[5510] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Intel Pentium Bug

daemon@ATHENA.MIT.EDU (Daniele Orlandi)
Fri Nov 7 22:05:13 1997

Date: 	Sat, 8 Nov 1997 03:20:04 +0100
Reply-To: Daniele Orlandi <daniele@ORLANDI.COM>
From: Daniele Orlandi <daniele@ORLANDI.COM>
To: BUGTRAQ@NETSPACE.ORG

> This is something I discussed with a friend about two years ago.
> Imagine if you will someone with information on how to download new
> microcode to the CPU. This person has the availity to write a
> virus/trojan/activex/program that can now compleatly disable your CPU
>
> [snip]
>
> If Intel where to provide a program to update the microcode on the CPU
> it would most probably be disassembled and reverse engineered quickly.
> Whats a multi-billion company to do?C

If the CPU microcode is really updateable, it's realistic to think that:

1- Upload requires to be done only when running in ring-0, just like all the
   other protected instructions. No user program will be able to use this
   feature.

2- New microcode will not be permanent, otherwise, if you, by mistake,
   put garbage in your CPU, you'll not have to throw the CPU in the trash.

So, only the operating system or a Master Boot Record virus, will be able to
install the new microcode.

Bye...

--
 Daniele

--------------------------------------------------------------------
 Daniele Orlandi - Utility Line Italia - http://www.xt.net
 Via Mezzera 29/A - 20030 Seveso (MI) - Italy - FAX: ++39(362)540153
--------------------------------------------------------------------

home help back first fref pref prev next nref lref last post