AMD Ryzen and Epyc platforms at risk: More than a dozen critical security flaws discovered

I'm 99.9% sure this is fake news. We need to re-title this.

Hi Steve,

I am trying to chase this from multiple sources and seems like it has been setup as a round robin of miss information.

If you have any more info on it would love to hear your take on it.
 
Hi Steve,

I am trying to chase this from multiple sources and seems like it has been setup as a round robin of miss information.

If you have any more info on it would love to hear your take on it.

Tim will be covering this in a video later today.
 
Our latest revision of this story is now online, we did incorporate some of your concerns in our write up...

These concerns should have been noticed and researched by yourself before publishing this article. If you want to be taken seriously as a reporter of news and events, its makes sense to verify information that appears to be suspect in its integrity.

Instead, you rush the flame-bait article, wait for the rational readers to smell the BS, and then update....? But, by then the initial damage is done, many would have looked at the original article, and dismissed AMD as a potential choice, as they trust the source of the news.
 
According to this: https://www.theregister.co.uk/2018/03/13/amd_flaws_analysis/

... Exploitation requires being able to run a program locally with administrator privileges...

So someone after having hard time breaking into the administrator privileges in the OS goes berserk into hacking further inside the processor. Rather than just sit back and relax while leeching all the user valuable data. Just because he/she can.

OKAY.
 
These concerns should have been noticed and researched by yourself before publishing this article. If you want to be taken seriously as a reporter of news and events, its makes sense to verify information that appears to be suspect in its integrity.

Instead, you rush the flame-bait article, wait for the rational readers to smell the BS, and then update....? But, by then the initial damage is done, many would have looked at the original article, and dismissed AMD as a potential choice, as they trust the source of the news.
Misinformed comment. That would apply if we had done that, but we didn't.
We reported the developing story which was already out and labeled it as such. As we elaborated and got a response from AMD, we updated again within the hour. That comment was simply for readers to let them know we agreed on the funny timing of the announcement.
 
The comments speak volumes. If this was Intel everyone would be hanging them out to dry. It goes to show how a lot of the online community here have a bias towards AMD.

Of course I don’t think it’s real and if it is it’s not something home users need to be concerned about. But if would wait and see what comes to light before claiming it’s bullshit ot whatever.

I find the comments stating that this comes from Intel to be absurd, it’s not worth the bad press and litigation if they got found out. And Intel aren’t actually an evil corporation. Well unless you believe the rantings of AdoredTV and come on, most of us are smarter than that!
 
The comments speak volumes. If this was Intel everyone would be hanging them out to dry. It goes to show how a lot of the online community here have a bias towards AMD.

Of course I don’t think it’s real and if it is it’s not something home users need to be concerned about. But if would wait and see what comes to light before claiming it’s bullshit ot whatever.

I find the comments stating that this comes from Intel to be absurd, it’s not worth the bad press and litigation if they got found out. And Intel aren’t actually an evil corporation. Well unless you believe the rantings of AdoredTV and come on, most of us are smarter than that!
Complete BS from your part. This isn't about being biased about AMD. In fact you should be appalled that something this shady is happening and some people are taking it seriously.
Even if the exploits do indeed exists, it has been stated multiple times in multiple places that this has been blown out of proportion intentionally. You need to have root access, vendor singed drivers and flash the bios? Seriously? It's just a smear campaign no matter how you slice it and it's normal for people to link it to Intel since they benefit the most from it (even if they had nothing to do with this).
 
The comments speak volumes. If this was Intel everyone would be hanging them out to dry. It goes to show how a lot of the online community here have a bias towards AMD.

Of course I don’t think it’s real and if it is it’s not something home users need to be concerned about. But if would wait and see what comes to light before claiming it’s bullshit ot whatever.

I find the comments stating that this comes from Intel to be absurd, it’s not worth the bad press and litigation if they got found out. And Intel aren’t actually an evil corporation. Well unless you believe the rantings of AdoredTV and come on, most of us are smarter than that!

I think you will find that most people were in jest when they said Intel was behind it. Intel is much smarter than that like opening attacking EPYC CPUs as being glued together desktop CPUs. :p

This has been great day to read about the stock manipulation and I suggest everyone look at bitcoin as well, different but much the same.

Haven't had so much fun looking at crazy stuff, I think the press did fairly well reporting it, 12 months ago I think this would have been handled differently.

BTW part of what AdoredTV was on about was the disclaimer around financial influence not being declared.(watched video today), part of these guys downfall..... although it also helps protect themselves from litigation
 
"helps protect themselves from litigation" - probably not
Been up for stupid number of hours but I think it really depends on which country you are in. The fact that they say that it isn't necessarily fact, it is option and declare a vested interest I would expect nothing to happen.

They went after a bank last year as well.

Edit: If they impersonated another company they would be up for fraud but technically as far as I am aware they have done nothing illegal, they published crap and the media ran with it, even if it was only a short period of time.
 
Misinformed comment. That would apply if we had done that, but we didn't.
We reported the developing story which was already out and labeled it as such. As we elaborated and got a response from AMD, we updated again within the hour. That comment was simply for readers to let them know we agreed on the funny timing of the announcement.

And that is why you said the story was updated after several commenters said the story seemed fabricated I some way. You jumped the gun, failed to complete due diligence in your research before publishing, and simply rushed ahead like every other dirt sheet style tech site does.
 
My... my... Oh deary. So many angry AMD partisan's calling for Techspots head. What has techspot done wrong?

Heaven forbid AMD has flaws in their chips. Heck don't forget Spectre is still a real flaw for AMD. To date there is not a good stable reliable fix for Spectre anyways. We all know Intel isn't exactly clean, but a flaw is a flaw. A security flaw is a security flaw. Skewering the messengers, even if Intel helped produce message, isn't going to fix the flaw.

The scale of the flaw may be debated, (at a cursory superficial look level, it seems like it would equivalen to the Intel ME flaws), but that does NOT make the flaw go away. Nah but we are going to hate on Intel and Techspot because they do NOT worship AMD. Yep exactly that.
 
Heaven forbid AMD has flaws in their chips. Heck don't forget Spectre is still a real flaw for AMD. To date there is not a good stable reliable fix for Spectre anyways. We all know Intel isn't exactly clean, but a flaw is a flaw. A security flaw is a security flaw. Skewering the messengers, even if Intel helped produce message, isn't going to fix the flaw.

For today there is no proof of concept of Spectre 2 variant for Ryzen CPU.
 
For today there is no proof of concept of Spectre 2 variant for Ryzen CPU.
So much fail for logic. The absence of evidence is totally NOT the evidence of absence.

You just wait and some troublesome hacker, be it state sponsored agencies like NSA, the Russians, Chinese, etc. or heck the script kiddies will find that proof for you.

These side channel attacks were discussed with research paper, white papers written dating back to before 1995. It is only a matter of time before it gets figured out. The spectre attacks in essence is the fruition of 25+ years of research and persistence. The only truth is that any static defense will eventually be defeated. Anyone that thinks their rock that they are hiding behind is more solid than the next guy, is dumb as a rock.
 
So much fail for logic. The absence of evidence is totally NOT the evidence of absence.

You just wait and some troublesome hacker, be it state sponsored agencies like NSA, the Russians, Chinese, etc. or heck the script kiddies will find that proof for you.

These side channel attacks were discussed with research paper, white papers written dating back to before 1995. It is only a matter of time before it gets figured out. The spectre attacks in essence is the fruition of 25+ years of research and persistence. The only truth is that any static defense will eventually be defeated. Anyone that thinks their rock that they are hiding behind is more solid than the next guy, is dumb as a rock.

These? Meltdown also uses side channel attack discussed long time ago. Still AMD CPU's are immune to it while Intel's are not.

So until there is POC of Spectre 2 for AMD, there is no reason to believe AMD is vulnerable.
 
Back