Intel inside computer hacked....

Various security holes inside Intel processors might enable an attacker to attack fully patched Windows, Linux and BSD-systems.Security researcher Kris Kaspersky, not related to the malware fighter Eugene, will demonstrate during the coming Hack In The Box Conference how to attack a system through JavaScript and specially crafted TCP/IP packets, whatever the OS, lest the processor be Intel’s. So Intel inside computer hacked!
Through processor errors the attacker can completely take over a system. Some bugs only let the OS crash, some let the attacker fully take over the Java compiler, some give total control at kernel level. Some can circumvent Vista’s inbuilt security and aid an attacker in this way. Intel has patches for most BIOS vendors, only not all vendors applied them or some bugs simply cannot be cured." Read: http://www.pcworld.com/businesscenter/article/148353/researcher_to_demonstrate_attack_code_for_intel_chips.html

polonus

Looks like everybody would rather buy a Mac.

It says that an attack against a Mac is also a possibility.

Hi marc57,

You are so right, it is there mentioned in the article. And while I am writing this on a machine with AMD, that processor may be up in the next Hack in The Box show. Well, boys and gals we can use a lot of humour here where we really have an unacceptable situation at hand, and the name of the game is spelled as “Sun Java/& JavaScript”. What kind of unacceptable security situations have been created over the years, and Sun developers won’t ever upgrade their updater, because the big firms with independent insecure apps and enormous interests at stake would eat the Sun Java boys alive if they even did dream about an automatic update and taking out former vulnerable versions. So these hacks are all explainable as sides of the status quo, and what keeps the critics at bay, “Security through Obscurity”, and this has been going on for a long time. Once in a while we see a developer like Giorgio Maone come along with his NoScript add-on making a giant step towards advanced security denying dangerous scripts and Web 2.0 technology direct automatic access, but it is not very likely the Mozilla developers will bring it in by default, they are not going to bite that hand that feeds them big time (Google and Co = profilers and adware sellers), for the same reasons as mentioned above,

polonus
P.S. On buggy CPU read: http://www.eweek.com/c/a/Security/CPU-Bugs-Patches-and-Vulnerability/

It Says its possible on BSD, that would make Mac OS X open to attack too since its based on BSD UNIX. Attacking using errata in the processor basically would allow you to bypass the security functions of the OS, even Linux/UNIX/Mac OS X