Intel's new CPUs are vulnerable to USB hacks

[anybodykek]

Intel is CIA confirmed!!! Make SURE to buy my GENUINE CPU FILTER! THEY'RE INJECTING MICROCODE IN THE USBs THAT TURN THE FROGS GAY AS A METHOD OF POPULATION CONTROL!!!!

[tlink]

3 minutes ago, cozz said:

I was just talking to my boss about this news and he's said the 3G chip was meh, the real thing you need to look out for is vPro, intels own hidden backdoor to your CPU.

 

How did i not know about this stuff haha

yea heard about vPro stuff before, i thought it was all pretty much speculation really. i don't know enough about it but it sounds like a case of : if it quacks like a duck and looks like a duck, it probably is a duck. 

[ARikozuM]

Just now, M.Yurizaki said:

In all honesty, while this is scary, the layman need not be concerned because:

• You're not a valuable target

Unless your wife/husband is the offender and looking for your porn stash finances.

 

Just now, M.Yurizaki said:

• If your OS is smart enough, it won't autorun stuff from removable drives unless they're using some other attack surface.

Human is probably stupid enough to set everything to auto-run...

[tlink]

2 minutes ago, anybodykek said:

Intel is CIA confirmed!!! Make SURE to buy my GENUINE CPU FILTER! THEY'RE INJECTING MICROCODE IN THE USBs THAT TURN THE FROGS GAY AS A METHOD OF POPULATION CONTROL!!!!

only drink bottled water, they are injecting microcode into the tapwater.

[NTDaws]

ugh this ain't good at all for your laptop bruh, BUT CD DOCTOR CAN FIX IT!

 

[ARikozuM]

1 minute ago, Dawson Wehage said:

ugh this ain't good at all for your laptop bruh, BUT CD DOCTOR CAN FIX IT!

 

I really wish we had a "slow clap" button instead of or alongside "thumbs up".

[NTDaws]

Just now, ARikozuM said:

I really wish we had a "slow clap" button instead of or alongside "thumbs up".

[VerticalDiscussions]

35 minutes ago, M.Yurizaki said:

-snip-

[TheTechnicalGeek]

I kinda don't give two *Bad Word* about this news is because no guy is gonna smash the window, Plug a USB in my system, and steal my 1TB Of Hentai.

[Belgarathian]

44 minutes ago, TheKDub said:

Well shit, hopefully they come up with something soon... My laptop has an i5 7200u.

 

Guess I'll just have to keep any usb devices that are not my own out of it for now.

What are you doing that makes you think the Secret Service or other Government Agencies want to put malicious code on a USB into your laptop at Starbucks when you're not looking? 

[TheKDub]

Just now, Belgarathian said:

What are you doing that makes you think the Secret Service or other Government Agencies want to put malicious code on a USB into your laptop at Starbucks when you're not looking? 

Who said that the government is the only one out there that could be up for it?

 

Also, not a coffee person, I don't go to Starbucks.

[cozz]

1 minute ago, Belgarathian said:

What are you doing that makes you think the Secret Service or other Government Agencies want to put malicious code on a USB into your laptop at Starbucks when you're not looking? 

It's not what he's doing, its what people can do with this. Being able to crack into someones PC without any security knowing via a fucking flash drive. That's an issue.

[Belgarathian]

54 minutes ago, TheKDub said:

Who said that the government is the only one out there that could be up for it?

 

Also, not a coffee person, I don't go to Starbucks.

 

53 minutes ago, cozz said:

It's not what he's doing, its what people can do with this. Being able to crack into someones PC without any security knowing via a fucking flash drive. That's an issue.

Agree that it's an issue - but at the same time... Cool.

 

From a personal perspective - someone would have to deliberately target you with knowledge what mobile devices you had, and what CPU they were running and then follow you to a location and wait for you to leave your device unattended, or break & enter when you're away from home. Not something that would be done unless they had prior knowledge that you had something valuable on your device... So again, what are you doing that makes you such a good target? 

 

From a corporate perspective - 

 

What a disaster. 

 

[slightlyjaded]

So  install some USB port covers.

 

You have to remember that no security system is flawless. The best increase the time taken to breach, and thus increase the theif/ Hacker's vulnerability.

 

It's estimated that a steering lock takes 8 seconds to bypass. Is this a good security measure for a car? Hell yes.

 

So now it's a known flaw, you can take some measures to reduce your vulnerability.

Most of us are veteran internet users, and we all know the steps to reduce our vulnerability in an online envirnoment. Now you just need to take a couple of steps to reduce your vulnerability Physically.

 

BTW the USB ports have always been a security vulnerability ever since their first implementation.

[spartaman64]

2 hours ago, anybodykek said:

Does that mean the USB Killer would install Norton onto a device running Kaby lake instead of killing it? The horror!

there are lots of more valuable and worse things you can do with this instead of just killing someone's PC.

[TetraSky]

While this is scary for businesses/governments/people on the move with their laptop, for the general consumer it really doesn't mean much.

 

That said, I'm expecting this issue to be patched out relatively quickly, either through bios update or windows update to block out such attack on Intel laptop/NUC, along with a new CPU revision.

[Drak3]

Surprising

 

/s

 

Nothing new. It's the same old song and dance, and something that many of us could exploit after a few hours on software forums and Tinkernut's old videos.

[BuckGup]

It will be patched in a bit

[zMeul]

4 hours ago, wcreek said:

Does it affect Kaby Lake running on Z170.

not

U series CPUs are soldered not socketed - you won't find U series on desktops

[MadyTehWolfie]

This would be a problem only if the person knew what cpu you had. For more people it is a non issue as you know how touches your stuff. Id say it would be easier to hack company comps then anything else.

[handymanshandle]

39 minutes ago, zMeul said:

not

U series CPUs are soldered not socketed - you won't find U series on desktops

Ah I didn't see this only affects U series chips.

[Bleedingyamato]

5 hours ago, ARikozuM said:

Intel introduced a 3G chip (radio band) onto their CPU's in 2012 (?) allowing IT to remotely diagnose PC's even when wireless.

Really?    I suspect you're joking.  An actual 3G enabled thing in a computer sounds rather hard to believe.  

 

5 hours ago, wcreek said:

Well. Interesting. I'm still planning on running a Kaby Lake CPU on my Z170 board. Honestly I should've gotten a Z270 mobo but I liked the way it looked and when I ordered it, I was thinking about a 6700K. Really there's not much difference but it'd be cool to have a CPU OC to 5.2GHz on a Kraken X52.

Idk if there's enough difference between Z170 and Z270 to make it a huge deal which you have.  

 

5 hours ago, M.Yurizaki said:

In all honesty, while this is scary, the layman need not be concerned because:

• You're not a valuable target
• Someone needs to have physical access to your computer
• If your OS is smart enough, it won't autorun stuff from removable drives unless they're using some other attack surface.

Doesn't Windows auto run everything by default? 

 

Why does it say 6th gen in the picture instead of 7th if this is supposed to be intels new CPUs?

 

5 hours ago, ARikozuM said:

Unless your wife/husband is the offender and looking for your porn stash finances.

 

Human is probably stupid enough to set everything to auto-run...

Why do people keep banking info on their home computers?  

I don't..  

 

Also, you should hide your porn better.  ? lol

 

5 hours ago, ARikozuM said:

I really wish we had a "slow clap" button instead of or alongside "thumbs up".

Next best thing: ?    ?    ?    ?        ?

 

 

5 hours ago, TheTechnicalGeek said:

I kinda don't give two *Bad Word* about this news is because no guy is gonna smash the window, Plug a USB in my system, and steal my 1TB Of Hentai.

Well..  I wasn't..  But now that I know you have 1TB of hentai.  ?

 

 

 

(Kidding. ?)

 

5 hours ago, Belgarathian said:

What are you doing that makes you think the Secret Service or other Government Agencies want to put malicious code on a USB into your laptop at Starbucks when you're not looking? 

You'd be surprised.  Intelligence agencies (not necessarily the ones from any particular country) can and if I remember right from my info security class do sometimes target the average individual to gather data and info from for their own purposes.  There is a point to doing so.   Like it can lead them to juicier targets or something like that. 

 

5 hours ago, TheKDub said:

Who said that the government is the only one out there that could be up for it?

 

Also, not a coffee person, I don't go to Starbucks.

Tea then?  ?

 

53 minutes ago, MadyTehWolfie said:

This would be a problem only if the person knew what cpu you had. For more people it is a non issue as you know how touches your stuff. Id say it would be easier to hack company comps then anything else.

You'd be surprised how easy it can be to get past even high security like the government uses.  Physical security at least.  Google social engineering.  It's scary how effective it can be.  We were shown a video in a info security class I took last fall of this guy whose job is to attempt to breach a facility and see how much "damage" he can cause.  He doesn't actually do anything legit malicious though he will see if he can leave with things like laptops, and any sensitive info/documents he can get his hands on.    I wish I could remember his name..

 

But after he's done he shows the head of the company or whoever hired him what all happened during his "visit" and I think gives advice on how to improve security but I'm not sure about that last part.  

[Stefan1024]

Forget to disable the debug interface for the final product? Yes this can happen. If they designed it wisely they can disable ut permanently with software (burn the fuse).

[Belgarathian]

1 hour ago, Bleedingyamato said:

You'd be surprised.  Intelligence agencies (not necessarily the ones from any particular country) can and if I remember right from my info security class do sometimes target the average individual to gather data and info from for their own purposes.  There is a point to doing so.   Like it can lead them to juicier targets or something like that. 

Yeah, but to take advantage of this bug you'd have to deliberately target you with knowledge what mobile devices you had, and what CPU they were running and then follow you to a location and wait for you to leave your device unattended, or break & enter when you're away from home. Not something that would be done unless they had prior knowledge that you had something valuable on your device... So again, what are you doing that makes you such a good target? 

[Almighty_Spoon]

8 hours ago, TheKDub said:

Well shit, hopefully they come up with something soon... My laptop has an i5 7200u.

 

Guess I'll just have to keep any usb devices that are not my own out of it for now.

IMO you should be doing that anyway, i dont let ANYONE plug something into any of my devices unless its my own..