This is how you do it Intel
Accept the flaw and fix it. Don't go round trying to diss those who found the flaw.
Microchip slinger AMD has issued a firmware patch to fix the encryption in its Secure Encrypted Virtualization technology (SEV), used to defend the memory of Linux KVM virtual machines running on its Epyc processors. "Through ongoing collaboration with industry researchers AMD became aware that, if using the user-selectable …
"If you don't directly control the hardware and what software is running on it you are lying to yourself it is secure."
And that's why I only use CPUs that I've hand whittled myself from a single crystal of silicon. Of course, adding each of the transistors requires a steady hand, but it's a small price to pay to be 'secure'.
If you don't directly control the hardware and what software is running on it you are lying to yourself it is secure.
You forgot the troll icon. As anybody haunting Reg for any length of time is well aware, there is no such thing as "secure". Rather, there is a whole spectrum of being more or less trouble (ie money, skill, and risk to life and limb) to breach your security. On that spectrum, guest memory encryption with cryptographically-sound key management is a very useful point. It won't stand up to a determined and resourceful state-level attacker - nothing would - but it does protect you from an electronic equivalent of a casual smash'n'grab, while still allowing you to rent somebody else's hardware.
For many uses, that's plenty secure enough.
"I'm having my fix delivered by armoured car with lotsa of guards carrying lotsa guuuuuunns, I don't trust this internet thingy."
I require all my updates to be verified by the manufacturer, written onto RO media by trusted employees of the manufacturer that I have personally met and then delivered by FedEx to my research lab encased in a volcano. Admittedly it's a little slower than the Internet, but the warm feeling of that extra care really makes a difference to my IT minions.
What could possibly go wrong with my plans for world domination?
And why do all my deliveries appear to go from the US to Japan to China to the UK and then finally to my secret island?
Biting the hand that feeds IT © 1998–2019