Major chip flaws affect billions of devices - FOX Carolina 21

Major chip flaws affect billions of devices

Posted: Updated:
(Source: Unsplash) (Source: Unsplash)

By Selena Larson 

SAN FRANCISCO (CNNMoney) -- Two major flaws in computer chips could leave a huge number of computers and smartphones vulnerable to security concerns, researchers revealed Wednesday.

The flaws could allow an attacker to read sensitive data stored in the memory, like passwords, or look at what tabs someone has open on their computer, researchers found. Daniel Gruss, a researcher from Graz University of Technology who helped identify the flaw, said it may be difficult to execute an attack, but billions of devices were impacted.

Called Meltdown and Spectre, the flaws exist in processors, a building block of computers that acts as the brain. Modern processors are designed to perform something called "speculative execution." That means they predict what tasks they will be asked to execute and rapidly access multiple areas of memory at the same time.

That data is supposed to be protected and isolated, but researchers discovered that in some cases, the information can be exposed while the processor queues it up.

Researchers say almost every computing system -- desktops, laptops, smartphones, and cloud servers -- are affected by the Spectre bug. Meltdown appears to be specific to Intel chips.

"More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors," the researchers said.

Google programmer Jann Horn of Project Zero was one of the researchers who discovered the flaws. In a blog post he said his group alerted chipmakers to the issues in June. Since last fall, security researchers and companies have investigated and updated software systems to address the bugs.

Intel chips are found in everything from personal computers to medical equipment. The company's shares were down 3% on Wednesday.

The company said in a press release that "Many types of computing devices — with many different vendors' processors and operating systems — are susceptible to these exploits."

Intel said it is working with other chipmakers including AMD and ARM Holdings to solve the issue. ARM said in a statement a small subset of its processors are susceptible to the flaws. AMD has previously said its chips are not affected. They did not respond to a request for comment.

A fix requires both the chip manufacturers and software makers to update their products before pushing it out.

Estimates posted on Linux message boards suggested computer performance could slow down between 5% and 30% once patched, however Intel said users will not see significant performance changes.

Tech website The Register was first to report the processor flaws on Tuesday.

A spokesperson for Microsoft told CNNMoney the company is aware of the issue and is in the process of deploying mitigations to cloud services and has released security updates to protect Windows users.

Google Cloud Platform has been updated to prevent the vulnerabilities, the company said.

Amazon said in a statement most of its cloud computing machines affected by the flaw are already protected, but it is updating the rest on Wednesday.

Researchers said patches were available for Apple's OS X; the company did not respond to a request for comment.

On Wednesday, the UK's National Cyber Security Center issued a statement about the bug.

"At this stage there is no evidence of any malicious exploitation and patches are being produced for the major platforms," the statement read. "The NCSC advises that all organisations and home users continue to protect their systems from threats by installing patches as soon as they become available."

It's important for all users to update their devices when new updates are released.

Flaws in chips are unusual. Back in 1994, a major error in Intel's Pentium processor caused computers to incorrectly calculate results.

TM & © 2018 Cable News Network, Inc., a Time Warner Company. All rights reserved.

Powered by Frankly
Fox Carolina
Powered by WorldNow CNN
All content © 2018, WHNS; Greenville, SC. (A Meredith Corporation Station) . All Rights Reserved.
For more information on this site, please read our Privacy Policy, and Terms of Service, and Ad Choices.