Intel suffers massive data breach involving confidential company and CPU information revealing hardcoded backdoors.

[Blademaster91]

Not enough to be a security problem for Intel? But this still doesn't look good and Intel is having enough trouble as it is. Wow that password though lmao.

[japers]

4 minutes ago, gabrielcarvfer said:

I'm pretty sure that is the case due to the files leaked and you would probably agree if you worked in the area. I'm waiting for the rest.

Im just saying the guy has a good track record of decent leaks and has already said the further leaks have more classified info. I would guess the initial leak was to get some attention and judge interest and possible backlash if the rest was released. Im not questioning your knowledge of the subject matter. I build high end rendering machines and server farms so im not some kid with a passing interest because of fortnite haha.

[japers]

1 minute ago, gabrielcarvfer said:

That is the point. Not saying you are a random kid who plays fortnite, just that you probably haven't designed/worked with electronics, let alone microelectronics. If you have worked with them, you would see tons and tons of datasheets with exactly the same info of these docs: how the interfaces work, reference values you could expect on the pins, which we and OEMs need to know to properly connect them to other stuff.

Right but as i say, time will tell. You wouldnt leak your best bits before drumming up some interest.

[japers]

Have you for instance searched the term "backdoor" in any of the firmware sources? Not saying its revelatory but its definitely confirming some level of backdoor hard coded into systems. Maybe OEM's are aware but i sure as hell bet the consumer isnt.

[RTX 3090]

3 minutes ago, gabrielcarvfer said:

That is the point. Not saying you are a random kid who plays fortnite, just that you probably haven't designed/worked with electronics, let alone microelectronics. If you have worked with them, you would see tons and tons of datasheets with exactly the same info of these docs: how the interfaces work, reference values you could expect on the pins, which we and OEMs need to know to properly connect them to other stuff; firmware blobs and release notes; etc.

You're kind of right and wrong. Schematics have been released already, but source code, even if it is just 1% of the total file, is one of the most valuable things in there

[porina]

1 minute ago, gabrielcarvfer said:

That is the point. Not saying you are a random kid who plays fortnite, just that you probably haven't designed/worked with electronics, let alone microelectronics. If you have worked with them, you would see tons and tons of datasheets with exactly the same info of these docs: how the interfaces work, reference values you could expect on the pins, which we and OEMs need to know to properly connect them to other stuff; firmware blobs and release notes; etc.

I haven't looked at the "leaked" documents but the above is typical. If you need to share information, which you will sooner or later if you want people to use with your stuff, it needs to be documented, and controlled release to those who need to know. Of course, there's many ways such a system could fail, and the human element is a big one. Until recently I was an engineer at a $billion size company, and I had pretty much access to all engineering relevant data. Not only internal controlled documents, but also working areas like engineering shares. I wasn't alone with that level of access. If anyone went rogue, information the company wouldn't want shared could get out. Of course, I didn't have access to data outside the engineering area. Sales, HR or finance? Nope. 

 

Passwords on data going external were often not strong. It was meant to be enough to prevent casual or automated snooping, not provide any tin foil hat level of security. 

 

7 minutes ago, japers said:

Right but as i say, time will tell. You wouldnt leak your best bits before drumming up some interest.

Time will tell for sure, but if it is interest you want, why not go all out? People would be really interested in juicy info. Right now, it seems like a lot of noise over nothing of significance. I'm sure people will go over it and will report if there is anything really juicy in it.

[RTX 3090]

2 minutes ago, porina said:

a lot of noise over nothing of significance

Source code. Noise over nothing of significance. 

What is "significant" to you

[japers]

9 minutes ago, porina said:

Time will tell for sure, but if it is interest you want, why not go all out? People would be really interested in juicy info. Right now, it seems like a lot of noise over nothing of significance. I'm sure people will go over it and will report if there is anything really juicy in it.

If i was a leaker whose purpose is to leak corporate files that should be public because something is going on, id take a great deal of pride in drumming up some serious internet storm with some bait, get the media talking about it before dropping the really good stuff. From a media strategy POV it makes great sense so you dont overload them with info. Youd have to put something credible out to make sure people are listening.

 

As the saying goes

 

Quote

"Lets run some tits up the flagpole and see if anybody gets wood" - Malcolm F. Tucker

 

[Taf the Ghost]

Some of the stuff is more than just partner information. This is a big IP breach. 

[Taf the Ghost]

The "How to Watermark slides" stuff is hilarious, though.

[porina]

4 minutes ago, Anonymous015 said:

Source code. Noise over nothing of significance. 

What is "significant" to you

It's an embarrassment for Intel for sure. But unless there is something unexpected in there, it isn't really that big. Like people have found references to "backdoor". Great, now actually show it does something nefarious. Then you'll have my attention.

[RTX 3090]

2 minutes ago, Taf the Ghost said:

The "How to Watermark slides" stuff is hilarious, though

Don't have the bandwidth to download that file. At 20mbps, that will take like a day

Would be nice if you could post that file on the forum tho

[Dutch_Master]

1 minute ago, Taf the Ghost said:

This is a big IP breach. 

If only because Intel didn't want to share this stuff with others in the first place. Yet it was harvested (for want of a better word) from their apparently insecure server. That in and by itself is quite the facepalm moment for Intels security credentials and will have an impact on commitment from 3rd parties for Intel product. Like I hinted at earlier, AMD is laughing (hard!) all the way to the bank!

[japers]

1 minute ago, porina said:

It's an embarrassment for Intel for sure. But unless there is something unexpected in there, it isn't really that big. Like people have found references to "backdoor". Great, now actually show it does something nefarious. Then you'll have my attention.

I mean why would they use the term backdoor?. Genuinely curious. They arent exactly going to call it "Super secret CIA entry subroutine". If its merely a coincidence or an oversight its a bit of a bad reflection on the quality of their codebase.

[RTX 3090]

1 minute ago, porina said:

But unless there is something unexpected in there, it isn't really that big. Like people have found references to "backdoor". Great, now actually show it does something nefarious. Then you'll have my attention.

Just the fact that there is a backdoor, a source code has been leaked.

There is gonna end up being one big exploit bigger the spectre and meltdown for intel users. Data centres would be in real trouble. Might just be the downfall of intel

[Taf the Ghost]

1 minute ago, porina said:

It's an embarrassment for Intel for sure. But unless there is something unexpected in there, it isn't really that big. Like people have found references to "backdoor". Great, now actually show it does something nefarious. Then you'll have my attention.

It's not the "backdoor" stuff that's a worry. It's that there might be silicon design tools in the collection and future ones. Under the radar one is the TB4 controller (Snowridge) being named. Those are a hot-spot for security issues and, depending on what's in there, some engineers are about to have a very bad weekend.

[RTX 3090]

1 minute ago, Taf the Ghost said:

some engineers are about to have a very bad weekend

Datacentres too.

I wonder how many breached are going to happen because of this one breach

[Taf the Ghost]

6 minutes ago, Anonymous015 said:

Don't have the bandwidth to download that file. At 20mbps, that will take like a day

Would be nice if you could post that file on the forum tho

https://twitter.com/deletescape/status/1291389042907590657/photo/1

[That Franc]

Well, what can I say except... OOF

[porina]

11 minutes ago, Anonymous015 said:

Just the fact that there is a backdoor, a source code has been leaked.

There is gonna end up being one big exploit bigger the spectre and meltdown for intel users. Data centres would be in real trouble. Might just be the downfall of intel

That's going a bit far ahead. I'll let people more motivated than I am go through that stuff and let's see if there is really anything interesting in there.

[Zodiark1593]

3 hours ago, gloop said:

if this is legit, than the leaker just made the biggest f*cking fool of himself lmao

The truth is probably somewhere inconsequential and damning.

 

[Arika]

...why the hell are people celebrating this?

[mr moose]

23 minutes ago, Arika S said:

...why the hell are people celebrating this?

because they don't understand it and still think companies are simple structures they can be compared to school friends.

[Trik'Stari]

4 hours ago, gabrielcarvfer said:

The files are available to the "public" it is intended for a.k.a. partners.

So, not intended for the general public then.

[ARikozuM]

2020 has had its downsides...

2020 has had its upsides...

 

We are being blessed for a day. 

Spoiler

Hope this hurts Intel a bit longer than a week.