• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Hardware-based Protection Coming to Data Center and PC Products Later this Year: Intel CEO

btarunr

Editor & Senior Moderator
Staff member
Joined
Oct 9, 2007
Messages
46,377 (7.67/day)
Location
Hyderabad, India
System Name RBMK-1000
Processor AMD Ryzen 7 5700G
Motherboard ASUS ROG Strix B450-E Gaming
Cooling DeepCool Gammax L240 V2
Memory 2x 8GB G.Skill Sniper X
Video Card(s) Palit GeForce RTX 2080 SUPER GameRock
Storage Western Digital Black NVMe 512GB
Display(s) BenQ 1440p 60 Hz 27-inch
Case Corsair Carbide 100R
Audio Device(s) ASUS SupremeFX S1220A
Power Supply Cooler Master MWE Gold 650W
Mouse ASUS ROG Strix Impact
Keyboard Gamdias Hermes E2
Software Windows 11 Pro
Intel CEO Brian Krzanich penned (or signed) a blog post today where we went on to describe all of the steps his company took after knowing of the disclosed vulnerabilities by Google Project Zero (which gave Intel more than 24H notice). In the blog post, he acknowledges there's still much work to be done, but assures customers of security's importance to Intel. For one, 73 days after the vulnerabilities were made public, Intel is now done with software mitigations: all of Intel's last five years worth of CPUs now have in production patches.

The CEO also vowed that hardware solutions will be deployed on newly produced Intel processors by the end of 2018 - these will hit the company's next iteration of Xeon scalable processors (Cascade Lake) and will be deployed to 8th Gen Coffee Lake processors as soon as the second half of this year. The blog post follows.





In addressing the vulnerabilities reported by Google Project Zero earlier this year, Intel and the technology industry have faced a significant challenge. Thousands of people across the industry have worked tirelessly to make sure we delivered on our collective priority: protecting customers and their data. I am humbled and thankful for the commitment and effort shown by so many people around the globe. And, I am reassured that when the need is great, companies - and even competitors - will work together to address that need.

But there is still work to do. The security landscape is constantly evolving and we know that there will always be new threats. This was the impetus for the Security-First Pledge I penned in January. Intel has a long history of focusing on security, and now, more than ever, we are committed to the principles I outlined in that pledge: customer-first urgency, transparent and timely communications, and ongoing security assurance.

Today, I want to provide several updates that show continued progress to fulfill that pledge. First, we have now released microcode updates for 100 percent of Intel products launched in the past five years that require protection against the side-channel method vulnerabilities discovered by Google. As part of this, I want to recognize and express my appreciation to all of the industry partners who worked closely with us to develop and test these updates, and make sure they were ready for production.

With these updates now available, I encourage everyone to make sure they are always keeping their systems up-to-date. It's one of the easiest ways to stay protected. I also want to take the opportunity to share more details of what we are doing at the hardware level to protect against these vulnerabilities in the future. This was something I committed to during our most recent earnings call.

While Variant 1 will continue to be addressed via software mitigations, we are making changes to our hardware design to further address the other two. We have redesigned parts of the processor to introduce new levels of protection through partitioning that will protect against both Variants 2 and 3. Think of this partitioning as additional "protective walls" between applications and user privilege levels to create an obstacle for bad actors.

These changes will begin with our next-generation Intel Xeon Scalable processors (code-named Cascade Lake) as well as 8th Generation Intel Core processors expected to ship in the second half of 2018. As we bring these new products to market, ensuring that they deliver the performance improvements people expect from us is critical. Our goal is to offer not only the best performance, but also the best secure performance.

But again, our work is not done. This is not a singular event; it is a long-term commitment. One that we take very seriously. Customer-first urgency, transparent and timely communications, and ongoing security assurance. This is our pledge and it's what you can count on from me, and from all of Intel.

View at TechPowerUp Main Site
 
Joined
Apr 16, 2010
Messages
3,456 (0.67/day)
Location
Portugal
System Name LenovoⓇ ThinkPad™ T430
Processor IntelⓇ Core™ i5-3210M processor (2 cores, 2.50GHz, 3MB cache), Intel Turbo Boost™ 2.0 (3.10GHz), HT™
Motherboard Lenovo 2344 (Mobile Intel QM77 Express Chipset)
Cooling Single-pipe heatsink + Delta fan
Memory 2x 8GB KingstonⓇ HyperX™ Impact 2133MHz DDR3L SO-DIMM
Video Card(s) Intel HD Graphics™ 4000 (GPU clk: 1100MHz, vRAM clk: 1066MHz)
Storage SamsungⓇ 860 EVO mSATA (250GB) + 850 EVO (500GB) SATA
Display(s) 14.0" (355mm) HD (1366x768) color, anti-glare, LED backlight, 200 nits, 16:9 aspect ratio, 300:1 co
Case ThinkPad Roll Cage (one-piece magnesium frame)
Audio Device(s) HD Audio, RealtekⓇ ALC3202 codec, DolbyⓇ Advanced Audio™ v2 / stereo speakers, 1W x 2
Power Supply ThinkPad 65W AC Adapter + ThinkPad Battery 70++ (9-cell)
Mouse TrackPointⓇ pointing device + UltraNav™, wide touchpad below keyboard + ThinkLight™
Keyboard 6-row, 84-key, ThinkVantage button, spill-resistant, multimedia Fn keys, LED backlight (PT Layout)
Software MicrosoftⓇ WindowsⓇ 10 x86-64 (22H2)
"We learned from our mistakes and are not going to do them again. Promise."


....fine, whatever. Time will tell, damage's done.
 
Joined
Sep 6, 2013
Messages
2,978 (0.77/day)
Location
Athens, Greece
System Name 3 desktop systems: Gaming / Internet / HTPC
Processor Ryzen 5 5500 / Ryzen 5 4600G / FX 6300 (12 years latter got to see how bad Bulldozer is)
Motherboard MSI X470 Gaming Plus Max (1) / MSI X470 Gaming Plus Max (2) / Gigabyte GA-990XA-UD3
Cooling Νoctua U12S / Segotep T4 / Snowman M-T6
Memory 16GB G.Skill RIPJAWS 3600 / 16GB G.Skill Aegis 3200 / 16GB Kingston 2400MHz (DDR3)
Video Card(s) ASRock RX 6600 + GT 710 (PhysX)/ Vega 7 integrated / Radeon RX 580
Storage NVMes, NVMes everywhere / NVMes, more NVMes / Various storage, SATA SSD mostly
Display(s) Philips 43PUS8857/12 UHD TV (120Hz, HDR, FreeSync Premium) ---- 19'' HP monitor + BlitzWolf BW-V5
Case Sharkoon Rebel 12 / Sharkoon Rebel 9 / Xigmatek Midguard
Audio Device(s) onboard
Power Supply Chieftec 850W / Silver Power 400W / Sharkoon 650W
Mouse CoolerMaster Devastator III Plus / Coolermaster Devastator / Logitech
Keyboard CoolerMaster Devastator III Plus / Coolermaster Devastator / Logitech
Software Windows 10 / Windows 10 / Windows 7
So, is he buying back the shares that he sold, now that he is again confident in his company?

I also like the timing.
"Hey, we have hardware fixes, not like the other guys that had 24 whole hours to react and they failed to do so".
 
Joined
Aug 30, 2006
Messages
7,197 (1.12/day)
System Name ICE-QUAD // ICE-CRUNCH
Processor Q6600 // 2x Xeon 5472
Memory 2GB DDR // 8GB FB-DIMM
Video Card(s) HD3850-AGP // FireGL 3400
Display(s) 2 x Samsung 204Ts = 3200x1200
Audio Device(s) Audigy 2
Software Windows Server 2003 R2 as a Workstation now migrated to W10 with regrets.
Want to build customer goodwill? Produce a range of CPU drop-in replacements with all the fixes. One for each chipset/pinout over the last 5 years. You don't need to do a whole range of clock speeds or cores/threads. Just do an upper-average CPU as a drop-in replacement for older PCs. I don't mean dinosaur PCs, I mean 90% of PCs that are still in use. You have the production experience to know what a successful speed/clock bin ratio is in your modern fabs, so you choose the speed that can be manufactured quickly and cheaply. On a modern fab, a lower TDP would be a bonus too. Think green, power savings and therefore cost savings as your consumer goodwill generator. World Peace!

You can even charge them out at cost with a 20% profit margin if you like. Maybe even 33%, giving 13% to charities and good causes. They will still be much cheaper than replacing a whole system for most users, and squeezable into corporate budgets as a security measure. There are millions of computers out there that are not state-of-the-art high end machines, but production machines, workstations, and servers, that could really use a solid, guaranteed fix, not a software patch that could potentially be UNPATCHED ;)
 
Joined
Jun 1, 2006
Messages
826 (0.13/day)
Want to build customer goodwill? Produce a range of CPU drop-in replacements with all the fixes. One for each chipset/pinout over the last 5 years. You don't need to do a whole range of clock speeds or cores/threads. Just do an upper-average CPU as a drop-in replacement for older PCs. I don't mean dinosaur PCs, I mean 90% of PCs that are still in use. You have the production experience to know what a successful speed/clock bin ratio is in your modern fabs, so you choose the speed that can be manufactured quickly and cheaply. On a modern fab, a lower TDP would be a bonus too. Think green, power savings and therefore cost savings as your consumer goodwill generator. World Peace!

You can even charge them out at cost with a 20% profit margin if you like. Maybe even 33%, giving 13% to charities and good causes. They will still be much cheaper than replacing a whole system for most users, and squeezable into corporate budgets as a security measure. There are millions of computers out there that are not state-of-the-art high end machines, but production machines, workstations, and servers, that could really use a solid, guaranteed fix, not a software patch that could potentially be UNPATCHED ;)

lemonadesoda.jpg
 
Joined
Feb 18, 2005
Messages
5,238 (0.75/day)
Location
Ikenai borderline!
System Name Firelance.
Processor Threadripper 3960X
Motherboard ROG Strix TRX40-E Gaming
Cooling IceGem 360 + 6x Arctic Cooling P12
Memory 8x 16GB Patriot Viper DDR4-3200 CL16
Video Card(s) MSI GeForce RTX 4060 Ti Ventus 2X OC
Storage 2TB WD SN850X (boot), 4TB Crucial P3 (data)
Display(s) 3x AOC Q32E2N (32" 2560x1440 75Hz)
Case Enthoo Pro II Server Edition (Closed Panel) + 6 fans
Power Supply Fractal Design Ion+ 2 Platinum 760W
Mouse Logitech G602
Keyboard Logitech G613
Software Windows 10 Professional x64
Want to build customer goodwill? Produce a range of CPU drop-in replacements with all the fixes. One for each chipset/pinout over the last 5 years. You don't need to do a whole range of clock speeds or cores/threads. Just do an upper-average CPU as a drop-in replacement for older PCs. I don't mean dinosaur PCs, I mean 90% of PCs that are still in use. You have the production experience to know what a successful speed/clock bin ratio is in your modern fabs, so you choose the speed that can be manufactured quickly and cheaply. On a modern fab, a lower TDP would be a bonus too. Think green, power savings and therefore cost savings as your consumer goodwill generator. World Peace!

You can even charge them out at cost with a 20% profit margin if you like. Maybe even 33%, giving 13% to charities and good causes. They will still be much cheaper than replacing a whole system for most users, and squeezable into corporate budgets as a security measure. There are millions of computers out there that are not state-of-the-art high end machines, but production machines, workstations, and servers, that could really use a solid, guaranteed fix, not a software patch that could potentially be UNPATCHED ;)

Keep dreaming, buddy.
 
Joined
Oct 8, 2015
Messages
719 (0.23/day)
Location
Earth's Troposphere
System Name 3 "rigs"-gaming/spare pc/cruncher
Processor R7-5800X3D/i7-7700K/R9-7950X
Motherboard Asus ROG Crosshair VI Extreme/Asus Ranger Z170/Asus ROG Crosshair X670E-GENE
Cooling Bitspower monoblock ,custom open loop,both passive and active/air tower cooler/air tower cooler
Memory 32GB DDR4/32GB DDR4/64GB DDR5
Video Card(s) Gigabyte RX6900XT Alphacooled/AMD RX5700XT 50th Aniv./SOC(onboard)
Storage mix of sata ssds/m.2 ssds/mix of sata ssds+an m.2 ssd
Display(s) Dell UltraSharp U2410 , HP 24x
Case mb box/Silverstone Raven RV-05/CoolerMaster Q300L
Audio Device(s) onboard/onboard/onboard
Power Supply 3 Seasonics, a DeltaElectronics, a FractalDesing
Mouse various/various/various
Keyboard various wired and wireless
VR HMD -
Software W10.someting or another,all 3
I for one considering they'r ,in a three way versus of product prices , virtual endless R&D& experience, trend of positive stock share prices, the naive me thought such features where built in , ohh much to my anguish for my naivety when reading such news.

le: what a bunch of rookies.
2nd le: spelling
 
Top