Are you at risk of being HACKED? Computer chip flaw that will ‘haunt us for years’ exposed

A COMPUTER chip flaw that will “haunt us for years” has been exposed as technology firms scramble to find a solution.

Computer chipGetty

Operating systems running on Intel processors are susceptible to the flaw

Daniel Gruss, a researcher who helped to compile a report that details the issue, stated that “an attacker might be able to steal any data on the system”.

He added that the attacks are “going to haunt us for years”.

The weakness, discovered by Google researchers, found two vulnerabilities named “Meltdown” and “Spectre” that are present on “many modern processors” including chips made by Intel, Advanced Micro Devices (AMD) and ARM.

This allows hackers to steal data from the memory of a device - this could include passwords, emails, photos, and documents, according to the paper.

It reads: “We have discovered that CPU data cache timing can be abused to efficiently leak information out of misspeculated execution, leading to (at worst) arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts.

“Variants of this issue are known to affect many modern processors, including certain processors by Intel, AMD and ARM. For a few Intel and AMD CPU models, we have exploits that work against real software. We reported this issue to Intel, AMD and ARM on 2017-06-01.”

A document accompanying the research paper added: "Meltdown is not only limited to reading kernel memory but it is capable of reading the entire physical memory of the target machine.”

Another declared: “Spectre attacks involve inducing a victim to speculatively perform operations that would not occur during correct program execution and which leak the victim’s confidential information via a side channel to the adversary.”

Operating systems running on Intel processors are susceptible to the flaw - this includes Windows, macOS and Linux.

Chips are responsible for handling vital information - hackers could grab the slew of data when a processor temporarily makes it accessible outside of the chip.

Following the reveal of the vital compromise, technology companies unanimously issued statements in an attempt to calm public fears.

Intel said: “Intel and other technology companies have been made aware of new security research describing software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from computing devices that are operating as designed. Intel believes these exploits do not have the potential to corrupt, modify or delete data.

“Recent reports that these exploits are caused by a ‘bug’ or a ‘flaw’ and are unique to Intel products are incorrect. Based on the analysis to date, many types of computing devices — with many different vendors’ processors and operating systems — are susceptible to these exploits.

“Intel is committed to product and customer security and is working closely with many other technology companies, including AMD, ARM Holdings and several operating system vendors, to develop an industry-wide approach to resolve this issue promptly and constructively.

“Check with your operating system vendor or system manufacturer and apply any available updates as soon as they are available.”

AMD added: "The threat and the response to the three variants differ by microprocessor company, and AMD is not susceptible to all three variants. Due to differences in AMD's architecture, we believe there is a near zero risk to AMD processors at this time."

IntelGetty

Technology companies unanimously issued statements in an attempt to calm public fears

Microsoft stated that since being informed of the flaw it has been “working closely with chip manufacturers to develop and test mitigations to protect our customers” and is “in the process of deploying mitigations to cloud services and are releasing security updates today to protect Windows customers against vulnerabilities."

The researchers created a “Questions and Answers” segment on their website that details the differences between the two flaws.

It reads: “There are patches against Meltdown for Linux ( KPTI (formerly KAISER)), Windows, and OS X. There is also work to harden software against future exploitation of Spectre, respectively to patch software after exploitation through Spectre.

HackingGetty

Passwords, emails, photos, and documents could be stolen, according to the paper

“Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013).

“Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors.

“Meltdown breaks the mechanism that keeps applications from accessing arbitrary system memory. Consequently, applications can access system memory. Spectre tricks other applications into accessing arbitrary locations in their memory. Both attacks use side channels to obtain the information from the accessed memory location.”

Are you at risk of being HACKED? Computer chip flaw that will ‘haunt us for years’ exposed

A COMPUTER chip flaw that will “haunt us for years” has been exposed as technology firms scramble to find a solution.

Computer chipGetty

Operating systems running on Intel processors are susceptible to the flaw

Daniel Gruss, a researcher who helped to compile a report that details the issue, stated that “an attacker might be able to steal any data on the system”.

He added that the attacks are “going to haunt us for years”.

The weakness, discovered by Google researchers, found two vulnerabilities named “Meltdown” and “Spectre” that are present on “many modern processors” including chips made by Intel, Advanced Micro Devices (AMD) and ARM.

This allows hackers to steal data from the memory of a device - this could include passwords, emails, photos, and documents, according to the paper.

It reads: “We have discovered that CPU data cache timing can be abused to efficiently leak information out of misspeculated execution, leading to (at worst) arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts.

“Variants of this issue are known to affect many modern processors, including certain processors by Intel, AMD and ARM. For a few Intel and AMD CPU models, we have exploits that work against real software. We reported this issue to Intel, AMD and ARM on 2017-06-01.”

A document accompanying the research paper added: "Meltdown is not only limited to reading kernel memory but it is capable of reading the entire physical memory of the target machine.”

Another declared: “Spectre attacks involve inducing a victim to speculatively perform operations that would not occur during correct program execution and which leak the victim’s confidential information via a side channel to the adversary.”

Operating systems running on Intel processors are susceptible to the flaw - this includes Windows, macOS and Linux.

Chips are responsible for handling vital information - hackers could grab the slew of data when a processor temporarily makes it accessible outside of the chip.

Following the reveal of the vital compromise, technology companies unanimously issued statements in an attempt to calm public fears.

Intel said: “Intel and other technology companies have been made aware of new security research describing software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from computing devices that are operating as designed. Intel believes these exploits do not have the potential to corrupt, modify or delete data.

“Recent reports that these exploits are caused by a ‘bug’ or a ‘flaw’ and are unique to Intel products are incorrect. Based on the analysis to date, many types of computing devices — with many different vendors’ processors and operating systems — are susceptible to these exploits.

“Intel is committed to product and customer security and is working closely with many other technology companies, including AMD, ARM Holdings and several operating system vendors, to develop an industry-wide approach to resolve this issue promptly and constructively.

“Check with your operating system vendor or system manufacturer and apply any available updates as soon as they are available.”

AMD added: "The threat and the response to the three variants differ by microprocessor company, and AMD is not susceptible to all three variants. Due to differences in AMD's architecture, we believe there is a near zero risk to AMD processors at this time."

IntelGetty

Technology companies unanimously issued statements in an attempt to calm public fears

Microsoft stated that since being informed of the flaw it has been “working closely with chip manufacturers to develop and test mitigations to protect our customers” and is “in the process of deploying mitigations to cloud services and are releasing security updates today to protect Windows customers against vulnerabilities."

The researchers created a “Questions and Answers” segment on their website that details the differences between the two flaws.

It reads: “There are patches against Meltdown for Linux ( KPTI (formerly KAISER)), Windows, and OS X. There is also work to harden software against future exploitation of Spectre, respectively to patch software after exploitation through Spectre.

HackingGetty

Passwords, emails, photos, and documents could be stolen, according to the paper

“Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013).

“Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors.

“Meltdown breaks the mechanism that keeps applications from accessing arbitrary system memory. Consequently, applications can access system memory. Spectre tricks other applications into accessing arbitrary locations in their memory. Both attacks use side channels to obtain the information from the accessed memory location.”

Are you at risk of being HACKED? Computer chip flaw that will ‘haunt us for years’ exposed

A COMPUTER chip flaw that will “haunt us for years” has been exposed as technology firms scramble to find a solution.

Computer chipGetty

Operating systems running on Intel processors are susceptible to the flaw

Daniel Gruss, a researcher who helped to compile a report that details the issue, stated that “an attacker might be able to steal any data on the system”.

He added that the attacks are “going to haunt us for years”.

The weakness, discovered by Google researchers, found two vulnerabilities named “Meltdown” and “Spectre” that are present on “many modern processors” including chips made by Intel, Advanced Micro Devices (AMD) and ARM.

This allows hackers to steal data from the memory of a device - this could include passwords, emails, photos, and documents, according to the paper.

It reads: “We have discovered that CPU data cache timing can be abused to efficiently leak information out of misspeculated execution, leading to (at worst) arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts.

“Variants of this issue are known to affect many modern processors, including certain processors by Intel, AMD and ARM. For a few Intel and AMD CPU models, we have exploits that work against real software. We reported this issue to Intel, AMD and ARM on 2017-06-01.”

A document accompanying the research paper added: "Meltdown is not only limited to reading kernel memory but it is capable of reading the entire physical memory of the target machine.”

Another declared: “Spectre attacks involve inducing a victim to speculatively perform operations that would not occur during correct program execution and which leak the victim’s confidential information via a side channel to the adversary.”

Operating systems running on Intel processors are susceptible to the flaw - this includes Windows, macOS and Linux.

Chips are responsible for handling vital information - hackers could grab the slew of data when a processor temporarily makes it accessible outside of the chip.

Following the reveal of the vital compromise, technology companies unanimously issued statements in an attempt to calm public fears.

Intel said: “Intel and other technology companies have been made aware of new security research describing software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from computing devices that are operating as designed. Intel believes these exploits do not have the potential to corrupt, modify or delete data.

“Recent reports that these exploits are caused by a ‘bug’ or a ‘flaw’ and are unique to Intel products are incorrect. Based on the analysis to date, many types of computing devices — with many different vendors’ processors and operating systems — are susceptible to these exploits.

“Intel is committed to product and customer security and is working closely with many other technology companies, including AMD, ARM Holdings and several operating system vendors, to develop an industry-wide approach to resolve this issue promptly and constructively.

“Check with your operating system vendor or system manufacturer and apply any available updates as soon as they are available.”

AMD added: "The threat and the response to the three variants differ by microprocessor company, and AMD is not susceptible to all three variants. Due to differences in AMD's architecture, we believe there is a near zero risk to AMD processors at this time."

IntelGetty

Technology companies unanimously issued statements in an attempt to calm public fears

Microsoft stated that since being informed of the flaw it has been “working closely with chip manufacturers to develop and test mitigations to protect our customers” and is “in the process of deploying mitigations to cloud services and are releasing security updates today to protect Windows customers against vulnerabilities."

The researchers created a “Questions and Answers” segment on their website that details the differences between the two flaws.

It reads: “There are patches against Meltdown for Linux ( KPTI (formerly KAISER)), Windows, and OS X. There is also work to harden software against future exploitation of Spectre, respectively to patch software after exploitation through Spectre.

HackingGetty

Passwords, emails, photos, and documents could be stolen, according to the paper

“Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013).

“Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors.

“Meltdown breaks the mechanism that keeps applications from accessing arbitrary system memory. Consequently, applications can access system memory. Spectre tricks other applications into accessing arbitrary locations in their memory. Both attacks use side channels to obtain the information from the accessed memory location.”

Sonos and Bose speakers are being remotely hijacked
Bitcoin price: North Korea hacking cryptocurrency to fuel WW3 threat Apple Microsoft
donald trump tony blair job middle east jared kushner Michael Wolff book gchq iraq war

Tony Blair tried to 'UNDERMINE UK security services' hoping for Trump administration job

Robots machines minimum wage retail Amazon Go Seattle

Robots set to take over? Machines could replace human jobs due to minimum wage hike

UK weather forecast update Storm Eleanor travel updates Met Office snow fog frost England

UK weather: Temperatures plummet as Storm Eleanor DESTRUCTION causes travel mayhem

brexit news latest tony blair jeremy corbyn labour party eu leaders meetings conservative

Remoaner Tony Blair urges Jeremy Corbyn to hold SECRET meetings with EU to STOP BREXIT

brexit news latest royal mail stamps game of thrones star wars michael gove eu ukip

OUTRAGEOUS! Royal Mail release Game of Throne stamps but STILL refuse to mark Brexit

ITV fire alarm news Tom Bradby Donald Trump evacuation

'For now its goodnight': Fire alarm CANCELS ITV News at 10 as team frantically evacuate

machines minimum wage institute fiscal studies research economy agnes norris keiller

Don’t ask for more than minimum wage says think tank, a robot might end up with your job

nigel farage pint petition crown emblem brexit eu

‘Bring back the Great British pint’ Farage urges UK to bring back crown emblem post-Brexit

Brexit news Nigel Farage LBC UK EU Liam Fox

'The TURKEY who voted for Christmas!' Farage's BRILLIANT response to career criticism

Owen Jones Toby Young Sky News Conservative party video

BRILLIANT moment Owen Jones is SHUT DOWN by Sky News host over Tory party votes

Emmerdale spoilers Moira attacks assaults beats up Cain domestic abuse domestic violence

Emmerdale spoilers: Viewers FURIOUS with Moira as she attacks Cain: 'Totally unacceptable'

Celebrity Big Brother 2018 Ashley James bikini India Willoughby

Celebrity Big Brother 2018: Ashley James strips to busty bikini to share bath with India

Chelsea Alvaro Morata Arsenal Gary Neville Premier League

Chelsea news: Gary Neville names key player responsible for failing to beat Arsenal

EastEnders spoilers Ciara Maguire Aidan Maguire Eastender new family Denise McCormack

EastEnders spoilers: Who plays Ciara Maguire? Here's why she looks familiar

Celebrity Big Brother 2018 time update Marcus Bentley voiceover Emma Willis

Celebrity Big Brother 2018: Viewers OUTRAGED at loss of ‘iconic’ feature

Nick Ferrari NHS crisis Foreign Aid Theresa May LBC news today

'It's insane!' Nick Ferrari LASHES foreign aid handouts while NHS slides into CHAOS

trevor ward pensioner climbs mountain turns 104 south wales

Welsh pensioner who climbs hills every day turns 104 this weekend

finsbury-park-murder-christmas Iuliana-Tudos-court case old bailey

Court sketch of man accused of killing girl in park at Christmas

Weight-loss-diet fail motivation

Brits enjoy starting diets - but can't stick to them for more than a few weeks

nhs crisis third world condition man dementia 30 hours waiting bed

Elderly man with dementia left waiting in a corridor for 30 HOURS at 'Third World' A&E

uk train travel delay strike update southern merseyrail south western railway arriva

UK travel CHAOS: Britain prepares for DAYS of rail strikes

UK weather storm eleanor latest news first victim east sussex

Deadly 100mph Storm Eleanor might have claimed its first victim

transgender melissa ede youtube taxi driver lottery win scratchcard

Transgender taxi driver now planning dream wedding after scooping £4m lottery win

Manchester terror attack homeless hero Chris Parker video

SHOCKING moment Manchester Arena 'homeless hero' hides DISGRACEFUL truth of actions

Brexit news latest UK EU European Union Brexit update David Davis Labour impact video

'Brexit deal is SMOKE AND MIRRORS' Labour MEP launches SAVAGE attack on David Davis

World War One artillery shell fragment killed Royal Navy officer for sale

Artillery shell fragment that killed heroic Royal Navy officer emerges for sale

york minster stained glass window largest in UK

Last piece of largest medieval stained-glass window in the UK finally in place

train fares map uk passengers among worst hit europe

RIP OFF BRITAIN: Shocking map shows how UK train passengers are among Europe's worst hit

Brexit news EU UK European Union latest Theresa May date no deal Ukip

'It is about independence!' Ukip leader blasts May for 'integrating' UK in EU even MORE

Conservative MP doctor spending NHS non emergency operations cancelled

Tory MP doctor calls for more spending on NHS as non-emergency operations cancelled

Building industry growth phase December drop

Building industry still in growth phase in UK despite tiny December drop

Brexit news update latest Theresa May Lord Marland UK brexit deal Commonwealth

'UK will show REAL leadership' - Peer says Brexit brings UK closer to 'likeminded' nations

Brexit news latest UK EU meaning BBC Brexit Theresa May vote think tank boss

Political earthquake LOOMING for Brexit - there is NO solution that will satisfy ALL Brits

EHarmony scientifically proven matching system claim ban Advertising Standards Authority

EHarmony's 'scientifically proven matching system' claim banned

ticketmaster platinum tickets banned advertising standards authority

Ticketmaster’s Platinum scheme banned after sales claims fail to stand up

Terror police arrest far right group National Action

Terror police arrest woman and five men alleged to be in far-right group National Action

Brexit news latest UK European Union EU finance LinkedIn RTE Ireland border jobs

'Brexit fears' causing MORE Brits to move to Ireland than EVER before, says LinkedIn boss

Brexit news update European Union German MEP Elmar Brok France 24

'EU used Brexit to become more UNITED!' German MEP's SHOCK claim will rile Eurosceptics

Businessman court accused murdering wife New Years Eve David Clark Melanie Clark

Businessman appears in court accused of murdering wife before midnight on New Year's Eve

uk rail fares increase 2018 transport secretary chris grayling rmt union hypocrisy

‘Utter hypocrisy’ Rail fares row intensifies as Grayling attacks union chiefs

Nigel Farage Jeremy Corbyn Iranian regime protests LBC

Farage SLAMS Corbyn's silence on Iran crackdown: 'fluffy leader hasn't said a Dickie Bird'

Cherie Blair Newsnight gender equality economic smart economics

Viewers outraged as Cherie Blair speaks on Newsnight about 'economic benefits of women'

House of Lords Theresa May BBC Newsnight Evan Davis Brexit Labour Party Iain Dale EU

Evan Davis UP IN ARMS on BBC Newsnight as panelist warns of '2018 House of Lords battle'

Brazil HMS Ocean HMS Queen Elizabeth Britain Royal Navy military Ministry of Defence

Britain ‘sells Royal Navy flagship HMS Ocean’ to Brazil four years after £65million refit

Ryanair passenger Stansted airport Malaga flight delay New Year's Day

‘I’m going via the wing’: Ryanair passenger ‘activates emergency exit’ after flight delay

Labour Party Andy McDonald Mr Potato Head Toy Story BBC interview train fares delays

Labour shadow transport secretary left looking like MR POTATO HEAD in bizarre TV interview

Brexit UK Government Trans-Pacific Partnership TPP Liam Fox Donald Trump Labour Australia

Brexit Britain launches talks to join Trans-Pacific Partnership as UK looks beyond Europe

nhs health tourism pregnant figure money

Health tourism SCANDAL revealed: Foreign mums rip-off NHS £16million a year

Brexit news UK EU Lord Nigel Lawson Theresa May Jean Claude Juncker

'There’s EVERYTHING to play for!' Lord Lawson warns May STILL has work to do on Brexit

Brexit news Lord Heseltine BBC Brexit UK EU Labour latest

Remoaner Lord Heseltine lost for WORDS as he STRUGGLES to justify his anti-Brexit claims

Brexit news UK EU Vince Cale David Davis latest

‘Brexit might NOT happen!’ Vince Cable’s SHOCK claim Britain might NOT leave the EU

health uk middle aged people fitness happiness pension plans finance

This is why middle-aged people in Britain are actually getting HEALTHIER

Jeremy Corbyn Diane Abbott BBC Dead Ringers hilarious sketch Labour Party Andrew Neil

Hilarious moment 'Diane Abbott offers her body' to Jeremy Corbyn in BBC sketch show

World War One centenary Royal British Legion British Commonwealth Armed Forces

World War One centenary: Final thank you to those who sacrificed and changed our world

Brexit news European Union EU UK Theresa May Cambridge Jean Claude Juncker

‘EU does NOT want to negotiate!’ Top academic warns EU wants UK to GIVE IN to its demands

Brexit news European Union SNP Theresa May EU UK BBC stop Brexit

Leading Brexiteer's BRUTAL response after SNP MP claims Brexit should be STOPPED

  • Find us on Facebook
  • Follow us on Twitter
  • Check us on Google+
  • Subscribe to our rss feed