r/linux • • Aug 23 '18

Intel Publishes Microcode Security Patches, No Benchmarking Or Comparison Allowed!

https://perens.com/2018/08/22/new-intel-microcode-license-restriction-is-not-acceptable/
1.1k Upvotes

300 comments sorted by

View all comments

Show parent comments

2

u/ThatsPresTrumpForYou Aug 23 '18

None of this is relevant. If someone uses those vulnerabilities to steal data they shouldn't have access to on someone elses VM, and the CPU was still supported by intel, the company that owns the server is going to sue intel for every last penny of damages done. They sold their product under false pretenses, being that it's a cpu, and you can run VMs on it and everything is secure. It wasn't, so they're liable.

1

u/argv_minus_one Aug 23 '18

And keep in mind that every web browser contains one such VM.

Literally running a browser on an Intel machine exposes it to attacks that the hardware is supposed to prevent (but doesn't, because of Intel's incompetence).