Slashdot Mirror
AMD Makes 2nd Gen Ryzen Processors Official With Availability Starting Next Week (hothardware.com)
MojoKid writes: Today AMD announced official details regarding its new mainstream second-generation Ryzen family of processors. Pricing and detailed specs show some compelling new alternatives from AMD and a refined family of chips to give Intel even more competition, especially considering price point. These new AMD CPUs are all based on the 12nm Zen+ architecture and, at least initially, include four SKUs. The Ryzen 7 family features 8 cores and 16 threads along with 20MB of cache. Ryzen 7 2700 (65W) has a base clock of 3.2GHz and a turbo frequency of 4.1GHz. The top-of-the-line Ryzen 7 2700X (105W) ups the stakes with clocks of 3.7GHz and 4.3GHz respectively. The new Ryzen 5 family features six physical cores capable of executing 12 threads and 19MB of cache. The Ryzen 5 2600 (65W) has a base clock of 3.4GHz and a max boost frequency of 3.9GHz. The Ryzen 5 2600X (95W) ups those speeds to 3.6GHz and 4.2GHz respectively. AMD says that the Ryzen 5 2600, Ryzen 5 2600X, Ryzen 7 2700 and Ryzen 2700X will be available starting April 19th, priced at $199, $229, $299 and $329 respectively.
One thing that might give Intel an edge is the upcoming AVX-512 extensions in the next cycle of processors. It'll allow two more registers for vector operations, along with a bunch more opcodes. It doesn't accelerate all operations, but what it does accelerate usually gets a pretty good speed boost. There's an HPC blogger that benchmarked the heck out of a couple of SSE/AVX/AVX2 chips, and each successive part increased some SPEC operations by 20-40%. Video encoding in particular got a good 30% boost from generation to generation - much more of a boost than the CPU optimizations alone.
Of course, AMD could clone these features, but they've been lagging in support for AVX. The Ryzen parts have half the AVX registers of the Intel chips. Sometimes they can make up for it through sheer parallelism, but not for every workload.
My Other Computer Is A Data General Nova III.
Change log:
2018/01/01 - Added 14 Useful Links. Disable Intel ME 11 via undocumented NSA "High Assurance Platform" mode with me_cleaner, Blackhat Dec 2017 Intel ME presentation, Intel ME CVEs (CVSS Scored 7.2-10.0)
Intel CPU Backdoor Report
The goal of this report is to make the existence of Intel CPU backdoors a common knowledge and provide information on backdoor removal.
What we know about Intel CPU backdoors so far:
TL;DR version
Your Intel CPU and Chipset is running a backdoor as we speak.
The backdoor hardware is inside the CPU/Bridge and the backdoor firmware (Intel Management Engine) is in the chipset flash memory.
30C3 Intel ME live hack:
[Video] 30C3: Persistent, Stealthy, Remote-controlled Dedicated Hardware Malware
@21:43, keystrokes leaked from Intel ME above the OS, wireshark failed to detect packets.
[Quotes] Vortrag:
"the ME provides a perfect environment for undetectable sensitive data leakage on behalf of the attacker".
"We can permanently monitor the keyboard buffer on both operating system targets."
Decoding Intel backdoors:
The situation is out of control and the Libreboot/Coreboot community is looking for BIOS/Firmware experts to help with the Intel ME decoding effort.
If you are skilled in these areas, download Intel ME firmwares from this collection and have a go at them, beware Intel is using a lot of counter measures to prevent their backdoors from being decoded (explained below).
Backdoor removal:
The backdoor firmware can be removed by following this guide using the me_cleaner script.
Removal requires a Raspberry Pi (with GPIO pins) and a SOIC clip.
2017 Dec Update:
Intel ME on recent CPUs may be disabled by enabling the undocumented NSA HAP mode, use me_cleaner with -S option to set the HAP bit, see me_cleaner: HAP AltMeDisable bit.
Useful links (Added 2018 Jan 1):
Disabling Intel ME 11 via undocumented HAP mode (NSA High Assurance Platform mode)
me_cleaner: Set HAP AltMeDisable bit with -S option
Blackhat 2017: How To Hack A Turned Off Computer Or Running Unsigned Code In Intel Management Engine
EFF: Intel's Management Engine is a security hazard, and users need a way to disable it
Sakaki's EFI Install Guide/Disabling the Intel Management Engine
Intel ME bug storm: Hardware vendors race to identify and provide updates for dangerous Intel flaws.
CVE-2017-5689: An unprivileged network attacker could ga