[TH]Plundervolt: New Attack Targets Intel's Overclocking Mechanisms - Overclock.net - An Overclocking Community
Forum Jump: 

[TH]Plundervolt: New Attack Targets Intel's Overclocking Mechanisms

Reply
 
Thread Tools
post #1 of 21 (permalink) Old 12-11-2019, 07:50 AM - Thread Starter
OG AMD
 
Redwoodz's Avatar
 
Join Date: Jan 2010
Location: Silicon Valley
Posts: 8,530
Rep: 590 (Unique: 462)
[TH]Plundervolt: New Attack Targets Intel's Overclocking Mechanisms

Wow...another Intel security vulnerability, this time through Intel overclocking software!

sources :https://www.tomshardware.com/news/pl...ing-mechanisms
https://www.intel.com/content/www/us...-sa-00289.html





Better update those bios'!
Attached Images
 

https://valid.x86.fr/cache/banner/4d8m5e-6.png
AMD Athlon II 450 @4.74GHz http://valid.canardpc.com/show_oc.php?id=2204588
AMD MaxxMemm Rankings
960T @ 4.6GHz http://valid.canardpc.com/show_oc.php?id=2171450
RedwoodCustomPC
AM4
(4 items)
RCPC#1
(17 items)
Professional
(13 items)
CPU
Ryzen 2200G
Motherboard
ASRock X470 Taichi
GPU
MSI RX570 Armor MKII 8GB
Power Supply
GSKill Ripjaws PS850G
CPU
AMD Phenom II X6 960T
Motherboard
Asus M4A88T-VEVO
GPU
Asus Strix R7 370
RAM
SuperTalent Perfomance
RAM
GSkill Snipers
Hard Drive
Monster Daytona
Hard Drive
Seagate Barracuda 500GB 7,200 RPM 16Mb cache
Optical Drive
Memorex DVD/RW
Power Supply
Corsair GS500
Cooling
Corsair H60
Case
In Win H-Frame
Operating System
Windows 8N
Monitor
IBM 9494 19" LCD
Keyboard
IBM
Mouse
OCZ Behemoth
Mouse
Wolfking
Audio
JBL Creature
CPU
Phenom II X6 1100t
Motherboard
MSI 890FX GD65
GPU
MSI Radeon HD5670
RAM
GSkill RipjawsX DDR3 PC3 12800 2x4GB CL8
Hard Drive
WD Black 1TB SATA III
Optical Drive
Samsung BD
Power Supply
Kingwin Lazer Platinum 500w
Cooling
Zalman 9900MAX
Case
Fractal Design R3
Operating System
Windows 7 64 Professional
Monitor
AOC 22" LED
Keyboard
Logitech
Other
Samsung 470 SSD 128GB
▲ hide details ▲


Redwoodz is offline  
Sponsored Links
Advertisement
 
post #2 of 21 (permalink) Old 12-11-2019, 08:04 AM
New to Overclock.net
 
skupples's Avatar
 
Join Date: Apr 2012
Location: Fort Lauderdale
Posts: 21,656
Rep: 625 (Unique: 342)
i'd love to, buy MSI's m-flash doesn't work on my board -.-

R.I.P. Zawarudo, may you OC angels' wings in heaven.
If something appears too good to be true, it probably is.
skupples is online now  
post #3 of 21 (permalink) Old 12-11-2019, 08:13 AM
Not a linux lobbyist
 
rluker5's Avatar
 
Join Date: Feb 2014
Location: Wisconsin
Posts: 1,925
Rep: 49 (Unique: 37)
Another vulnerability where you have to give somebody remote access with administrator privelages so they can do mysterious stuff for an extended period of time and maybe get lucky and steal some data. Not applicable for most of my stuff, but I'm sure mitigations will be pushed anyways.
I wonder how many PC's would be vulnerable to hacking after they were already hacked?

L5
(17 items)
Lea2
(11 items)
L7
(11 items)
CPU
5775c
Motherboard
Maximus VII Hero
GPU
Aorus 1080ti Waterforce
RAM
16 Gb Gskill Trident @ 2400,cas10,1.575v
RAM
8 Gb Gskill Trident @ 2400,cas10,1.575v
Hard Drive
1Tb Team ssd
Hard Drive
seagate barracuda 3T
Hard Drive
Optane 900p 480G OS
Optical Drive
Asus BW-16D1HT
Power Supply
EVGA Supernova 1300 G2
Cooling
Cooler Master MasterLiquid Pro 120 (cpu)
Cooling
2 140mm case fans, 2 120mm
Case
Fractal Design R4 (no window)
Operating System
W10 64 pro
Monitor
panasonic TC-58AX800U
Audio
Focal Elear, Nova 40, 598se, HE4xx, DT990pro w b.boost earpads
Audio
SoundbasterX AE-5, onboard
CPU
4770k
Motherboard
Asus Z87 Deluxe
GPU
Fury Nitro
RAM
8Gb klevv urbane 2133
Hard Drive
ROG Raidr 240Gb pcie
Hard Drive
1Tb WD blue
Power Supply
Pc Power&Cooling silencer Mk2 950w
Cooling
Deepcool Lucifer V2
Case
DIYPC P48-W
Operating System
W10 64 pro
Monitor
40"tv
CPU
4980hq
Motherboard
Asus H81T/CSM
RAM
8Gb 1600 samsung
Hard Drive
Samsung 850 evo 120gb
Power Supply
Skyvast 90w brick for hp pavilion something
Cooling
SilverStone Tek Super Slim
Case
SilverStone Tek PT13B
Operating System
W10 64 pro
Monitor
24" samsung 1080p
Keyboard
Logitech K400+
Other
Intel wifi ac card and noname antennas
▲ hide details ▲
rluker5 is offline  
Sponsored Links
Advertisement
 
post #4 of 21 (permalink) Old 12-11-2019, 08:13 AM - Thread Starter
OG AMD
 
Redwoodz's Avatar
 
Join Date: Jan 2010
Location: Silicon Valley
Posts: 8,530
Rep: 590 (Unique: 462)
Quote: Originally Posted by skupples View Post
i'd love to, buy MSI's m-flash doesn't work on my board -.-
Maybe someone already elevated themselves and disabled it -.-

https://valid.x86.fr/cache/banner/4d8m5e-6.png
AMD Athlon II 450 @4.74GHz http://valid.canardpc.com/show_oc.php?id=2204588
AMD MaxxMemm Rankings
960T @ 4.6GHz http://valid.canardpc.com/show_oc.php?id=2171450
RedwoodCustomPC
AM4
(4 items)
RCPC#1
(17 items)
Professional
(13 items)
CPU
Ryzen 2200G
Motherboard
ASRock X470 Taichi
GPU
MSI RX570 Armor MKII 8GB
Power Supply
GSKill Ripjaws PS850G
CPU
AMD Phenom II X6 960T
Motherboard
Asus M4A88T-VEVO
GPU
Asus Strix R7 370
RAM
SuperTalent Perfomance
RAM
GSkill Snipers
Hard Drive
Monster Daytona
Hard Drive
Seagate Barracuda 500GB 7,200 RPM 16Mb cache
Optical Drive
Memorex DVD/RW
Power Supply
Corsair GS500
Cooling
Corsair H60
Case
In Win H-Frame
Operating System
Windows 8N
Monitor
IBM 9494 19" LCD
Keyboard
IBM
Mouse
OCZ Behemoth
Mouse
Wolfking
Audio
JBL Creature
CPU
Phenom II X6 1100t
Motherboard
MSI 890FX GD65
GPU
MSI Radeon HD5670
RAM
GSkill RipjawsX DDR3 PC3 12800 2x4GB CL8
Hard Drive
WD Black 1TB SATA III
Optical Drive
Samsung BD
Power Supply
Kingwin Lazer Platinum 500w
Cooling
Zalman 9900MAX
Case
Fractal Design R3
Operating System
Windows 7 64 Professional
Monitor
AOC 22" LED
Keyboard
Logitech
Other
Samsung 470 SSD 128GB
▲ hide details ▲


Redwoodz is offline  
post #5 of 21 (permalink) Old 12-11-2019, 08:17 AM
New to Overclock.net
 
skupples's Avatar
 
Join Date: Apr 2012
Location: Fort Lauderdale
Posts: 21,656
Rep: 625 (Unique: 342)
nah, it's been an issue since I installed the board, I just never got around to confirming what the issue really is.

configure the thumb, transfer bios file, boot into BIOS, go into m-flash section, thumb is available, but it doesn't see the bios.

R.I.P. Zawarudo, may you OC angels' wings in heaven.
If something appears too good to be true, it probably is.
skupples is online now  
post #6 of 21 (permalink) Old 12-11-2019, 09:50 AM
9 Cans of Ravioli
 
The Pook's Avatar
 
Join Date: May 2006
Posts: 17,490
Rep: 1231 (Unique: 679)
Quote: Originally Posted by rluker5 View Post
Another vulnerability where you have to give somebody remote access with administrator privelages so they can do mysterious stuff for an extended period of time and maybe get lucky and steal some data.


Intel i9 9900K Coffee Lake @ X8 5309mhz (+47.5%)
AMD FX-8320 Vishera @ X4 5022mhz (+43.5%)
Intel i5 4690K Haswell @ X4 5013mhz (+43.2%)
AMD X4 960T Zosma @ X6 4870mhz (+62.3%)
Intel i7 6700 Skylake @ X4 4709mhz (+38.5%)
Intel i5 6400 Skylake @ X4 4588mhz (+69.9%)
2 OP pls nerf
(24 items)
NUC U
(10 items)
CPU
i9 9900K
Motherboard
AsRock Z390 Taichi
GPU
MSI GTX 1080 Ti
RAM
G.Skill DDR4 4133 32GB
Hard Drive
Mushkin Pilot NVMe 1TB
Hard Drive
HP EX950 NVMe 2TB
Hard Drive
Samsung 860 Evo 1TB
Hard Drive
Toshiba X300 5TB
Hard Drive
Western Digital EZRZ 3TB
Power Supply
Seasonic Focus Plus Gold 750w
Cooling
Corsair H115i Pro
Cooling
Raijintek Morpheus II
Case
Fractal Design Meshify S2
Operating System
Windows 10 Education x64
Monitor
Acer XF270HU 27" 1440p
Monitor
LG 24UD58 24" 4K
Keyboard
CoolerMaster MasterKeys Pro S
Mouse
Logitech G502
Audio
SMSL SA50 + FiiO E10K
Audio
Micca RB42
Audio
Polk Audio PSW111
Audio
Philips Fidelio X2
Audio
Philips SHP9500S
Audio
Audio Technica ATH-M50X
CPU
i3 8109U
Motherboard
Intel NUC8i3BEH
GPU
Iris Plus 655
RAM
Kingston 8GB DDR4 2400
Hard Drive
Dierka K1 120GB
Hard Drive
ADATA SU800 128GB M.2
Operating System
Windows 10 Professional
Operating System
MX Linux
Keyboard
Dierya DK63-BT 60% (Outemu Blue)
Mouse
Logitech G603 Wireless
CPU
i7 860
Motherboard
Advantech AIMB 280 ITX
GPU
EVGA GTX 950 2GB
RAM
Kingston 2GB DDR3 1333
Hard Drive
Seagate Momentus 2.5" 500GB
Hard Drive
Western Digital Blue 2.5" 320GB
Power Supply
Silverstone SFX-L Gold 500w
Cooling
Arctic Alpine 11 GT 2
Case
Silverstone Milo Z ML07B
Operating System
Windows XP x86 SP3
Keyboard
Velocifire TKL01 Outemu Browns
Mouse
Logitech M512
▲ hide details ▲


The Pook is online now  
post #7 of 21 (permalink) Old 12-11-2019, 09:54 AM
New to Overclock.net
 
skupples's Avatar
 
Join Date: Apr 2012
Location: Fort Lauderdale
Posts: 21,656
Rep: 625 (Unique: 342)
Quote: Originally Posted by rluker5 View Post
Another vulnerability where you have to give somebody remote access with administrator privelages so they can do mysterious stuff for an extended period of time and maybe get lucky and steal some data. Not applicable for most of my stuff, but I'm sure mitigations will be pushed anyways.
I wonder how many PC's would be vulnerable to hacking after they were already hacked?
the CEO of our medium sized insurance company that owns half of downtown bradenton "called his ISP" the other day, due to a pop up telling him to do so.

R.I.P. Zawarudo, may you OC angels' wings in heaven.
If something appears too good to be true, it probably is.
skupples is online now  
post #8 of 21 (permalink) Old 12-11-2019, 10:05 AM
New to Overclock.net
 
mothergoose729's Avatar
 
Join Date: Aug 2008
Location: Citrus Heights, CA
Posts: 5,741
Rep: 341 (Unique: 284)
That isn't really related to his point. Nor would it be possible to install malware through this attack vector.
mothergoose729 is offline  
post #9 of 21 (permalink) Old 12-11-2019, 10:12 AM
I <3 narcissists
 
bigjdubb's Avatar
 
Join Date: Feb 2008
Location: Houston, TX
Posts: 5,656
Rep: 222 (Unique: 138)
Quote: Originally Posted by The Pook View Post
Quote: Originally Posted by skupples View Post
the CEO of our medium sized insurance company that owns half of downtown bradenton "called his ISP" the other day, due to a pop up telling him to do so.
You two are going to have to share my 1st place for the internet today. Thank you for the giggles.

Gaming Rig
(12 items)
Couch Gaming Rig
(10 items)
Work rig
(11 items)
CPU
Ryzen 7 3700x
Motherboard
Gigabyte X570 Master
GPU
EVGA RTX 2080ti FTW3
RAM
G.Skill TridentZ RGB
Hard Drive
HP EX920 m.2
Hard Drive
Intel SSD6 m.2
Hard Drive
Intel SSD6 m.2
Power Supply
EVGA G3
Cooling
CORSAIR H150I PRO
Case
LianLi PC-O11 Dynamic
Operating System
Win 10 Home
Monitor
LG 32GK650G
CPU
Ryzen 5 3600
Motherboard
Asus x470i
GPU
Radeon VII
RAM
G.Skill TridentZ RGB
Hard Drive
Samsung 970 evo
Power Supply
InWin A1
Cooling
NZXT M22
Case
InWin A1
Operating System
Win10 Home
Monitor
Vizio 4k TV
CPU
AMD Ryzen 7 2700X
Motherboard
Asrock X470 Taichi Ultimate
GPU
GTX 750
RAM
Patriot Viper
Hard Drive
HP EX920 M.2
Power Supply
EVGA G3
Cooling
CORSAIR H150I PRO
Case
NZXT Source 210
Operating System
Windows 10 Pro
Monitor
BenQ PD3200Q
Monitor
LG 32UD59
▲ hide details ▲


bigjdubb is offline  
post #10 of 21 (permalink) Old 12-11-2019, 11:26 AM
New to Overclock.net
 
skupples's Avatar
 
Join Date: Apr 2012
Location: Fort Lauderdale
Posts: 21,656
Rep: 625 (Unique: 342)
Quote: Originally Posted by mothergoose729 View Post
That isn't really related to his point. Nor would it be possible to install malware through this attack vector.
you must not be referring to me, as allowing "your ISP" remote access, and mouse control 100% is exactly how people get their shart pushed in on a daily basis. It's definitely the most common way any user that's ever asked me for personal help has gotten hit. that, or being dumb enough to spam login attempts on a phishing site mimicking office 365.

people are dumb, "hackers" don't need to try all that hard. Technophobia is weird, and gets even weirder when its tied in with technological addiction.

I can't even imagine the # of middle and high school students across the globe right now using similar tactics to pay for their video game skins habit.

R.I.P. Zawarudo, may you OC angels' wings in heaven.
If something appears too good to be true, it probably is.
skupples is online now  
Reply

Quick Reply
Message:
Options

Register Now

In order to be able to post messages on the Overclock.net - An Overclocking Community forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
User Name:
If you do not want to register, fill this field only and the name will be used as user name for your post.
Password
Please enter a password for your user account. Note that passwords are case-sensitive.
Password:
Confirm Password:
Email Address
Please enter a valid email address for yourself.
Email Address:

Log-in



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page


Forum Jump: 

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off