Slashdot Mirror


Intel Hit With Three Class-Action Lawsuits Over Meltdown and Spectre Bugs (theguardian.com)

An anonymous reader quotes a report from The Guardian: Intel has been hit with at least three class-action lawsuits over the major processor vulnerabilities revealed this week. Three separate class-action lawsuits have been filed by plaintiffs in California, Oregon and Indiana seeking compensation, with more expected. All three cite the security vulnerability and Intel's delay in public disclosure from when it was first notified by researchers of the flaws in June. Intel said in a statement it "can confirm it is aware of the class actions but as these proceedings are ongoing, it would be inappropriate to comment." The plaintiffs also cite the alleged computer slowdown that will be caused by the fixes needed to address the security concerns, which Intel disputes is a major factor. "Contrary to some reports, any performance impacts are workload-dependent, and, for the average computer user, should not be significant and will be mitigated over time," Intel said in an earlier statement.

220 comments

  1. God bless America!! by Anonymous Coward · · Score: 0

    NT

    1. Re:God bless America!! by jfdavis668 · · Score: 1

      Yes, we will all need to go back to Windows NT

    2. Re:God bless America!! by Anonymous Coward · · Score: 0

      If I wanted to run VMS, I'd dig in the parts bin for my old Alpha boxes. I may still have one.

      * http://www.itprotoday.com/management-mobility/windows-nt-and-vms-rest-story

    3. Re:God bless America!! by ArtemaOne · · Score: 0

      Most operating systems after NT 3.5 are still based on it. NT 4.0, NT 5.0 (2000), NT 5.1 (Vista), and it continued through 7, 8, 10. We're all still using NT.

    4. Re:God bless America!! by Sir+Lurkalot · · Score: 1

      Speak for yourself, you insensitive clod!
      UNIX!
      Live Free Or Die!

    5. Re:God bless America!! by Anonymous Coward · · Score: 0

      I want to know how to get in on these lawsuits. In the past 23 years, I have bought many computers with Intel CPUs and I would like Intel to compensate me for them. I'll settle for a brand new, high-end computer with an AMD processor.

    6. Re:God bless America!! by Hal_Porter · · Score: 1

      Interesting article. Dave Cutler is a genius - even if NT never managed to beat Unix on big iron hardware I think the idea of designing from the ground up to run well on SMP and non x86 was a very foresighted one given it was made in 1993.

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    7. Re: God bless America!! by Anonymous Coward · · Score: 0

      Me me me!!! It's all about ME! The rally cry of socialists across the land.

    8. Re: God bless America!! by Archtech · · Score: 5, Insightful

      You seem to have a design fault: an extra inverter somewhere.

      Socialism is concerned with other people and how a community can be run in the interests of all its members. In practice, there is no other way for humans to live decently. Among others, it was warmly recommended by Jesus Christ.

      The people who cry "Me me me!!! It's all about ME!" are rabid ultra-capitalists - as represented, I take it, by the Republican Party. Unfortunately, the Democratic Party has chosen to be a carbon copy of the Republicans rather than an alternative.

      --
      I am sure that there are many other solipsists out there.
    9. Re: God bless America!! by Anonymous Coward · · Score: 0

      Yes, me, me, me. I'm so selfish for giving Intel tens of thousands of dollars for faulty hardware sold under false pretences...

      Go shill elsewhere, Intel fanboi.

    10. Re:God bless America!! by ELCouz · · Score: 1

      I wonder how much code it originally share thought. Security wise NT was better than any DOS based platform (WIN3.1,95,98,ME) but far away from today standards.

    11. Re:God bless America!! by DontBeAMoran · · Score: 1

      Yeah! macOS forever!

      --
      #DeleteFacebook
    12. Re: God bless America!! by DontBeAMoran · · Score: 1

      ME! ME! ME! (probably NSFW, unless you do drugs)

      --
      #DeleteFacebook
    13. Re:God bless America!! by SScorpio · · Score: 1

      5.1 was XP, and 5.2 is 64-bit XP/Server 2003.

      Vista was 6.0, 7 - 6.1, 8 - 6.2, 8.1 - 6.3

      Then 10 was 10.0, of course, it's pretty much just 6.4 though.

      https://en.wikipedia.org/wiki/Windows_nt

    14. Re: God bless America!! by Anonymous Coward · · Score: 0

      Socialism is concerned with enslaving people and taking the fruits of one's labor and giving it to others he doesn't even know and depriving that man's family and friends and his personal choice.

    15. Re: God bless America!! by iggymanz · · Score: 0

      Jesus did not advocate helping the lazy and parasites on society, only those in dire need who could not help themselves. he did not advocate a government taking on such a role either to be the benefactor, only individuals. From the heart by individual choice, not from taxation and redistribution of wealth.

    16. Re: God bless America!! by Anonymous Coward · · Score: 0

      > Among others, it was warmly recommended by Jesus Christ.

      It looks like they had quite a few problems with the implementation when I read Acts 5. There's also the "he who does not work shall not eat" verse.

    17. Re: God bless America!! by HiThere · · Score: 1

      I don't have an answer, but the problem with Socialism is the concentration of power, so that someone gets to decide what is best for everyone else. Unfortunately, every other form of government seems to have the same flaw. And anarchy leads to war-lordism, which has the same problem.

      An ideal situation would be a Socialist dictatorship of some variety where the entity controlling it was guaranteed to not be an over-controlling interfering busy-body. But that lets out every human controlled government, and we don't yet have a capable AI, much less one with the proper motivations.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    18. Re: God bless America!! by xtronics · · Score: 1

      Of course socialism is obviously a form of capitalism. For the record - Capitalism is where people pool their capital in order to do projects they can't do on their own. The same pooling of capital happens with socialism. The difference between socialism and capitalism is one is FORCED to participate under socialism - one has the freedom not to take part under capitalism - at least in free countries.

      The biblical form of cooperation was also voluntary.

      Both systems can be corrupt. And neither of them works well with out free enterprise.

      The idea that there is a meaningful difference between the major parties is usually a symptom of falling for a false dilemma - you are either with them or against them. Both parties are part of a cartel-socialist system - bought by fortune 500 cartels to prevent competing with smaller companies. (you might look in to how many finish their careers in congress with multi millions they got from special investment opportunities - influence peddling) .What is missing is a level playing field - free enterprise.

      The focus on the idea that the battle of the common man is between the Ds and the Rs is a way to keep you from seeing the greater corruption.

    19. Re:God bless America!! by jimbo · · Score: 1

      I don't think any code was copied but Microsoft did hire the principal architect and 20 former VMS engineers to get the NT code into shape...

    20. Re: God bless America!! by Anonymous Coward · · Score: 0

      That applies to capitalism too really.

    21. Re: God bless America!! by Anonymous Coward · · Score: 0

      Free market, lul.

    22. Re: God bless America!! by Anonymous Coward · · Score: 0

      Jesus did not advocate helping the lazy and parasites on society, only those in dire need who could not help themselves.

      Oh yes, good old "share cost, privatize profit" you seems so keen to condemn.

      Your fake god is all for minamata disease. I hope the real Jesus finds a path to your heart.

    23. Re: God bless America!! by Anonymous Coward · · Score: 0

      So Jesus wasn't a republican? Got it.

    24. Re: God bless America!! by Anonymous Coward · · Score: 0

      My job is being a drug dealer, you insensitive clod.

    25. Re: God bless America!! by iggymanz · · Score: 1

      yes private ownership and wealth with the choice of what to do with it is in the Bible; if you don't like that find another religion.

      of course, mythical person who didn't exist in history isn't a god nor will find path to anyone's heart.

    26. Re: God bless America!! by dryeo · · Score: 1

      Well, there was exactly one person who was promised to go to heaven, and he was a lazy thieving parasite.

      --
      https://en.wikipedia.org/wiki/Inverted_totalitarianism
    27. Re: God bless America!! by Anonymous Coward · · Score: 0

      So the US is socialist. It is about time!

      Free enterprise is why we have terrible pollution, why our food is filled with poison and why Intel are little shitheels.

    28. Re: God bless America!! by DontBeAMoran · · Score: 1

      Then I hope you enjoyed the video!

      --
      #DeleteFacebook
    29. Re: God bless America!! by Anonymous Coward · · Score: 0

      What a child-like, black and white understanding you have of the world. People don't only fall into your limited categorisation scheme, little boy.

    30. Re: God bless America!! by Anonymous Coward · · Score: 0

      I heard Itanium is so old and shit that it isnâ(TM)t affected? HPUX 11iv3 FTW!

    31. Re: God bless America!! by Jesus+H+Rolle · · Score: 1

      Jesus warmly advocated for generosity and support of the poor; but Paul offered the "no working, no eating" clarity to make it clear that contributions are expected from everyone (which is nicely handled in a free market system).

      Paul was a conman who hijacked the nascent communal Jesus social movement. This is why New Testament doctrinal inconsistencies are generally between Jesus and Paul. Apologists try to harmonize them, but too many are flat-out contradictions.

    32. Re: God bless America!! by Anonymous Coward · · Score: 0

      He also said the rich could never enter heaven. He wasn't saying, hey, tip a homeless man and that will make owning more than one house O.K. He was saying the wealthy need to keep giving and giving until they are no longer wealthier than everyone else. Sounds socialist to me.

    33. Re: God bless America!! by Anonymous Coward · · Score: 0

      Spot on, and about taxation Jesus said "give to Caesar what belongs to Caesar..." meaning exactly that a good christian must pay his fair share of taxes...

  2. Naturally.. by Junta · · Score: 4, Insightful

    This is an obvious outcome. It's worth keeping in mind that filing a suit does not vindicate or disprove anyone, as there's no way to ascertain whether there will be merit in the suit at this point. All it means is there's enough lawyers willing to make a wager when faced with such a *huge* potential payout.

    --
    XML is like violence. If it doesn't solve the problem, use more.
    1. Re: Naturally.. by Anonymous Coward · · Score: 0

      Yeah, except Europeans had failed to produce anything at all so it will basically push us into the hands of the red Chinese.

    2. Re:Naturally.. by rtb61 · · Score: 1

      Intel are double big time fucked and make no mistake. They were aware of the fault and continued to distribute product without informing the customer of that quite serious fault. Probably because the CIA/NSA were ruthlessly exploiting that fault for all that is was worth, now it comes time to pay the piper, Intel are fucked, globally majorly FUCKED. They are liable for every CPU sold when they were aware of that fault and did not notify the customer. The biggest worry, any hacks that can be attributed to the fault makes them criminally negligent, youch, custodial sentence time. The second they became aware of the fault, they should have halted CPU sales and fixed the problem, the security ramifications, makes them criminally negligent if that fault was exploited once discovered. Which is why the CEO sold shares, the civil liability for that fault, the global civil liability.

      --
      Chaos - everything, everywhere, everywhen
    3. Re:Naturally.. by Anonymous Coward · · Score: 0

      If this has been going on for a long time, and if it was indeed nefarious, how on earth can anyone reasonably argue that its not bizarre that someone, somewhere, knew this and didnt talk about it / leak it / mention it, whatever. Its mind boggling to me that something like this could be kept under wraps for decades. Thus, by Occams Razor I'm not buying that this was done as some kind of malicious plan

  3. Intel ME by Anonymous Coward · · Score: 2, Interesting

    ...while nobody's suing them for their Management Engine garbage. The two bugs may or may not be intentional, but the Intel Management Engine is absolutely intentional and cannot be disabled.

    Of course nothing will ever come out of these lawsuits other than the lawyers getting richer.

    1. Re:Intel ME by Hal_Porter · · Score: 2, Funny

      Of course nothing will ever come out of these lawsuits other than the lawyers getting richer.

      Shut up! We're all going to get free replacement i5s and i7s with the bug fixed! I want to believe!

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    2. Re:Intel ME by WhoBeDaPlaya · · Score: 1

      Yeah, I'm sure Intel has a truckload of Ryzen + mobos ready to ship out to affected customers ;)

    3. Re:Intel ME by Hal_Porter · · Score: 1

      Don't say that. They'll disable speculative execution completely via a microcode update if we're rude about them.

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    4. Re:Intel ME by DivineKnight · · Score: 1

      That's because their Management Engine, while anti-customer, does work as intended. Their CPUs, on the other hand...

    5. Re:Intel ME by Anonymous Coward · · Score: 0

      they actually have a truckload of CPUs with AMD chips on them. but only GPU's! The CPU part is still intel

    6. Re:Intel ME by Anonymous Coward · · Score: 0

      Many ASUS motherboards have a physical jumper on the board to disable ME... and this is on boards before anyone cared about the security problems.

      Also, many of their end-user boards have already had beta patches released for Spectre, within days. Hmmm... I'm thinking my next board will be ASUS. In fact I may replace the Supermicro xeon server board I just bought 4 days ago with an ASUS board. I'm willing to waste $400 to buy from someone who actually cares about security.

    7. Re:Intel ME by Anonymous Coward · · Score: 0

      Too bad ASUS support is total dogshit. mobos are the only thing ASUS makes that isn't crap.

      I would rather buy a slighter lesser board from a solid company with great CS like EVGA.

    8. Re:Intel ME by poofmeisterp · · Score: 1



      <quote><p>Of course nothing will ever come out of these lawsuits other than the lawyers getting richer.</p></quote>

      <p>Shut up! We're all going to get free replacement i5s and i7s with the bug fixed! I want to believe!</p></quote>

      Can I have some of the substance that inspired that belief? I want it!!! ;)

    9. Re:Intel ME by Hal_Porter · · Score: 1

      Something is up with your formatting, dude.

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    10. Re:Intel ME by poofmeisterp · · Score: 1

      Something is up with your formatting, dude.

      Thanks for pointing that out. It was set to Extrans for one comment and not set back. Appreciate you telling me!

  4. Stop buying Intel chips. by Gravis+Zero · · Score: 4, Interesting

    If you just look at Intel's legal history, you'll see they have been mired in accusations and convictions of unethical and anti-competitive business practices since the early 1980s. Buying from Intel has always been a devil's bargain, it's just now that you are realizing what you have done because it's directly affecting you.

    --
    Anons need not reply. Questions end with a question mark.
    1. Re: Stop buying Intel chips. by Anonymous Coward · · Score: 0

      Support Open Processor architectures from J-Core.org and RISCV.org

      Alternatives to ARM and x86. Freedom extends to hardware also.

    2. Re:Stop buying Intel chips. by Anonymous Coward · · Score: 0

      I've avoided Intel and bought AMD since the late 80s when they sued AMD (and lost) trying to stop AMD from produced x86 compatible CPUs.

    3. Re:Stop buying Intel chips. by Anonymous Coward · · Score: 0

      it's just now that you are realizing what you have done because it's directly affecting you

      Uhh, yeah, that's pretty much how things in life work. Everyone has done something shitty to someone. It's all a matter of whether they have done something shitty to you.

      Great to see that as a middle-aged man you finally worked that out. Way to go.

    4. Re:Stop buying Intel chips. by Archtech · · Score: 2

      "Power tends to corrupt and absolute power corrupts absolutely". - Lord Acton, 1887

      A corporation like Intel represents a very great concentration of power. It has enormous wealth, and controls not only the working lives of all its employees but the computing abilities of all its customers, and their customers all the way downstream.

      In a near-monoculture of Microsoft-on-Intel, any serious defects such as Meltdown and Spectre are inevitably inflicted on millions of individuals, corporations and governments, as there is little choice of supplier and most will go for the cheapest and most popular.

      --
      I am sure that there are many other solipsists out there.
    5. Re:Stop buying Intel chips. by Anonymous Coward · · Score: 0

      "All governments suffer a recurring problem: Power attracts pathological personalities. It is not that power corrupts but that it is magnetic to the corruptible. Such people have a tendency to become drunk on violence, a condition to which they are quickly addicted."

      --Missionaria Protectiva, Text QIV (decto) (Frank Herbert, Chapterhouse: Dune, 1985)

    6. Re:Stop buying Intel chips. by Gravis+Zero · · Score: 1

      Intel didn't get corrupted, they started corrupted and used that corruption to get power.

      --
      Anons need not reply. Questions end with a question mark.
    7. Re: Stop buying Intel chips. by DontBeAMoran · · Score: 1

      Sure. As soon as Final Fantasy XIV can run on either of those.

      --
      #DeleteFacebook
    8. Re:Stop buying Intel chips. by iggymanz · · Score: 1

      uh, more than Intel's chips have similar vulnerabilities.

    9. Re:Stop buying Intel chips. by iggymanz · · Score: 1

      nonsense, AMD has protection/separation issues too, as does some of the ARM.

      I expect the other big player's chips will have the problem too

    10. Re:Stop buying Intel chips. by HiThere · · Score: 1

      He almost got it right, and he would have gotten it right if he hadn't needed to fit it into the storyline.

      All positions of power have the tendency to attract those who are more interested in the power than in doing the job those positions were (sometimes only ostensibly) created to fulfill.

      And that is an oversimplified version, e.g. even those who are more interested in the job are also tempted to exercise the power for personal ends, and *that* becomes addictive.

      And the ability to exercise violence without repercussions is a way of demonstrating the degree of power available.

      There are lots of side notes and corollaries. Herbert clearly understood the principles, but the story line constrained what he could say and how he could say it. The quotations needed to be short and grabbing, where the actual detailed workings of them would be *boring*.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    11. Re:Stop buying Intel chips. by HiThere · · Score: 2

      Every chip that has speculative execution has the Spectre problem. The Meltdown problem is because the Intel chips execute code that they could know is invalid rather than detecting that it's invalid before they execute it. AFAIK, nobody but Intel has that problem.

      OTOH, the entire family of weaknesses means that EVERYBODY is going to need to redesign their chips. So far Spectre hasn't been shown to be usable in a way that breaks protection, but I think everyone believes it's only a matter of time.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    12. Re: Stop buying Intel chips. by Anonymous Coward · · Score: 0

      I thought that game was dead?

      Why do people insist on playing a game that has you doing the same dungeons and raids over and over again just to get credits to buy some gear. Then once you get the gear, guess what? A new exapsion comes out and now we have more raids for you to grind to get that gear. It is world of Warcraft 2.0.

      Is the PVP aspect any good? When I played they didn't have PVP yet. I played starting from alpha/beta and stopped like 3 or 4 months before the first expansion.

      It's a never ending circle jerk. The final fantasy 14 story was decent, but after i beat the game and all the dungeons/bosses, I found myself fighting just grinding for gear. Looking for pUG groups or company groups to do the same content over and over and over and over again.

      To each his own I guess. My only question is doesn't it get boring? It did for me quickly. But I guess anecdotes are like assholes...everybody has one.

      I feel the same way about most free to play games that try to get you to buy IAP. Scam city.

    13. Re: Stop buying Intel chips. by Anonymous Coward · · Score: 0

      Because most people aren't neurotic and actually have friends to play with

    14. Re:Stop buying Intel chips. by iggymanz · · Score: 1

      no, it would be possible to have speculative execution without this problem by hardware dedicated to clearing caches. Power8 might not have this problem, have to wait for reports

    15. Re:Stop buying Intel chips. by Anonymous Coward · · Score: 0

      I think he intended them to be exercises left to the reader. I remember sometimes spending more time thinking about the chapter quotations than reading the chapters themselves.

    16. Re: Stop buying Intel chips. by DontBeAMoran · · Score: 1

      I saw an arena of some kind where people were fighting, but really if you want PvP go play WoW on a PvP server. Or, you know, an actual first-person shooter game.

      FF XIV is first and foremost a RPG game to play with friends.

      --
      #DeleteFacebook
    17. Re:Stop buying Intel chips. by iggymanz · · Score: 1

      update power7 and power8 have this problem as do the IBM Z series processors which are related. Itanium claimed not to have problem.

    18. Re:Stop buying Intel chips. by Anonymous Coward · · Score: 0

      While I like that quote, I heard one that I think is maybe better (pretty sure it was posted on /.)

      I think it was in Dune. it reads (roughly):
      “its not that power corrupts, but rather that power is a magnet for the corruptible”.

  5. This Will Go Nowhere by alternative_right · · Score: 5, Insightful

    Court: "OK, so your chip turned out to have a flaw, the company took extra time to investigate, and now your computer is slower sometimes. How is that different than the average Microsoft or Apple update?"

    Intel's lawyers will delay this until the hype is forgotten, and either kill it in court or settle for some absurdly low sum, so that all of the plaintiffs get checks for $0.64 if they remember to sign up at IntelProcessorSlowdownLawsuit.com before December 31, 2019.

    1. Re:This Will Go Nowhere by WankerWeasel · · Score: 2

      Remember that there's zero requirement to upgrade. The processor still performs as originally claimed. It's only if they choose to be secure that they may see a performance hit. There was never any guarantee that there'd be no security issues or that performance would be as advertised always no matter what patching was applied.

    2. Re:This Will Go Nowhere by Zuriel · · Score: 4, Interesting

      As I understand it, it's not the cheating, it's sloppy cheating that's the problem. If they did a privilege check like AMD claims to then speculation in a user process couldn't lead to fetching kernel data into the cache. Zeroing the unnecessarily fetched data after speculation would mean it wasn't left sitting in the cache. Intel could have done either of these things, probably with no real performance penalty but they didn't think to.

      If you want a CPU that doesn't 'cheat', go get yourself a 2011 Intel Atom. They run like ass. Have fun.

    3. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      Oh wow, Im so lucky to still have that Eee pc 901 in perfect working order.

      It was slow when I got it brand new...slow as hell now!

    4. Re:This Will Go Nowhere by Zocalo · · Score: 4, Interesting

      Actually, it's kind of in the middle. The problem isn't really that Intel tried to take a shortcut and boost performance with speculative execution, it's that they tried to take too big a shortcut and dropped some (all?) of the bounds checking as well. Since bounds checking provides security, and they must know this, they basically took a design decision to roll the dice with potential security flaws in exchange for a couple of extra perforance points and, potentially, a slightly simpler design.

      The current approach is to do any bounds checking *after* the speculative execution in the event that the branch is to be executed, which is what enables the kernel memory to be leaked to userspace programmes. The secure way of doing it would be to do the bounds checking *during* the speculative execution, just as you would with normal execution, and in the event of a page fault fall back to the non-speculative execution approach. That would still be slightly slower, but not as bad as forcing the non-speculative execution approach every time, which is what the patches have now enforced.

      It's a deliberate design decision, they should have known what the risks were, and there are a growing number of real world instances of applications showing repeatable ~30% performance hits directly attributable to the "fixes" (I've seen one myself firsthand that resulting in a public transport time tabling system failing). It might not work out so lucrative for an individual John Q. Public in a class action lawsuit, but it's starting to look quite likely that Intel is going to get reamed in the courts over this if they can't come up with a better workaround P.D.Q.

      --
      UNIX? They're not even circumcised! Savages!
    5. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      lucky me, still have running one of that Intel Atom crap as router ;-) https://t2sde.org/hardware/workstation/Intel/D945GCLF2/

    6. Re:This Will Go Nowhere by AmiMoJo · · Score: 1, Funny

      They run like ass.

      Buddy, there's a pill for that.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    7. Re:This Will Go Nowhere by mikael · · Score: 4, Informative

      They did do bounds tests. That generates exceptions, but a thread or process can catch those exceptions and ignore them, Because the CPU is pipelined, and different instruction sub-tasks take different amounts of time, it's more efficient to assume reads will be successful and to start those sub-tasks that take the longest time first. A memory fetch from off-CPU memory chips takes way longer than a bounds check. So it's better off sending out the request to load that memory location into cache on the chance that it will be a valid address, then do the bounds test to generate an exception, then roll back the speculative state if an error occurs. But the state of the cache wasn't rolled back. So some data values were evicted to make way for the new data. Those could be read back.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    8. Re:This Will Go Nowhere by Wrath0fb0b · · Score: 4, Insightful

      It's not sloppy cheating, it's following the machine model. The way we all understood this 3 weeks ago is that speculative execution can have no visible side effects on the program-observable state of registers/memory. Now we've changed the model to extend the idea that speculative execution across privilege boundaries must also not have any observable side-channels.

      This really is a change to the x86 machine model.

    9. Re:This Will Go Nowhere by Antique+Geekmeister · · Score: 1

      Thank you for the more thoughtful analysis. This wasn't a subtlety that would be apparent to an analyst focused on a particular task: it took a broader view of the flow of data, one that would not show up for a developer or tester focused on one specific task or feature. It's part of a class of flaws that can occur when developers and designers focus on one very particular task without being encouraged, or permitted, to examine related behavior.

      It's also a firm reminder of various principles. One is that security costs. In this case, it costs performance: the checks or flushes to avoid sharing the results of pre-execution themselves cost cycles and resources. Another is that parallel execution also adds costs, because now this "pre-execution" is shown to require "post-execution" steps to protect data that was in the pre-execution, and that the typical programmer has no reason to suspect was ever stored elsewhere. It's invisible to their code.

    10. Re:This Will Go Nowhere by interkin3tic · · Score: 1

      They knew about this over a year ago: Intel shipped CPUs that had the problem without telling customers.

      That's a bit different IMHO. But TBH IANAL.

    11. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      To clarify: Meltdown works by having more speculative commands coming after the fetch sneak the data out through side-channel attacks before the value is wiped from the CPU when either the privilege check finally detects the violation or the speculative engine determines it should have gone down a different code path. The fetched data doesn't have to stick around in the cache to be grabbed by the attacker, so zeroing the cache line it was fetched into once the privilege violation is detected won't stop Meltdown. Doing the privilege check earlier like AMD chips do would still be a good hardware level fix for Meltdown, but won't fix the Spectre vulnerabilities.

    12. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      You are not just stupid and ignorant. You are dangerously stupid and ignorant.

    13. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      Remember that there's zero requirement to upgrade. The processor still performs as originally claimed. It's only if they choose to be secure that they may see a performance hit. There was never any guarantee that there'd be no security issues or that performance would be as advertised always no matter what patching was applied.

      thank you Intel spokeswoman, i should have (captcha) EXPECTED this from you

    14. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      Seriously? This level of ignorance should not be tolerated on slashdot.

    15. Re:This Will Go Nowhere by Archtech · · Score: 1

      "How is that different than the average Microsoft or Apple update?"

      If the update referred to really slows down the computer's execution speed, why would that be so? It can hardly be explained as a necessary or desirable improvement, can it? If it slows down the computer in exchange for some very desirable new feature, then customers should be given the option of accepting or declining it.

      If it slows down the computer in order to fix a catastrophic security weakness that should never have been there in the first place, that is unacceptable.

      It's like a car manufacturer selling you a car with an advertised top speed of 120 mph and fuel economy of 50 mpg - and then someone else discovering that, due to some weakness, the car is liable to explode unless changes are made that will reduce performance to 70 mph and 35 mpg. Would that be OK?

      --
      I am sure that there are many other solipsists out there.
    16. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      No pill can fix the anal ruptures caused by socialism.

    17. Re:This Will Go Nowhere by Archtech · · Score: 1

      Funny how cheating... always comes back to bite you in the ass.

      Only in this case it hasn't bitten Intel in the ass. It's bitten Intel's loyal customers in the ass... hard. And they are being told to shut up and bite on it.

      --
      I am sure that there are many other solipsists out there.
    18. Re:This Will Go Nowhere by epyT-R · · Score: 1

      Well linux provides a toggle for the fix. AFAIK, windows does not.

    19. Re:This Will Go Nowhere by DontBeAMoran · · Score: 4, Funny

      Well, there's always the quad-core Atom, which runs like four asses.

      --
      #DeleteFacebook
    20. Re: This Will Go Nowhere by Anonymous Coward · · Score: 0

      The patches do not disable speculative execution by the processor. The patches do change the way the kernel maps memory for all processes and could hurt context switching performance.

      Personally, I only learned that many kernels now map all or most physical memory for every process after reading about this attack. Itâ(TM)s new to 64-bit systems, and it makes sense but I never read about it till now.

      I donâ(TM)t like how Intel is being blamed entirely for a bad security vs performance decision when kernels map memory that processes arenâ(TM)t allowed to read anyway. Itâ(TM)s in the same realm of âoewe should be able to do that for performance because a security layer further down saves us.â That security layer still does everything itâ(TM)s expected to, itâ(TM)s not technically broken here...

      The only way data actually LEAKS to the attacker here is by cache timing attacks, if you want to address all possible cache timing attacks instead of individual cases like this than itâ(TM)s not just Intelâ(TM)s problem and itâ(TM)s a huge problem to solve.

    21. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      But quad core Atoms are post-2011 (first ones were released around autumn 2013 I think), and they have out-of order and speculative execution, hence they're vulnerable to Spectre if not Meltdown.

    22. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      and the linux patch ironically will slow it down even more, despite it not being vulnerable!

    23. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      Absolutely not. You're making up history. And a lot of fanboys or PR flacks are agreeing with you.

      The way we all understood it 3 weeks ago is that the x86 machine model did not allow user code to read the content of protected kernel memory, end of. Because that's the whole point. Speculative execution or not. Caching or not.

      Kindly point to the Intel document that says that speculative execution may allow _any_ program to do just that.

    24. Re: This Will Go Nowhere by misnohmer · · Score: 1

      Even with the privilege check they would still be susceptible to Spectre, so what in your opinion should they have known and done for that? There is an industry wide debate still by the way as to how to solve that. "They should have known" is such a Monday night quarterback thing to say. Cache timing attack is very close to a side channel attack, and sadly those are a cat and mouse game, as more clever people find side channel attacks those and closed and then new one get found - lather, rinse, repeat...

    25. Re:This Will Go Nowhere by sjames · · Score: 1

      Exactly this. The "cheating" is fine as long as the ultimate machine state is truly indistinguishable from what it would be without cheating from the viewpoint of the executing code. Meltdown is a case where that does not hold true, and even worse, can be forced reliably.

    26. Re:This Will Go Nowhere by sjames · · Score: 1

      It does not. It was originally claimed that the memory protection was complete. It is obviously not.

    27. Re:This Will Go Nowhere by Wrath0fb0b · · Score: 1

      User code cannot read the content of protected kernel memory. If it does, the chip will raise the appropriate signal as defined by the ISA. Neither Spectre nor Meltdown change that. What they do is show that user code can create measurable effects on the state of the L2 cache based on the state of arbitrary memory. Those are two very different statements.

      Finally, the Intel documentation is about what's guarantee by the chip -- specifically, that if speculative execution takes a 'wrong path', then the results are never visible in registers/memory. In other words, the chip guarantees that the code running on the CPU has the same result as in the abstract machine model (note, this is the same guarantee that OOO makes: that the program runs as if it was run in the order specified, not that it will be run in the order specified).

    28. Re:This Will Go Nowhere by Anonymous Coward · · Score: 0

      Delay for 5 years, offer to replace the affected chip with one of similar performance.
      Given that in 5 years time, that'll mean replacing an i7 with an i3/i5 of the day (and anyone who cares enough to shell out for an i7 probably gives zero fucks about an i3) and anything lower with a Celeron, very few people will bother.

      That, and a $25m to the opposing lawyers, job done. Some vague and slightly contrite sounding press release maybe if people still care.

    29. Re:This Will Go Nowhere by Agripa · · Score: 1

      The current approach is to do any bounds checking *after* the speculative execution in the event that the branch is to be executed, which is what enables the kernel memory to be leaked to userspace programmes. The secure way of doing it would be to do the bounds checking *during* the speculative execution, just as you would with normal execution, and in the event of a page fault fall back to the non-speculative execution approach. That would still be slightly slower, but not as bad as forcing the non-speculative execution approach every time, which is what the patches have now enforced.

      Since visible faults must be generated at instruction retirement, the option is not to check at the start of speculation or at retirement but to check at retirement or at both. So checking during speculation is extra work that Intel elected not to perform but as it ends up, doing so is very important to prevent side channel attacks.

  6. Bloody idiots by gnasher719 · · Score: 4, Insightful

    If Intel had disclosed that as soon as they knew, with no fix known or available, _that's_ when you would have a reason to sue them. My Mac got mostly protected some time in December. If Intel had disclosed this, there would have been 5 months open to hackers to attack me.

    1. Re:Bloody idiots by hcs_$reboot · · Score: 3, Insightful

      This is not how it worked. Intel has been aware for quite a long time, a year or more probably. Google found the problem in June, and vendors were made aware around that time. If it wasn't for Google, the issues would probably still be kept secret by Intel (until a hacker or another country find and take advantage of the vulnerability). Intel should have informed vendors a long time ago, like Google did, without of course making the issue a public story until a fix is installed. But Intel admitting the flaw would have triggered many compensation requests. This is one reason why the class action makes sense.

      --
      Slashdot, fix the reply notifications... You won't get away with it...
    2. Re:Bloody idiots by Anonymous Coward · · Score: 0

      And you know all of this, how?

    3. Re:Bloody idiots by Zocalo · · Score: 1

      Whether Intel knew about it before Google told them is an interesting point, and almost certainly one that will come up when (not if!) this sees the inside of a courtroom. If they knew, or even suspected, there was a potential exploit they could have silently fixed it in future CPU designs and hoped for the best. Given the timescales involved with a chip design, and the costs of fixing flaws later in the process, it's going to be quite telling to see when Intel manages to get a CPU that is immune to the problem onto the shelves and whether there are any obvious delays in shipping them.
      As stands, they are almost certainly going to be launching their next generation of chips complete with the flaw and going head-to-head against a resurgent AMD Ryzen that they will be conceeding 20-30% of potential performance to on patched systems for some critical workloads like DB servers. That's going to cost them. Realistically, the generation after that is going to be a fair way down the design process too (not too far from taping out), so they're either going to have to ship that with the flaw as well, delay it to fix the problem, or ship a fixed CPU on schedule which strongly implies they've known about this much longer than six months. Either way, that's going to cost them too, and that's before you start factoring in potential damages that might be awarded by the courts.

      --
      UNIX? They're not even circumcised! Savages!
    4. Re:Bloody idiots by GuB-42 · · Score: 3, Insightful

      What makes you think Intel knew that a year ago?
      All Intel CPUs with speculative execution are affected by Meltdown, and all CPUs with speculative execution, including those by AMD and ARM are vulnerable to Spectre. Intel discovering that a year before Google would be a coincidence. It is not just a bug, it is a fundamental issue in the way all modern CPUs are designed.

    5. Re:Bloody idiots by SlaveToTheGrind · · Score: 1

      Intel has been aware for quite a long time, a year or more probably.

      That just doesn't ring true to me. Intel's last round of processors it released in October were vulnerable. Had they known for a year or more, that would have been plenty of time to roll out a permanent fix in those models before shipment, and they certainly could have done that silently, without breaking the embargo. If you're saying they continued to roll out new flawed chips they had time to fix before release, that's a level of conspiracy theory that's hard to buy into without some concrete evidence.

    6. Re:Bloody idiots by Archtech · · Score: 0

      It is not just a bug, it is a fundamental issue in the way all modern CPUs are designed.

      To be precise, it is a fundamental bug in the way all modern CPUs are designed.

      Nice try at evasion, though.

      --
      I am sure that there are many other solipsists out there.
    7. Re:Bloody idiots by emil · · Score: 1

      State-level agencies also must have known. Intel might have had conversations with them about it.

    8. Re:Bloody idiots by sphealey · · Score: 1

      - - - - - Whether Intel knew about it before Google told them is an interesting point, and almost certainly one that will come up when (not if!) this sees the inside of a courtroom. If they knew, or even suspected, there was a potential exploit they could have silently fixed it in future CPU designs and hoped for the best - - - - -

      Potentially Intel were aware of the situation through the side-effects of the actions of the various national intelligence agencies but were prohibited from saying anything or fixing the problem by secret national security orders. If so that would make life very unpleasant for Intel executives in the courtroom.

    9. Re:Bloody idiots by Kohath · · Score: 2

      Class action lawsuits are about lawyers getting paid. In order for lawyers to get paid more, they have to say Intel did the wrong thing. Therefore, Intel did the wrong thing, regardless. If they waited, it's wrong. If they didn't wait, it's wrong. If they both waited and didn't wait, it's doubly wrong. Because money for lawyers.

    10. Re:Bloody idiots by HiThere · · Score: 1

      Weelllll..... I don't think it's that simple going forwards. Meltdown can be ameliorated by OS patches, but it can't be fixed. Spectre, though, that's a different beast. All the systems that do speculative execution are vulnerable to Spectre. So the basic underlying design needs to be addressed.

      My favorite choice would be to go for a bunch of simpler processors that didn't do hyperthreading, but using less die space so you could get more CPUs on each die, but I'm sure not expert in the field. Actually, my ideal design would also have an on-chip RAM cache for each of the "simpler" CPUs. 64K registers would be nice, but I admit that more CPUs would probably be even nicer. This design gives more isolation between each thread of execution, so it has more inherent security. Hyperthreading has always seemed to me as if it were a kludge to implement the appearance multiple CPUs, and as wonderful as most kludges.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    11. Re:Bloody idiots by HiThere · · Score: 1

      I don't think you understand just how much of a redesign is needed. And Intel had no reason to believe that others would know until Google told them. So that's not evidence as to when Intel learned about it...at least it doesn't pin things down very strongly. I'll grant that if they'd known about it back wen they were designing the latest round of chips they would have altered the design, but after the masks were cut and the factories readied for manufacture....that's a lot of sunk cost to just write off if you don't really need to, and the flaw had been there for generations of chips already.

      So I don't thing you argument hold water...but neither does that of the GP. There isn't enough information available to decide.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    12. Re:Bloody idiots by knorthern+knight · · Score: 0

      > If you're saying they continued to roll out new flawed chips they had time to fix before release,
      > that's a level of conspiracy theory that's hard to buy into without some concrete evidence.

      Would not be the first such event. Ever heard of the Ford Pinto (and Mercury Bobcat)? https://en.wikipedia.org/wiki/... Ford chose to continue to ship cars with defective fuel tanks, rather than spend $11 per car to fix the problem https://users.wfu.edu/palmitar...

      > Although Ford had access to a new design which would decrease the
      > possibility of the Ford Pinto from exploding, the company chose not to
      > implement the design, which would have cost $11 per car, even though it had
      > done an analysis showing that the new design would result in 180 less deaths.

      --

      I'm not repeating myself
      I'm an X window user; I'm an ex-Windows user
    13. Re:Bloody idiots by Solandri · · Score: 1

      Intel should have informed vendors a long time ago, like Google did, without of course making the issue a public story until a fix is installed. But Intel admitting the flaw would have triggered many compensation requests. This is one reason why the class action makes sense.

      Um, that makes the class action not make sense. According to your reasoning, the threat of a class action caused the very behavior (Intel not informing vendors) the class action is purportedly trying to discourage.

      Anyhow, more than likely nobody was harmed by the flaw, and nobody will be harmed by the flaw (unless they refuse to apply the patches, in which case it's on their own heads). Unfortunately for Intel, the harm will mainly come from reduced performance due to the fix. Still, the early reports I'm seeing say that the fix has little performance impact on everyday computing tasks. The large performance degradation seems to be limited mostly to cloud virtual data centers, so I'm not actually sure a class action (for the general population) is warranted.

    14. Re:Bloody idiots by SlaveToTheGrind · · Score: 1

      Of course companies have done massively stupid coverups of flawed designs, or even deliberately engineered them (I'm looking at you, Volkswagen). But that's not the default, or anywhere close. We don't know yet which bucket this one falls in, but Occam's Razor counsels for incompetence over maliciousness until the evidence says otherwise.

    15. Re: Bloody idiots by Anonymous Coward · · Score: 0

      It's called reading. He probably read some info from google, Intel, and security researchers. Then compiled the information and spit out the output.

      Sort of like a computer. Wait a minute, is he vulnerable to these atttacks as well? ;)

    16. Re:Bloody idiots by Anonymous Coward · · Score: 0

      Occam's Razor counsels for incompetence over maliciousness until the evidence says otherwise.

      You mean Hanlon's Razor.

    17. Re:Bloody idiots by gnasher719 · · Score: 1

      All the systems that do speculative execution are vulnerable to Spectre. So the basic underlying design needs to be addressed.

      I think it's not the speculative execution. It's the fact that speculative execution made it possible to have detectable side effects. For example, if you stopped the processor clock when mis-prediction costs time, that could fix the problem or at least part of it. (So even though it takes more time in the real world, that wouldn't be detectable by any code running).

    18. Re:Bloody idiots by Anonymous Coward · · Score: 0

      Do you work for free dumb-ass?

    19. Re:Bloody idiots by Agripa · · Score: 1

      All Intel CPUs with speculative execution are affected by Meltdown, and all CPUs with speculative execution, including those by AMD and ARM are vulnerable to Spectre. Intel discovering that a year before Google would be a coincidence. It is not just a bug, it is a fundamental issue in the way all modern CPUs are designed.

      So why were AMD's CPUs designed in such a way as to be immune to Meltdown? Did they notice this problem years ago?

  7. Computer? by aglider · · Score: 1

    And what about servers?

    --
    Sent as ripples into the electromagnetic field. No single photon has been harmed in the process.
    1. Re:Computer? by Anonymous Coward · · Score: 0

      Everything will get a little slower online. Companies will buy more shit to speed things up, passing the cost on to everybody.

    2. Re:Computer? by Anonymous Coward · · Score: 0

      The worst cost is the software that is licensed per-core.

  8. Computers are undecidable by info6568 · · Score: 2

    Computers have sense because they are general usage (i.e. universal) machines.

    Then, it is possible to do many things with them, even more than the original designers visualized. This is why we have Windows, Linux, MacOS, Virtualization and many embedded applications using exactly the same chips, making the effort to create complex solutions extremely cheap and in timely fasion.

    But this means that the undecidable nature of what can be done with the computer brain, the CPU, tends to create some undesired circumstances. In fact where a person will see a problem, another one will devise an opportunity to create some interesting type of functionality.

    The real problem is that we have been building a very complex infrastructure thinking that the behavior for some CPU characteristic was A when it was really B, and now that the difference has been discovered that infrastructure and its capacity becomes dangerous to use as it is. And ... we need to evolve. Of course people is angry, but this is not the first time and neither will be the last one something like this will happen, particularly with clever people trying to expand the computer capacities.

    What to do? Understand, Change (if you call that change a "fix" or an "improvement" it is OK) and Continue. And never to put all the eggs in the same basket, because we are not clear when this type of things will happen again.

  9. Suits may be dismissed by Kohath · · Score: 4, Insightful

    Since there are zero cases where the flaw has been exploited to cause any problems, no one has suffered any economic harm. You need to have been harmed in some way to have standing to sue.

    And Intel will also argue that they never promised any different chip behavior. They are not issuing any errata. The chips work correctly as designers intended, just like other vendors’ chips.

    I expect at least a couple of these lawsuits to be thrown out by judges. Maybe all of them will be dismissed.

    1. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      Thanks, corporate lapdog, armchair lawyer man.

    2. Re:Suits may be dismissed by Anonymous Coward · · Score: 1

      Since there are zero cases where the flaw has been exploited to cause any problems, no one has suffered any economic harm. You need to have been harmed in some way to have standing to sue.

      If your processor performs even 1% slower because of a bug in the hardware itself, you can easily call that being harmed, especially if you're a business that relies on that performance in any way.

    3. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      Since there are zero cases where the flaw has been exploited to cause any problems, no one has suffered any economic harm.

      Bitcoin miners would disagree.

    4. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      You're welcome, asshole.

    5. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      Scenario:
      I have a commercial system running the lowest-possible spec'd Intel processor.

      This happens. OS updates.

      Now I have one that can be up to 30% less than specs.

      Who is to be sued? The OS vendor (who is doing their job), or the chip maker?

    6. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      I've got some really marginal CPU workloads right now. I expect to have to buy a faster processor because of this.

    7. Re:Suits may be dismissed by Kohath · · Score: 1

      Lawsuits are for harm, not for worries about harm that might happen someday.

    8. Re:Suits may be dismissed by Espectr0 · · Score: 1

      If you really get a 5%-30% decrease in performance, it wouldn't be crazy for users to expect some kind of compensation for this. I got a shiny new 8700 processor on black friday and definitely don't want the performance decline for my offline gaming rig.

      Give me a way to turn the new security features off, or give me a 5%-30% refund.

    9. Re:Suits may be dismissed by Kohath · · Score: 1

      If you really get a 5%-30% decrease in performance, it wouldn't be crazy for users to expect some kind of compensation for this.

      How can a court let the lawsuits go forward without evidence that it's 1% or 30%? If these lawsuits were about just compensation rather than about lawyers getting paychecks, you'd already know whether you were harmed and by how much.

      Give me a way to turn the new security features off, or give me a 5%-30% refund.

      No one is forcing you to download the fixes.

    10. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      you're welcome, dirty antifa commi terrorist.

    11. Re:Suits may be dismissed by Nkwe · · Score: 2, Insightful

      Since there are zero cases where the flaw has been exploited to cause any problems, no one has suffered any economic harm. You need to have been harmed in some way to have standing to sue.

      If your processor performs even 1% slower because of a bug in the hardware itself, you can easily call that being harmed, especially if you're a business that relies on that performance in any way.

      Intel is not making your existing processor run 1% (or any percentage) slower. Your processor runs the same speed as the day you purchased it. If you or on your behalf Microsoft or some other operating system vendor plan on changing / patching your operating system with a version that runs slower than a previous version, how is this Intel's fault? Machines will only run slower if you change the software that runs on them.

      The computing industry makes security vs. performance and usability design decisions all the time. Intel made such a decision when they designed the cache behavior during speculative execution. Operating system vendors are making such a decision with the patches that are being / have been written. With respect to case of this specific patch that decreases performance in favor of security, if you want to sue someone sue your operating system vendor for forcing a patch on you that you don't want. That is if you actually don't want the patch. My guess is that you do want the patch and if you do want the patch it means you would rather have security over performance. If you do want security over performance, you don't really have a law suit. Just because you want both security and performance doesn't mean that you can have both.

    12. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      Harm is aggravated loss. Loss is just risk environmentally entangled. The environment hasn't changed, but the risk was greater than expected. So also loss; thus harm. Sue !

    13. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      This evidence isn't needed for the lawsuit to go forward. The exact amount of harm is something that can come up during the trial. For the lawsuit to be dismissed, there would have to be a finding of no harm and therefore no standing.

    14. Re:Suits may be dismissed by Kohath · · Score: 1

      If plaintiffs don’t have any claim they were harmed, the judge should dismiss. It doesn’t have to be proven that no harm occurred. If it's an open question with evidence and argument on both sides, then judge won't dismiss.

    15. Re: Suits may be dismissed by Anonymous Coward · · Score: 0

      You forgot the IANAL.

      So your advice about legal situations means Jack and Shit.

      Our first exhibit your honor is exhibit A) Jack.
      The second exhibit is B) Shit.

    16. Re: Suits may be dismissed by Anonymous Coward · · Score: 0

      It's intels fault because it is their fucking bug...errr feature that they designed.

    17. Re:Suits may be dismissed by Tablizer · · Score: 1

      Since there are zero cases where the flaw has been exploited to cause any problems, no one has suffered any economic harm.

      That's like saying if I purchase a door and the door-knob falls off, I cannot be reimbursed until burglarized or robbed.

    18. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      Intel themselves are involved with creating these patches.
      For example on the Linux side they tried submitting a fix that affects ALL CPUs. It would've degraded performance on AMDs who don't need the Meltdown fix.
      Luckily, it was modified before being merged. But, Intel is certainly the one who's created an extremely vulnerable system. Where the only fix on current CPUs is a patch that degrades performance. Because when designing their CPUs they decided to cut corners/security.

    19. Re: Suits may be dismissed by Anonymous Coward · · Score: 0

      The harm is the slow down when the patch is applied.

    20. Re:Suits may be dismissed by Kohath · · Score: 1

      That would be a defective door, not a door that works as intended.

      A closer analogy: You bought a door with 50 security features, but then someone found a very clever way to break in anyway. (But they didn't actually break in, they just wrote a white paper describing the method.). All 50 security features still work correctly, and your door still works correctly. But you want to sue because the door company didn't provide the 51st security feature that no one in the world ever thought was needed when your door was designed.

    21. Re: Suits may be dismissed by Kohath · · Score: 1

      So skip the patch download then.

    22. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      Someone running an Oracle database which supports their company that now no longer performs adequately due to the slowdown imposed by the patch must add more CPU cores to make up for the lost processing power. This means an extra cost not just for the CPUs added, but the Oracle per-core costs on the database. This can be very expensive.

      The alternative is your data is now at risk because of a flaw in the product that Intel sold you. Imagine buying a 300HP car with an 8 cylinder motor. You bought this car for the performance. Now the manufacturer tells you that due to a flaw in the design, your car can be easily stolen by any average thief. Their "fix" involves disabling 2 of your cylinders and dropping the power down to 225HP. And you're saying this is a-ok? Face it, you were sold a defective product.

      "Zero" cases indeed.. You didn't put much thought into this weak attempt at defending Intel, did you?

    23. Re:Suits may be dismissed by Tom · · Score: 1

      Since there are zero cases that we know of where the flaw has been exploited

      There, fixed that for you.

      --
      Assorted stuff I do sometimes: Lemuria.org
    24. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      You don't have to be hacked to be harmed. You are harmed just installing the workaround to avoid being hacked.

    25. Re:Suits may be dismissed by Kohath · · Score: 1

      Why are you installing the slowdown patch on your Oracle server? It's a dedicated box only for Oracle, not a box for web browsing or running untrusted code. You don't need the extra security.

    26. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      From what I've heard about the details so far, it sounds like plaintiffs have at least a fraud argument and fraud is a valid tort.

      If I were an investor, I wouldn't be so quick to dismiss these cases from my calculus.

    27. Re:Suits may be dismissed by Agripa · · Score: 1

      Since there are zero cases where the flaw has been exploited to cause any problems, no one has suffered any economic harm. You need to have been harmed in some way to have standing to sue.

      Having their CPU lose a significant amount of performance is economic harm.

    28. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      Microsoft is fuckstain

    29. Re:Suits may be dismissed by Anonymous Coward · · Score: 0

      You just might be as stupid as APK and that is something!

      This is a major fuckup that will cost Intel billions in both lawsuits and lost business.

      All your spergy Intel cockgobbling will not change that.

      fuckstain.

    30. Re:Suits may be dismissed by Tablizer · · Score: 1

      If you advertise "security" without sufficient caveats, then you'd be liable. It's not the customer's fault thieves got smarter. It will probably come down to a "battle of the fine print" in court.

  10. Lawsuits filed by... by Anonymous Coward · · Score: 0

    Three separate class-action lawsuits have been filed by plaintiffs in California, Oregon and Indiana seeking compensation, with more expected.

    No. The lawsuits were filed by lawyers in a race to be first at the feeding frenzy.

  11. Here come the Jews by Anonymous Coward · · Score: 0

    I mean uh sharks

  12. Re:Good news for Win7 & 10 update patchers... by Anonymous Coward · · Score: 0

    I was looking for a "-1 incoherent" mod, but couldn't find one, so you lucked out, and I'm not downmodding this one at all.

  13. Hard to prove malice by Anonymous Coward · · Score: 0

    I think these lawyers hope Intel rolls over and settles, because I don't see any proof Intel should pay a dime. I have yet to see any proof of any negative affect on these patches with performance or function of any chip. Even being confirmed by Google and Amazon two big server entities that would obviously be upset with any performance hit. This frankly won't affect most PC users in the least, my own testing bears out no speed issues observed or recorded with testing. In fact, we have yet to see any attack in the wild even trying to exploit either Meltdown or Spectre and since this flaw has been around for decades. Clearly there is no argument that Intel or any one company is to blame. Intel AMD, ARM have all used similar designs to boost memory speed. Even in a settlement lawyers would be the only real beneficiaries and the consumer would get a small check to put towards another CPU or device.

  14. Intel is too big to jail by Anonymous Coward · · Score: 0

    If these lawsuits ever get far enough, the federal government will make sure Intel comes out alright. Intel is a huge asset for the US intelligence community -- the feds will fight to make sure Intel retains their effective monopoly on the CPU market so that everyone continues to use compromised technology.

  15. CEO needs to go to jail by Anonymous Coward · · Score: 0

    If they knew in June, he was selling stocks on that knowledge.

    1. Re:CEO needs to go to jail by Anonymous Coward · · Score: 0

      He was selling stock on a schedule, he probably won't even be investigated.

  16. this kind of class action is useless by jarkus4 · · Score: 1

    This kind of class action is useless as it gives nothing to people affected by this issue. The only ones to profit here are the lawyers and there isn't even the nebulous "correct their behavior" part as Intel will fix it next time anyway regardless of the suit.

    1. Re:this kind of class action is useless by iggymanz · · Score: 1

      not true, people in the class can make a claim. Of course, that may require proactive behavior on your part

    2. Re:this kind of class action is useless by jarkus4 · · Score: 1

      If you intend to make a serious claim you will have to exclude yourself from the inevitable settlement for lots of money to lawyers and 10$ off coupon for new intel cpu for the masses as the lawyers have no interest in pushing this past their payout. You can as well skip the class action part and sue yourself as its exactly where it will end anyway.

  17. good deal. i look forward to their outcomes. by Anonymous Coward · · Score: 0

    i can use the back of the $10 coupon i get to securely store my newly-changed passwords.

  18. I choose by Anonymous Coward · · Score: 0

    Die!

  19. It's easy to show harm, actually.... by Anonymous Coward · · Score: 0

    > Since there are zero cases where the flaw has been exploited to cause any problems, no one has suffered any economic harm. You need to have been harmed in some way to have standing to sue.

    The people who have to reserve more cloud instances or otherwise scale up their hardware after patching for this are going to have large bills they can point to which will provide the economic harm you claim is missing.

    1. Re:It's easy to show harm, actually.... by Kohath · · Score: 0

      The people who have to reserve more cloud instances or otherwise scale up their hardware after patching for this are going to have large bills they can point to which will provide the economic harm you claim is missing.

      Lawsuits are for past harm. You can't speculatively recover damages you might or might not experience someday.

    2. Re:It's easy to show harm, actually.... by Anonymous Coward · · Score: 2, Informative
    3. Re:It's easy to show harm, actually.... by iggymanz · · Score: 1

      false. lawsuits can be for false claims (regarding protection and separation of memory), increased risk, possible future harm, and mitigation costs.

      Look it up.

    4. Re:It's easy to show harm, actually.... by iggymanz · · Score: 1

      false. costs associated with mitigation of risk incurred after being misled by false claims about chip's security are legally actionable.

    5. Re:It's easy to show harm, actually.... by Kohath · · Score: 1

      false. lawsuits can be for false claims (regarding protection and separation of memory)

      I'm sure Intel will argue they made no false claims of perfect, unhackable security.

      increased risk

      Increased from what? Computers have always worked this way, going back to 1995. The risks are no different today than a year ago.

      mitigation costs

      Google and Amazon might have mitigation costs. But Google and Amazon aren't a plaintiff class for a class action.

      Don't worry though. I'm sure the lawyers will get paid. That's why we have a court system for class action lawsuits: so lawyers can get paychecks.

    6. Re: It's easy to show harm, actually.... by Anonymous Coward · · Score: 0

      You have no idea what you are taking about and it is clear you are not a lawyer.

      If I was your lawyer I'd advise you to just stfu. Because you are doing nothing but spreading FUD and making yourself look stupid as hell.

    7. Re:It's easy to show harm, actually.... by iggymanz · · Score: 1

      intel not only made claim but specifications of memory separation and protection.

      This discovered violation of their claim of memory protection vulnerability means valuable information is at risk and must be mitigated with costly measures.

      Google and Amazon can be plaintiffs by themselves, yes.

  20. This Will Go Nowhere-limit sharing. by Anonymous Coward · · Score: 0

    Solution for everyone is to limit sharing over protection domains. So it will not matter what processor you have.

    Also as part of that eliminating the idea of TLB and there goes splitting as well, not to mention, "rings", and "modes". MRAM can theoretically give the performance of chip-ram, with the size of regular ram.

    1. Re:This Will Go Nowhere-limit sharing. by billyswong · · Score: 1

      Whatever new ram technology cannot eliminate the latency issue. So there will always be caches and pre-fetching. MRAM no matter how fast you dream it is or how fast it actually is, won't solve our current situation.

    2. Re:This Will Go Nowhere-limit sharing. by Anonymous Coward · · Score: 0

      The reason for caches and pre-fetching come down to the fact that the virtual memory page table can't be contained in it's entirety in any current CPU. That's also why there's splitting. MRAM on die can address latency and since it's denser can store more.*

      *It's nonvolatile nature changes other aspects of CPU design as well.

  21. flaw by ohgary · · Score: 0

    Seems like more of a make money for the lawyer case than anything else. Doubt the timeline will come into play, better to wait for fixes and provide info early. The chips work as designed, the fact the design is flawed is more software than hardware and since there is a patch to fix the issue can see there is much of financial burden. About the only loss might be CPU performance but for most that may not be a factor.

  22. Re:Good news for Win7 & 10 update patchers... by Anonymous Coward · · Score: 0

    Obviously you didn't test small block IO nor run any databases.

  23. To what purpose? by valnar · · Score: 1

    To what purpose will suing Intel get these guys? Ambulance chasers will get some money, sure, but the rest of us will just get screwed if Intel decides to pass along the costs to us. I mean, it's not like we have a choice. AMD isn't a consideration in the server space I play in.

    1. Re:To what purpose? by Actually,+I+do+RTFA · · Score: 1

      the rest of us will just get screwed if Intel decides to pass along the costs to us. I mean, it's not like we have a choice.

      They won't

      --
      Your ad here. Ask me how!
  24. Expect a coupon by sphealey · · Score: 1

    Expect to receive a coupon worth $0.99 off a shiny new Intel Inside(tm) computer in the US mail sometime around 2028

  25. He's essentially saying... by HermMunster · · Score: 1

    That most of us were not benefiting from the technological blunder that puts us at such risk.

    --
    You can lead a man with reason but you can't make him think.
  26. Yeah, I'm pretty mad by rsilvergun · · Score: 1

    I just bought a new CPU a couple months ago. I was on the fence between AMD & Intel and had I known this I would have gone with Ryzen.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
    1. Re:Yeah, I'm pretty mad by Anonymous Coward · · Score: 0

      You are quite the moron, so I could easily see you doing that.

    2. Re: Yeah, I'm pretty mad by Anonymous Coward · · Score: 0

      It's called karma, deal with it.

      You should have trusted your gut and got a ryzen. Instead you chose the path you always follow blindly. Buying Intel because....oh shiny, the name Intel is so great.

  27. Depends on what happens during discovery by rsilvergun · · Score: 2

    I'd expect subpoenas here. This is a 20 year old bug, and one that gave Intel a significant performance edge over AMD. It's entirely possible Intel has known for decades. One stray email is all it would take to blow this up like you wouldn't believe.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
  28. Faster than a Speeding Bullet by neoRUR · · Score: 1

    I think that the Lawyers work faster than the Chips these days...

  29. Haha, this is too funny.... by Anonymous Coward · · Score: 0

    When this broke I was poo-poo'd by all the amateur lawyers on slashdot for suggesting a class action suit.

  30. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  31. It's not only Intel by pestilence669 · · Score: 1

    I'm not the biggest Intel fanboy, but this isn't a problem limited to only Intel. It affects IBM's Power architecture, ARM, older AMD chips, and probably SPARC too. The most vocal people upset by this aren't the ones deeply concerned about the security implications, but are the ones pissed off that their frame rates in the latest MMORPG might suffer with a patch. I propose letting those people run without a fix, so they can bitch later when their unpatched machines leak their entire identity & finances to some Nigerian website.

    1. Re: It's not only Intel by Anonymous Coward · · Score: 0

      Citation needed for SPARC and ibm power professors.

    2. Re: It's not only Intel by Anonymous Coward · · Score: 0

      POWER: https://www.ibm.com/blogs/psir...
      SPARC: Still no official public statement from Oracle

      IBM Mainframes not impacted.

    3. Re: It's not only Intel by TeknoHog · · Score: 1

      Citation needed for SPARC and ibm power professors.

      Ditto for AMD.

      Let's recap: Meltdown is Intel only. There's another attack called Spectre that affects a wider class of CPUs, including AMD, but that doesn't mean all CPUs are equally bad. Meltdown is the embarrassing one where software fixes cause slowdowns, and did I mention it's Intel only?

      (Apparently, there are some non-Intel processors also affected by Meltdown, but I'm mainly talking about Intel vs. AMD as a whole.)

      --
      Escher was the first MC and Giger invented the HR department.
  32. 2018 by Anonymous Coward · · Score: 0

    What a shitty year. Is it over yet?

  33. Re: Good news for Win7 & 10 update patchers... by Anonymous Coward · · Score: 0

    So everybody else is experiencing slowdowns except for APK. Hmmm interesting.

    Maybe it's not the patch that made your system faster. Maybe it was your host file generator that was speeding up your computer.

    Do more with less, amiright?

  34. Good news for Win7 & 10 update patchers... apk by Anonymous Coward · · Score: 0

    See subject: Microsoft released it late last night for Win7 users it seems (341++mb) & it sped up my system (by feel alone & I was like "but this should cut speed back") then I got email later from TechSpot (a forum I used to frequent) & "lo & behold" they too saw a SPEED-GAIN (albeit in FORMAL TESTS bearing it out on Win10) & I heard that the Win7 patch wouldn't be out until next "patch tuesday" 1/10/2018 4 days from now, but "surprise, SURPRISE"!

    A good one!

    I know my system by 'feel' alone (I conduct my day's business on it for @ least 14++ hrs./day) & KNEW it was quicker so, again - see subject & "be happy"!

    * Makes you wonder on the cause (I suspect less PCB & TLB data held freeing memory & pointers + less 'thrash' in schedulers due to less process data tracking w/ memmgt improvements PLUS NOT spending time on speculative-branch execution which is a CPU/RAM/I-O killer when you right down to it on "wrong-answer branches" (what else could this boost in performance be when it SHOULD'VE slowed things down more instead)).

    I posted on it here https://hardware.slashdot.org/comments.pl?sid=11574131&cid=55874623/ (on personal test 'feel' alone.) & here https://hardware.slashdot.org/comments.pl?sid=11574131&cid=55874785/ (after seeing a formal 'scientific test') early this a.m. after I got done shovelling TONS of snow (we got blasted here in the Northeast for DAYS ON END now - I hate winter but this is a 'bright-spot' & "3 cheers for MS" I say/good job on their part)) - thought I'd share the 'good tidings' for this NEW YEAR on that note!

    APK

    P.S.=> LASTLY - I wonder who the ASSHOLE is who DOWNMODDED last 2x I posted THIS GOOD NEWS in this thread https://yro.slashdot.org/comments.pl?sid=11574443&cid=55874993/ & https://yro.slashdot.org/comments.pl?sid=11574443&cid=55875051/ ?

    Seriously!

    After all - It's GOOD news from a bad situation - we're SAFER + FASTER unexpectedly... apk

  35. Spent a career doing that (retired for 10++ yrs) by Anonymous Coward · · Score: 0

    See subject: Yes, I'm aware of what is adversely affected & I don't do VM work OR db's anymore (too many years of that & programming clientserver frontends in MSVC++, Delphi, & VB for Fortune 100-500 & smaller companies as an MIS programmer & then software engineer last few years) but you're correct though, I don't (with good reason after decades doing it professionally & no real need here @ home retired).

    * INITIALLY @ least (after a bit of 'thought') I was concerned on OTHER drivers (of "non-std. design") in the IP stack https://news.slashdot.org/comments.pl?sid=11564899&cid=55862769/ & also VIDEO DRIVERS for gaming https://news.slashdot.org/comments.pl?sid=11564899&cid=55862695/ but one's in usermode for many years in NT based OS in the latter & the former is a 'hybrid design' PnP driver.

    I had to think about current 'layout' architecture & function in them (it's been AGES since I've had to really).

    APK

    P.S.=> I was concerned that high I/O to disk *might* be adversely affected though (& I'm about to find out as this patch worked out well for me thusfar) as I am updating my hosts file & will do a system cleanup after updating Malwarebytes AV (I keep it as a manual scanner only, not resident) & doing a CCleaner run, defrag & LASTLY a backup to test out this 'theory' of mine (seeing as diskbound I/O presents a problem for the client program's branching (makes sense - block device drivers in kernelmode involved, but we'll see shortly)) - UPDATE DEFRAG & BACKUP WENT WELL (same speed (never was fast but NOT slower))... apk

  36. Don't bother look - YOU can't read! by Anonymous Coward · · Score: 0

    See subject: Get your hooked on phonics out instead! You can't determine the meaning of words/phrases in the context of the framework they're used in obviously (you trolling little jackass dolt).

    APK

    P.S.=> QUESTION: What's it like being a miserable little UNIDENTIFIABLE cowardly little bitch WORM anonymous troll that "gets off" on spreading the MISERY of your own SHIT LIFE onto others as you do, motherfucker? How many times has it gotten your bony ass jaw broken?? Only a matter of time until it does (but then a PUNK like you doesn't act that way in the REAL world offline, do you??? NOPE - you wouldn't dare, bitch!)... apk

  37. That animal.... by Master5000 · · Score: 0

    of a CEO Krzanich asshole will get away with this. I bought intel because of performance. Now I am fucked. Fuck you intel never buying your shit ever again!

  38. "hit"? by UsuallyReasonable · · Score: 1

    Is there a difference between being "hit" with lawsuits and just having someone file one against you? I've always wondered this. Is actual physical impact involved? Because some of those briefs can be pretty thick.

    1. Re: "hit"? by Brockmire · · Score: 1

      You already seemed to understand, "one" != "hit". "hit" for more than one.

  39. Actually.... by Anonymous Coward · · Score: 0

    The difference between socialism and capitalism is who owns the means of production. Under capitalism, private citizens own it. Under socialism, the community as a whole owns it.

  40. Um by stolidobserver · · Score: 1

    At least two of those suits are never going to end well due to location. Any takers on who loses? You may disregard politics, but it has real world effects, and this is about to show them.

  41. Re:Good news for Win7 & 10 update patchers... by Anonymous Coward · · Score: 0

    Will you please stop sperging all over /.?

    WTF?

    And no, it doesn't result in a speed up, you probably didn't have 1000 streams from lemonparty running. The only thing you feel is your microdick.

    So what thread is your at kiwi farms and don't you have a third-rate hosts file to edit?

  42. Re:Intel vs. Microsoft or Google (eg Chrome): Qual by Anonymous Coward · · Score: 0

    Who gives a shit how hard or expensive it is? That is irrelevant.

    The fact that they tried to push a fix to the Linux kernel that would have throttled uneffected AMD processors is just more proof of their maliciousness.

    Intel screwed up and now needs to pay for it, even if it costs them their business.

    fuckstain

  43. That's the most American thing I've heard all week by Anonymous Coward · · Score: 0

    "Flaw in processors, let's organize lawsuits and get a bunch of lawyers paid!" What a culture.

    I'm sure there will be a bunch of idiots cheering this on, "Yeah, let's make those bastards pay." Down the line those same people will be wondering why computer equipment is once again as expensive as it was 20 years ago. Not to worry though, that $5 check you get paid when the settlement shakes out about a decade in the future should cover the difference.