Slashdot Mirror


Intel Told Chinese Firms of Meltdown Flaws Before the US Government (engadget.com)

According to The Wall Street Journal, Intel initially told a handful of customers about the Meltdown and Spectre vulnerabilities, including Chinese tech companies like Alibaba and Lenovo, before the U.S. government. As a result, the Chinese government could have theoretically exploited the holes to intercept data before patches were available. Engadget reports: An Intel spokesman wouldn't detail who the company had informed, but said that the company couldn't notify everyone (including U.S. officials) in time because Meltdown and Spectre had been revealed early. Lenovo said the information was protected by a non-disclosure agreement. Alibaba has suggested that any accusations of sharing info with the Chinese government was "speculative and baseless," but this doesn't rule out officials intercepting details without Alibaba's knowledge. There's no immediate evidence to suggest that China has taken advantage of the flaws, but that's not the point -- it's that the U.S. government could have helped coordinate disclosures to ensure that enough companies had fixes in place.

21 of 134 comments (clear)

  1. Intel needs there cheap labor to crush AMD by Joe_Dragon · · Score: 3, Insightful

    Intel needs there cheap labor to crush AMD by volume

    1. Re:Intel needs there cheap labor to crush AMD by TechyImmigrant · · Score: 2

      there != they're != their

      Your right!

      --
      I should use this sig to advertise my book ISBN-13 : 978-1501515132.
  2. This should lead to Fines for Intel by Zurkeyon3733 · · Score: 2, Insightful

    If you are BASED in the US and hold GOVERNMENT CONTRACTS, then the Chinese (STILL a US ENEMY) should be the LAST to be informed of Exploits. This was a ridiculous, and a DANGEROUS misstep on Intel's Part. They need to "FEEL" This mistake Monetarily.

    1. Re:This should lead to Fines for Intel by AvitarX · · Score: 4, Insightful

      How is China a US enemy?

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    2. Re:This should lead to Fines for Intel by Anonymous Coward · · Score: 2, Funny

      I think he miss-spelled 'supplier'

    3. Re:This should lead to Fines for Intel by Zurkeyon3733 · · Score: 2

      We Buy goods from Russia too... Are they our Ally? LOL.... Read more history kids...

    4. Re:This should lead to Fines for Intel by MachineShedFred · · Score: 5, Insightful

      Enemy? Was there a declaration of war from the Congress that everybody but you missed?

      I think the word you are looking for is "rival". And countries having rivals can sometimes be a good thing - it keeps everybody honest.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    5. Re:This should lead to Fines for Intel by burtosis · · Score: 3, Funny

      Yea, it was probably an auto erect mistake.

    6. Re:This should lead to Fines for Intel by nine-times · · Score: 4, Insightful

      They're more like a "frenemy", as much as I dislike the word.

    7. Re:This should lead to Fines for Intel by Megol · · Score: 2

      And you prefer that the country we know attack internal and external targets using exploits should have the ability to exploit others?

      Fuck you.

    8. Re:This should lead to Fines for Intel by houghi · · Score: 2

      Why? Perhaps this was not in their contract. Please stop confusing the address of the company with the nationality of the company.
      They are a company in many countries.

      And perhaps they have more to lose if they would not inform the Chinese first.
      And just to inform you: EVERYBODY is an enemy of the US government, including other Americans and/or their companies.

      --
      Don't fight for your country, if your country does not fight for you.
  3. And just what was the US government supposed to do by thegarbz · · Score: 5, Insightful

    Talk about a non-story. Vendors told of problems that only vendors can fix before non-vendors involved.

    News at ... fuck it, this is not news. It belongs in the Daily Flail.

  4. Or not? by TimothyHollins · · Score: 4, Informative

    There's no immediate evidence to suggest that China has taken advantage of the flaws, but that's not the point -- it's that the U.S. government could have helped coordinate disclosures to ensure that enough companies had fixes in place.

    Not to mention it would have been really handy for NSA to take advantage of the flaws for a while to spy on the Chinese government.

  5. Intel plants are in the USA by sjbe · · Score: 2, Insightful

    Intel needs there cheap labor to crush AMD by volume

    Nice theory but it lacks any basis in reality. Intel is literally over 10X the size of AMD by revenue (~$60B versus ~$5B) and AMD is in no danger of catching up to Intel any time soon. Furthermore most of Intel's manufacturing sites are in the US. They have precisely ONE chip fab in China versus NINE in the US. Approximately 75% of Intel's chip fabrication occurs in the US.

    People tend to think of AMD as a close competitor but they aren't. Intel spends over double AMD's total revenue on R&D alone (~$12B last year). Frankly AMD really has no means to catch Intel in the markets that Intel dominates. Intel simply has an insurmountable cost advantage over AMD.

    1. Re:Intel plants are in the USA by TheRaven64 · · Score: 5, Informative

      Intel is literally over 10X the size of AMD by revenue

      That's slightly misleading, because it assumes that all of Intel is competing with all of AMD. They have some competing business units, but they are not entirely direct competitors. For example, Intel has a huge network business unit (NICs, ICs for switches) and a large storage division, one of the two largest FPGA manufacturers, and it owns its own fabs. AMD no longer owns its own fabs, so doesn't require the same economise of scale to get the cost per wafer down (the fabs that make AMD chips also make chips for a load of other companies, so can benefit from large economies of scale).

      Just because Intel is ten times the size doesn't mean that Intel's x86 chips are getting ten times (or even double) the investment that AMDs are.

      People tend to think of AMD as a close competitor but they aren't. Intel spends over double AMD's total revenue on R&D alone

      The vast majority of that is on process technology, which is no longer a business that AMD is in (and where the returns have been very low for the past 5 years).

      --
      I am TheRaven on Soylent News
    2. Re:Intel plants are in the USA by TechyImmigrant · · Score: 3

      It was pretty clear to me. Are you always this troubled?

      --
      I should use this sig to advertise my book ISBN-13 : 978-1501515132.
  6. Come again please? by bickerdyke · · Score: 3, Insightful

    it's that the U.S. government could have helped coordinate disclosures to ensure that enough companies had fixes in place.

    With all the NSA disclosures of the last years, the US government did not exactly proofed themselves as more reliable when it comes to fixing things as compared to keeping them private and using them to spy on others.

    Please note that I'm NOT saying Chinese, Russian or any other government would be trustworthier, so skip those replies

    --
    bickerdyke
  7. "insurmountable advantage"! Heard that before! by Anonymous Coward · · Score: 5, Insightful

    Intel simply has an insurmountable cost advantage over AMD.

    Time and time again we've heard this argument that some incumbent has an "insurmountable advantage". Then what happens? Some competitor comes along and crushes the incumbent!

    Web browsers are a good example of this. Netscape had huge market share for a few years. Then IE came along and rather quickly the tables had turned. IE became the dominant browser for a number of years. Then all of a sudden Phoenix/Firebird/Firefox comes along, and it takes a huge chunk out of IE. Of course, Mozilla didn't listen to its users and started making unwanted changes to Firefox, so Chrome came along and utterly destroyed both Firefox and IE. Now Chrome is the dominant browser by a huge margin.

    Linux is another example of this effect in progress. Linux managed to see a lot of server and embedded use, and even a small amount of desktop use. But we've seen things like systemd ruin Linux's reliability in server environments, causing users to move to more reliable OSes like FreeBSD and OpenBSD. Linux has failed to provide a good desktop environment, so we see users using macOS or Windows instead. Linux is even failing in the embedded arena, with many users now choosing the better-licensed NetBSD, or the more reliable QNX, or even creating their own embedded OSes, like Google appears to be doing with Fuchsia. It's looking more and more likely that Linux, despite seeing significant use, will become a dead/irrelevant OS much like Windows XP now is.

    An "insurmountable advantage" is often not insurmountable at all.

  8. Technically speaking... by hey! · · Score: 3, Interesting

    calling the accusations "speculative and baseless" is not actually a denial.

    --
    Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  9. US government good, chinese bad? by uldics · · Score: 2

    Why is it automatically assumed US would do good, but China bad? Haven't we seen Wikileaks? I am 100% sure US would keep it secret and use this however they could dream about. They are no Robin Hood. Works, not words define who you are. Both regarding person or country.

  10. Cost amortization and capitalized R&D by sjbe · · Score: 2

    AMD doesn't escape them, but they get to share them.

    Sharing them only helps if your competition cannot fully utilize their own production capacity. That is not the case here. Intel has substantial production capacity which they (so far) are able to utilize efficiently and don't have to pay any margin leakage. Furthermore there are substantial advantages to be had from being vertically integrated. Any time you rely on a third party to produce something there are a host of frictional problems that add costs. Sometimes these are worth dealing with but they aren't a good thing if your competition doesn't have them.

    Let me give an example from my own company which is comparable. We make wire harnesses. One of our products is a simple lead (wire plus terminal and seal) we sell to one of our customer for about $0.15 each. Currently we buy these leads from a third party for about $0.11 each because we don't have quite enough business to justify the $100,000 price of the automated production equipment needed to make them ourselves. We would need to make about a million of these per year to justify the equipment with a reasonably short breakeven but we only have orders for about 300,000 per year. If we owned the equipment and operate it at scale we could make the leads for about $0.08 each. At our current scale it makes sense to outsource the production but a larger company that already owns the production equipment. A competitor that has enough business to own the machine and utilize it fully could easily undercut us on price and not even have to take a loss. In this case we are in the role of AMD and our theoretical competitor is Intel.

    YThe cost of developing a new process tech is huge (on the order of $10bn+). If you're selling ten million chips, then that's $1,000 per chip. You need to get a good hundred million chips out of the fabs before they start to bring the cost per chip down low enough that you can sell them.

    And to date Intel has been able to do exactly that.

    Even Intel is struggling to get the required economies of scale. They keep trying to get other people to use their fabs, but no one wants to use a fab where they're always going to be lower priority than Intel and where Intel may suddenly decide that they're competitors. They event threw in Atom IP cores basically for free for anyone willing to fab their SoCs with Intel. It didn't work.

    This is actually a real concern for Intel. They have a huge investment in production capacity and they have to be able to utilize it fully to continue to maintain their strategic position and cost advantage. So far they've managed the trick but if they have an Achilles heel where AMD is concerned, this is it.

    Again, that's a nonsense comparison. It's including Intel NICs, Intel SSDs, and all of the other things where Intel has a huge presence and AMD has none.

    It's not nonsense at all. Those additional profits matter because they can support Intel in a price war in a particular market segment. It's illegal to sell below cost but Intel doesn't have to do that to hurt AMD. Intel just has to price their chips below AMD's cost to produce and it is game over. And Intel can do that because they have a cost advantage. Intel could put AMD out of business and not even have to go into the red to do it. Now this won't happen for various reasons but it is the economic cloud AMD has lived under for decades. It's also why AMD has been diversifying away from their CPU business. They know they cannot beat Intel in the CPU market.

    You really don't understand how economies of scale work in this market.

    I'm a certified accountant and I run a contract manufacturing company for my day job. I assure you I understand the economies of scale better than most and you aren't thinking about it properly. You have the bits about the startup capital costs more or less correct but yo