[coreboot] Re: Are AMD CPUs as researched as Intel ones (was Re: New Intel microcode release for migiating ZOMBIELOAD FALLOUT AND OTHERS)

2019-05-21 Thread anac
On 5/15/19 11:54 PM, Nico Huber wrote: If you can't provide any _related_ reference for research on AMD processors, please keep your believes about who is better for yourself (or at least away from technical oriented mailing lists). Nico, you sound a little rude and schoolmasterly. You know,

[coreboot] Re: Are AMD CPUs as researched as Intel ones (was Re: New Intel microcode release for migiating ZOMBIELOAD FALLOUT AND OTHERS)

2019-05-16 Thread Rudolf Marek
Hi On 15. 05. 19 17:28, Nico Huber wrote: Hi Ivan, I'm curious. Did you do or know somebody who did as much research on AMD processors, as was necessary to find these vulnerabilities? If not, how can you make such comparisons? Here [1] is a official AMD paper on the speculation behavior in

[coreboot] Re: Are AMD CPUs as researched as Intel ones (was Re: New Intel microcode release for migiating ZOMBIELOAD FALLOUT AND OTHERS)

2019-05-15 Thread Nico Huber
On 15.05.19 17:59, Ivan Ivanov wrote: > Yes, the people are checking AMD as well, and discovered the > AMD-specific vulnerabilities at their PSP Platform (IN)Security > Processor. Unless I missed something about the PSP, I fear, we are talking past each other. Not only is the PSP a completely

[coreboot] Re: Are AMD CPUs as researched as Intel ones (was Re: New Intel microcode release for migiating ZOMBIELOAD FALLOUT AND OTHERS)

2019-05-15 Thread Ivan Ivanov
Yes, the people are checking AMD as well, and discovered the AMD-specific vulnerabilities at their PSP Platform (IN)Security Processor. Luckily almost all the coreboot-supported AMD computers - with the exception of some PC Engines boards if I'm not mistaken - don't have a PSP, so not affected.

[coreboot] Re: Are AMD CPUs as researched as Intel ones (was Re: New Intel microcode release for migiating ZOMBIELOAD FALLOUT AND OTHERS)

2019-05-15 Thread Nico Huber
On 15.05.19 17:37, Ivan Ivanov wrote: > Hi Nico, when someone finds a vulnerability at Intel, people do a good > digging for a similar vulnerability at AMD. I don't doubt it. But did somebody try to find AMD-specific vulnera- bilities? Checking if somebody else did the same errors is not the same

[coreboot] Re: Are AMD CPUs as researched as Intel ones (was Re: New Intel microcode release for migiating ZOMBIELOAD FALLOUT AND OTHERS)

2019-05-15 Thread Ivan Ivanov
Hi Nico, when someone finds a vulnerability at Intel, people do a good digging for a similar vulnerability at AMD. And so far, if I haven't missed something, it has been discovered that AMD shares only a few variants of Spectre together with Intel, while all the other vulns seem to be