Technology

58513 readers

4279 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

Almost unfixable “Sinkclose” bug affects hundreds of millions of AMD chips (arstechnica.com)

submitted 1 month ago by return2ozma@lemmy.world to c/technology@lemmy.world

15 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] floofloof@lemmy.ca 0 points 1 month ago

For users seeking to protect themselves, Nissim and Okupski say that for Windows machines—likely the vast majority of affected systems—they expect patches for Sinkclose to be integrated into updates shared by computer makers with Microsoft, who will roll them into future operating system updates. Patches for servers, embedded systems, and Linux machines may be more piecemeal and manual; for Linux machines, it will depend in part on the distribution of Linux a computer has installed.

The headline is misleading: the bug is just as fixable as any, and firmware updates are expected to fix it. AMD do not have a "near-unfixable" processor vulnerability.

What's "near-unfixable" is a deeply embedded bootkit dropped through the successful exploitation of this bug, since it can make itself invisible to the OS and anti malware tools, and could survive a reinstallation of the OS.