Thursday, August 6th 2020

Intel Hit by a Devastating Data Breach, Chip Designs, Code, Possible Backdoors Leaked

Intel on Thursday was hit by a massive data-breach, with someone on Twitter posting links to an archive that contains the dump of the breach - a 20-gigabyte treasure chest that includes - but not limited to - Intel Management Engine bringup guides, flashing tools, samples; source code of Consumer Electronics Firmware Development Kit (CEFDK); silicon and FSP source packages for various platforms; an assortment of development and debugging tools; Simics simulation for "Rocket Lake S" and other platforms; a wealth of roadmaps and other documents; shcematics, documents, tools, and firmware for "Tiger Lake," Intel Trace Hub + decoder files for various Intel ME versions; "Elkhart Lake" silicon reference and sample code; Bootguard SDK, "Snow Ridge" simulator; design schematics of various products; etc.

The most fascinating part of the leak is the person points to the possibility of Intel laying backdoors in its code and designs - a very tinfoil hat though likely possibility in the post-9/11 world. Intel in a comment to Tom's Hardware denied that its security apparatus had been compromised, and instead blamed someone with access to this information for downloading the data. "We are investigating this situation. The information appears to come from the Intel Resource and Design Center, which hosts information for use by our customers, partners and other external parties who have registered for access. We believe an individual with access downloaded and shared this data," a company spox said.
Source: Tom's Hardware
Add your own comment

151 Comments on Intel Hit by a Devastating Data Breach, Chip Designs, Code, Possible Backdoors Leaked

#51
$ReaPeR$
Intel should get it's sh@t together. It has become to big for it's own good and with size comes bureaucracy that brings this kind of ridiculousness. And no, I'm not worried about security issues but this is making Intel look like a joke and not the multi-billion giant that it is.
Posted on Reply
#52
Unregistered
Intel123 Stock are going fast down..
Watch Live on Wall Street !

Now is the right time to dump all the Intel123 Stocks, while is value some cents..
#53
Jism
CrackongThe tweeter also notes "If you find password protected zips in the release the password is probably either "Intel123" or "intel123". This was not set by me or my source, this is how it was acquired from Intel."

The poster encourages downloaders to look for mentions of 'backdoors' in some of the Intel source code, and even provides a sample clip of one such listing, but we aren't sure of the intentions behind the listings in the code.


=========================

Are Intel engineers really that dump and marked "backdoors" in the actual code ?
Apart from that, if you password protect a zip file it's useless. The only ones really strong is RAR that could not even be broken with a cluster of GPU's in a reasonabel timespan. Aka the password protection on zip is very weak and could be bruteforced in matter of minutes.

A backdoor build in by intel is'nt a unreal situation either. But if there is any solid proof for that, then Intel is screwed. Getting to the public that backdoors in Intel CPU's do exist and can be exploited to this day is just game over.
Posted on Reply
#54
ratirt
efikkanI'm sorry, but I don't think you realize the scope of this.
Intel have thousands of engineers working on various parts of CPU designs (plus thousands of former engineers), then they have many partnerships with research at universities, and all kinds of business partners and third-party developers, all of these are under some kind of NDA and access to varying degrees of sensitive information. Do you really expect all of these (tens of thousands of people) to stay 100% loyal and not do a single mistake to get compromised themselves?

The reality is valuable information is going to get leaked, sometimes not to the general public or sometimes it flies under the radar. But it's very likely that it's going to get out there some day.
You've answered yourself. Why aren't they stay loyal and give so much info into the public? It is different when you get NV specs for the card they release for instance but it's a totally different story when so much future stuff is being published like that dude did. I'm sure it is not a former Intel employee due to the fact it reaches so much into the new things Intel is going to release.
So, I'm going to say it again. Something is wrong with Intel's ranks and this is evident prove. For me it kinda is especially if you see the struggle Intel has at this point with basically a lot of stuff. Starting from CPU volume to new node and performance of the products. This has to account for something sketchy going on at Intel.
Posted on Reply
#55
Chomiq
What a dumpster fire.
Posted on Reply
#56
EarthDog
ChomiqWhat a dumpster fire.
What's worse? what happened or all the assumptions about what it really means? o_O
Posted on Reply
#57
Lionheart
Where did my silly meme go? TPU can't take a joke? lol
Posted on Reply
#58
DeathtoGnomes
edbeIntel123 Stock are going fast down..
Watch Live on Wall Street !

Now is the right time to dump all the Intel123 Stocks, while is value some cents..
you mean the whole $0.54 cents its dropped since the market opened 3.5 hours ago?
Posted on Reply
#59
EarthDog
Its down 1%... BUY BUY BUY!!! LOLOL


...... but we'll see what the rest of the day holds!
Posted on Reply
#60
DeathtoGnomes
the major drop was on July 24th. doubt it will drop much more this soon.
Posted on Reply
#61
moproblems99
EarthDogWhat's worse? what happened or all the assumptions about what it really means? o_O
Does it matter? It means the world is full of idiots or 90% of data centers are screwed.
Posted on Reply
#62
EarthDog
moproblems99Does it matter? It means the world is full of idiots or 90% of data centers are screwed.
I'm more worried about idiots. Look at the world we live in. ;)

Do you want to treat the symptoms or solve the underlying problem?
Posted on Reply
#63
moproblems99
EarthDogI'm more worried about idiots. Look at the world we live in. ;)

Do you want to treat the symptoms or solve the underlying problem?
I agree but you know some parasites are with you forever?
Posted on Reply
#64
EarthDog
moproblems99I agree but you know some parasites are with you forever?
Idiots are why they are in this in the first place. You can't eliminate them, but let's be real and resolve the problem instead of treating symptoms. :)
Posted on Reply
#65
Franzen4Real
MusselsNo thanks, i think you may be lost as to what century this is. The year is 2020, it mostly sucks, the bible and its plagiarized fictions are uninvolved in the human stupidity of someone setting a password as dumb as Intel123 on 'secure' files.
Today at 3:34 AM Low quality post by Mussels

As a moderator-- maybe if were professional and set a good example we would have better comments over all, and my ignore list could be less extensive?
Posted on Reply
#66
moproblems99
EarthDogIdiots are why they are in this in the first place. You can't eliminate them, but let's be real and resolve the problem instead of treating symptoms. :)
Unfortunately, it's a lot like Covid. Can't whack em out before more pop up.
Posted on Reply
#67
Vayra86
Caring1I love the picture of the Dam wall breaking before the flood hits everyone below, that is not a leak, someone blew it wide open.
Note the obvious Lake reference as well. 10/10

Well done Intel, you found a perfect argument to be delayed again. Onwards to stagnation!
Franzen4RealToday at 3:34 AM Low quality post by Mussels

As a moderator-- maybe if were professional and set a good example we would have better comments over all, and my ignore list could be less extensive?
Badum tss
moproblems99Unfortunately, it's a lot like Covid. Can't whack em out before more pop up.
They have a movie on that called Idiocracy. Even just the intro is pure gold and cold hard truth all wrapped into a minute.
Posted on Reply
#68
Shatun_Bear
Intel are a sinking ship.

Engineering sample of Zen 3 (a 4950X) hitting 4.9Ghz earlier is even more bad news for them
Posted on Reply
#70
Vayra86
ratirtYou've answered yourself. Why aren't they stay loyal and give so much info into the public? It is different when you get NV specs for the card they release for instance but it's a totally different story when so much future stuff is being published like that dude did. I'm sure it is not a former Intel employee due to the fact it reaches so much into the new things Intel is going to release.
So, I'm going to say it again. Something is wrong with Intel's ranks and this is evident prove. For me it kinda is especially if you see the struggle Intel has at this point with basically a lot of stuff. Starting from CPU volume to new node and performance of the products. This has to account for something sketchy going on at Intel.
This doesn't look like a very high level access to be honest. If its downloadable and shareable, its not exactly that sensitive. Nowhere do I read some technical security has been breached, and if the data is put online, its certainly not making a lot of money.

Might want to hold our horses on the verdict. Intel shares strategic data with its partners for example, its not exactly special. They need to know what's coming.
Posted on Reply
#71
W1zzard
theoneandonlymrkDo you think the alleged back doors are worth worry then or not so much?.
Haven’t looked at it in detail, but doubt any backdoors will be indicated as such in plain text, and certainly not visible at this access level
Posted on Reply
#72
trparky
JismApart from that, if you password protect a zip file it's useless. The only ones really strong is RAR that could not even be broken with a cluster of GPU's in a reasonabel timespan. Aka the password protection on zip is very weak and could be bruteforced in matter of minutes.
That may be true for the original ZIP encryption techniques but modern ZIP programs like newer versions of WinZIP, 7Zip, and PowerArchiver all support AES 256-bit encryption that if you combine it with a long enough password well, all I can say is... Good luck son, you're going to need it. A twenty-character length password consisting of random stuff is going to take the age of the universe and then some to crack.
Posted on Reply
#73
Caring1
JismA backdoor build in by intel is'nt a unreal situation either. But if there is any solid proof for that, then Intel is screwed. Getting to the public that backdoors in Intel CPU's do exist and can be exploited to this day is just game over.
It's called ME, and it allows them to control your computer if they so wished.
Posted on Reply
#74
hurakura
Has anyone actually seen what's inside that zip file?
Posted on Reply
#75
zlobby
W1zzardYup looks similar to what i see with my gpuz developer nda
Do they also force backdoors on you too? Asking for a friend. ;)
hurakuraHas anyone actually seen what's inside that zip file?
Well, unzipped files, doh!
trparkyThat may be true for the original ZIP encryption techniques but modern ZIP programs like newer versions of WinZIP, 7Zip, and PowerArchiver all support AES 256-bit encryption that if you combine it with a long enough password well, all I can say is... Good luck son, you're going to need it. A twenty-character length password consisting of random stuff is going to take the age of the universe and then some to crack.
Not with a quantum computer it isn't. AES is not a quantum-resistant algo.
JismA backdoor build in by intel is'nt a unreal situation either. But if there is any solid proof for that, then Intel is screwed.
If Snowden et al taught us something, it's that masses don't give a damn. People are still willingly posting their entire lives online.
Posted on Reply
Add your own comment
Nov 22nd, 2024 11:48 EST change timezone

New Forum Posts

Popular Reviews

Controversial News Posts