Bug in Skylake CPUs allows attackers to take control over PC using USB

Discussion in 'Frontpage news' started by Hilbert Hagedoorn, Jan 13, 2017.

  1. Hilbert Hagedoorn

    Hilbert Hagedoorn Don Vito Corleone Staff Member

    Messages:
    42,897
    Likes Received:
    10,558
    GPU:
    AMD | NVIDIA
  2. JonasBeckman

    JonasBeckman Ancient Guru

    Messages:
    17,527
    Likes Received:
    2,930
    GPU:
    MSI 6800 "Vanilla"
    Just don't stick random sticks into the USB ports I guess, good to know about though even if it's likely not a huge concern for your average user.

    Or perhaps I misunderstood but it seems you'd need to connect a device to said USB 3.0 port for this exploit to be possible.


    EDIT: Ah it's notebooks only via the -U series CPU's, less risk if it's only one model though I guess having the laptop (Notebook or whatever.) stolen and being able to bypass security this way would be a concern.
     
  3. Minotaur

    Minotaur Member Guru

    Messages:
    106
    Likes Received:
    9
    GPU:
    Gainward 1080 GLH
    It'll be great for future espionage, plug in and copy away!
     
  4. chronek

    chronek Member Guru

    Messages:
    184
    Likes Received:
    3
    GPU:
    Geforce 980 GTX 4GB gddr5
    It's Not a Bug, It's a Feature! (for NSA)
     

  5. slyphnier

    slyphnier Master Guru

    Messages:
    813
    Likes Received:
    71
    GPU:
    GTX1070
    this effect is kinda limited
    skylake U that on NUC or ultrabooks
    dont think this will be a widespread issue

    only targeted person might get attacked with this method, and again the need to access with physical device make things even harder

    for most exploit, like common stealing personal data, basically it need to be spread over internet and remote not by accessing physical data
    i mean how much effort just to steal one person personal data?
     
  6. __hollywood|meo

    __hollywood|meo Ancient Guru

    Messages:
    2,990
    Likes Received:
    139
    GPU:
    6700xt @2.7ghz
    i mean that really doesnt make the fact that the cpu itself opens certain users up to this type of niche vulnerability is any less of a problem as it stands. just that the average skylake user doesnt need to """worry""" about randomly """getting hacked"""

    on principle the fact that this security hole exists is pretty inexcusable...hilarious oversight by intel...
     
  7. jdc2389

    jdc2389 Member Guru

    Messages:
    187
    Likes Received:
    13
    GPU:
    980ti 1408/3650
    Enterprise support features that also leave a gaping hole for the NSA(etc) and USB stick attackers. Messy.
     
  8. chronek

    chronek Member Guru

    Messages:
    184
    Likes Received:
    3
    GPU:
    Geforce 980 GTX 4GB gddr5
    Yes it is limited to directors of big companies, what leaving their ultrabooks in hotels when they stroling on city
     
  9. tsunami231

    tsunami231 Ancient Guru

    Messages:
    12,503
    Likes Received:
    1,022
    GPU:
    EVGA 1070Ti Black
    eh no usb device I dont own get near my pc anyway
     
  10. warlord

    warlord Ancient Guru

    Messages:
    2,761
    Likes Received:
    927
    GPU:
    Null
    Every IT out there on planet earth knows that if you want a safe PC, USBs must be OFF.

    All the other infos are simplistic details. I don't find that bug important at all. Period. :)
     

  11. Irenicus

    Irenicus Master Guru

    Messages:
    582
    Likes Received:
    100
    GPU:
    1070Ti OC
    LOL Because yes! I'm going to let some random person get access to my USB :bang:


    I'm an IT expert and I have no reason to turn USB off. But hey if you want a PC without a mouse and keyboard or any other peripherals go for it

    I love people like you! Pretending you know stuff....lol
     
  12. gx-x

    gx-x Ancient Guru

    Messages:
    1,513
    Likes Received:
    156
    GPU:
    1070Ti Phoenix
    and until now, "hackers" with access to your USB port could not hack your PC right? LOL. This "exploit" isn't even good enough for most "hackers". They have better tools to take over whatever they want if they can stick their thumb into your port ;)
     

Share This Page