bloody =
obvious) the NDA so that the flaw was widely discovered a week early by =
adding a comment to a meltdown patch that lead every expert int he field =
straight to the vulnerability: "The AMD microarchitecture does not allow =
memory references, including speculative references, that access higher =
privileged data when running in a lesser privileged mode when that =
access would result in a page fault."
>>=20
>> Second, they initially claimed they were would not release any =
firmware because they were entirely immune, which was untrue.
>>=20
>> They were almost immediately proved to be vulnerable to some of the =
flaws.
>>=20
>> Third, while Intel released (and continues to release) detailed =
technical information, AMD released PR statements.
>>=20
>> Honestly, as bad as Intel has looked in the last month, AMD looks =
worse since they'd behaved like children.
>>=20
> This is the exact opposite of what I have seen/read.  What NDA is =
this?

Really?

>  "A week early"?  Again, this was found out about in June of last year =
to affect intel architecture.  A flaw that existed for over 10, if not =
20 years.  They did not release the information, Google researchers and =
other independents did....

I included the comment that AMD made in code to mitigate Meltdown that =
was so obvious that it led multiple teams of people to figure out what =
the problem was before the planned release of mitigation.

AMD claimed they were immune or nearly immune to Meltdown AND Spectre. =
This is not true, they are vulnerable to Spectre and eventually admitted =
it.

--=20
"Last night - you were unhinged. You were like some desperate, howling
demon. You frightened me. - Do it again!"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?DDBDE0D2-C012-4E1D-A877-A62A945ABFCB>