From owner-freebsd-questions@freebsd.org Fri Feb 2 03:14:45 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C2932EDFF86 for ; Fri, 2 Feb 2018 03:14:45 +0000 (UTC) (envelope-from kremels@kreme.com) Received: from mail.covisp.net (www.covisp.net [65.121.55.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6F255766CE for ; Fri, 2 Feb 2018 03:14:45 +0000 (UTC) (envelope-from kremels@kreme.com) From: "@lbutlr" Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Subject: Re: Response to Meltdown and Spectre Date: Thu, 1 Feb 2018 20:14:42 -0700 References: <23154.11945.856955.523027@jerusalem.litteratus.org> <5A726B60.7040606@gmail.com> <92120E50-19A7-4A44-90DF-505243D77259@kreme.com> To: Freebsd Questions In-Reply-To: Message-Id: X-Mailer: Apple Mail (2.3445.6.9) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Feb 2018 03:14:46 -0000 On 1 Feb 2018, at 16:04, Adam Vande More amvandemore@gmail.com> wrote: >=20 > On Thu, Feb 1, 2018 at 3:48 PM, @lbutlr wrote: >=20 >> the trouble is that AMD's behavior has been at least as bad as = Intel's, if >> not worse, in regards to Meltdown, >>=20 >=20 > Can you explain what provoked this assertion? First, they violated (not technically, but they made it bloody obvious) = the NDA so that the flaw was widely discovered a week early by adding a = comment to a meltdown patch that lead every expert int he field straight = to the vulnerability: "The AMD microarchitecture does not allow memory = references, including speculative references, that access higher = privileged data when running in a lesser privileged mode when that = access would result in a page fault." Second, they initially claimed they were would not release any firmware = because they were entirely immune, which was untrue. They were almost immediately proved to be vulnerable to some of the = flaws. Third, while Intel released (and continues to release) detailed = technical information, AMD released PR statements. Honestly, as bad as Intel has looked in the last month, AMD looks worse = since they'd behaved like children. --=20 Don't be afraid to be weak, Don't be too proud to be strong.