Here we are - 3600 which was still under manufacture 2-3 years ago are not get patched. Shame on you AMD, if it is true.

  • @narc0tic_bird@lemm.ee
    link
    fedilink
    English
    17311 months ago

    That’s so stupid, also because they have fixes for Zen and Zen 2 based Epyc CPUs available.

    Intel vs. AMD isn’t “bad guys” vs. “good guys”. Either company will take every opportunity to screw their customers over. Sure, “don’t buy Intel” holds true for 13th and 14th gen Core CPUs specifically, but other than that it’s more of a pick your poison.

    • haui
      link
      fedilink
      English
      6411 months ago

      Tangent: If we started buying risc-v systems we might get to a point where they can actually compete.

      • PrivateNoob
        link
        fedilink
        English
        4711 months ago

        That’s still far away from us as a consumer standpoint, but I’m eagerly waiting for a time when I could buy a RISC V laptop with atleast midrange computing capabalities

        • haui
          link
          fedilink
          English
          911 months ago

          I‘m more on the builder/tinkerer side so I‘m pretty much in starting position with risc-v now. But yes, its going to be some time before any of it is user ready as a pc.

            • haui
              link
              fedilink
              English
              511 months ago

              Indeed I am. I‘m in posession of a working laptop but I could maybe order a riscv tablet from pine64. I already have the pinetime and the stuff is pretty awesome.

        • haui
          link
          fedilink
          English
          311 months ago

          Yeah, thats the reason why we‘re in this capitalist hellhole. Perfection comes from billionaire money, nothing else.

            • haui
              link
              fedilink
              English
              111 months ago

              I’m not buying hardware that doesn’t suit my needs as an investment hoping maybe it eventually will.

              You were misrepresenting things. Your needs have nothing to do with things not being functional. Something can be perfectly functional and not meet someones needs. Nobody said you should buy it as an investment.

              • @conciselyverbose@sh.itjust.works
                link
                fedilink
                English
                611 months ago

                My interpretation was by far the most generous to your position, because it’s the only way it’s coherent.

                If people bought [this hardware that doesn’t actually provide anything anyone can realistically use at a reasonable price] it might eventually not suck. That’s treating a current purchase as an imaginary investment in maybe eventually being able to buy something useful.

                • haui
                  link
                  fedilink
                  English
                  111 months ago

                  My interpretation was by far the most generous to your position, because it’s the only way it’s coherent.

                  You’re entitled to your opinion, I guess.

                  hardware that doesn’t actually provide anything anyone can realistically use

                  Thats misrepresenting reality and making assumptions while clearly showing lack of expertise

                  at a reasonable price

                  Thats completely arbitrary. If a price is reasonable or not depends on many factors. Obvious oversymplification.

                  That’s treating a current purchase as an imaginary investment in maybe eventually being able to buy something useful.

                  This shows that you have no idea what you are talking about. Small companies and open source projects depend on people buying their products instead of cheaper, sometimes better performing products of big conglomerates for other reasons than price alone.

                  • @conciselyverbose@sh.itjust.works
                    link
                    fedilink
                    English
                    211 months ago

                    Value is absolutely not arbitrary.

                    “Reasonable” means comparable with x86/ARM at the same performance level. Anything more is, by definition, not capable of being reasonably priced.

                    You’re again advocating for an imaginary investment in a bad product.

        • Amanda
          link
          fedilink
          English
          311 months ago

          This is one of the hardest earned lessons I’ve ever learned, and I’ve had to learn it over and over again. I think it’s mostly stuck now but I still make the same mistake from time to time.

        • haui
          link
          fedilink
          English
          711 months ago

          I really enjoyed watching it. Thanks for referring to it.

      • Possibly linux
        link
        fedilink
        English
        611 months ago

        At the rate we are going Qualcomm might pivot to Risc-V (they are being sued by ARM)

        • haui
          link
          fedilink
          English
          211 months ago

          Interesting! Thanks for chiming in. I‘ll read up about it.

      • @narc0tic_bird@lemm.ee
        link
        fedilink
        English
        611 months ago

        I’m waiting to see how DeepComputing’s RISC-V mainboard for the Framework turns out. I’m aware that this is very much a development platform and far from an actual end-user product, but if the price is right, I might jump in to experiment.

        • haui
          link
          fedilink
          English
          311 months ago

          Sounds like a cool idea! :)

    • Victor
      link
      fedilink
      English
      911 months ago

      How is AMD “screwing us over”? Surely they aren’t doing this on purpose? That seems very cynical.

        • Victor
          link
          fedilink
          English
          1511 months ago

          That’s not what I was referring to. I was referring to the act of “adding vulnerabilities”. Surely they aren’t doing that on purpose. And surely they would add fixes for it if it was economically viable? It’s a matter of goodwill and reputation, right?

          I don’t know, I just don’t think it’s AMD’s business model to “screw over” their customers. I just don’t.

          • @narc0tic_bird@lemm.ee
            link
            fedilink
            English
            2611 months ago

            What I mean by that is that they will take a huge disservice to their customers over a slight financial inconvenience (packaging and validating an existing fix for different CPU series with the same architecture).

            I don’t classify fixing critical vulnerabilities from products as recent as the last decade as “goodwill”, that’s just what I’d expect to receive as a customer: a working product with no known vulnerabilities left open. I could’ve bought a Ryzen 3000 CPU (maybe as part of cheap office PCs or whatever) a few days ago, only to now know they have this severe vulnerability with the label WONTFIX on it. And even if I bought it 5 years ago: a fix exists, port it over!

            I know some people say it’s not that critical of a bug because an attacker needs kernel access, but it’s a convenient part of a vulnerability chain for an attacker that once exploited is almost impossible to detect and remove.

            • Victor
              link
              fedilink
              English
              1
              edit-2
              11 months ago

              Well, you feel how you feel, and you choose the products you want after this. Good luck to you! 👍

              Edit: So many down votes for wishing someone good luck. The hive mind is odd sometimes.

            • @Jakeroxs@sh.itjust.works
              link
              fedilink
              English
              111 months ago

              Maybe they’ll reverse course with enough blowback, they did that once with ryzen already, don’t remember which Gen it was but it wasn’t going to be backwards compatible with certain type of mobos, but then they released it anyway and some mobo manufacturers did provide bios updates to support it.

              Similarish situation could happen here, the biggest hangup I’d think is that the 3000 series is nearly 5 years old, and getting mobo manufacturers on board for that could be difficult.

            • Victor
              link
              fedilink
              English
              211 months ago

              I’m guessing it’s a balance between old products, effort, severity, etc. As we’ve learned, this is only an issue for an already infected system. 🤷‍♂️

                • @Auli@lemmy.ca
                  link
                  fedilink
                  English
                  111 months ago

                  Just because a store is still selling their stock doesn’t mean AND is still making them and selling them.

                • Victor
                  link
                  fedilink
                  English
                  111 months ago

                  Ryzen 3000 series CPUs are still sold as new

                  Ah, that changes things. Not great. But still,

                  uninfected systems will intentionally be left vulnerable

                  what I meant was that apparently only compromised systems are vulnerable to this defect.

          • @ShortN0te@lemmy.ml
            link
            fedilink
            English
            1411 months ago

            No, but those vulnerabilities where there when you bought it.

            Would a car have a defect that was shown 5 years later, then the manufacturer would have to recall it or offer a repair program and or money in exchange.

            Since everything is proprietary you cannot even fix things like this by yourself. The manufacturer needs to be held liable.

            • Victor
              link
              fedilink
              English
              311 months ago

              Would a car have a defect that was shown 5 years later, then the manufacturer would have to recall it or offer a repair program and or money in exchange.

              I mean… A car is different, depending on the defect. It’s like “this window only breaks if you’ve already crashed the car”. (The defect only causes a vulnerability if the system is already compromised AFAICT.) And 5 years is much, much younger for a car compared to a CPU, but that’s not the important bit, I know.

              But I agree with you all, I am not saying it shouldn’t be fixed, I was just saying I don’t think AMD is looking to screw over their customers on purpose. That’s all.

              • Norah (pup/it/she)
                link
                fedilink
                English
                5
                edit-2
                11 months ago

                “this window only breaks if you’ve already crashed the car”

                No, it’s usually more like “this thing will break and cause a car crash” or “this thing will murder everyone in the vehicle if you crash”. And companies still will not fix it. Look at the Ford Pinto, executives very literally wrote off people’s deaths as a cost of doing business, when they’d turn into fireballs during even low speed rear-end collisions. Potentially burning down the car that hit them too.

                Edit: I mean, just look at the Takata airbag recall. 100 million airbags from 20 different carmakers recalled because they wouldn’t activate during a crash.

                • Victor
                  link
                  fedilink
                  English
                  2
                  edit-2
                  11 months ago

                  When I said “It’s like”, I meant it as a simile to what’s going on with AMD right now. Not with what’s actually going on with car companies. Car companies are a whole different topic and discussion, of which I know nothing.

                  • Norah (pup/it/she)
                    link
                    fedilink
                    English
                    111 months ago

                    Sorry, I reread it and I understand now that you were referencing the AMD chip in a comparison. I guess I still would compare it most to the Takata airbag situation. You’re right that nothing happens on it’s own, but once you’ve “crashed the car” then it kind of is a lot like an airbag not going off. It infects your computer on a hardware level, and any future OS running off that motherboard is potentially vulnerable in a way that’s impossible to tell.

          • @conciselyverbose@sh.itjust.works
            link
            fedilink
            English
            1211 months ago

            The cost isn’t that high. They’re already doing it for a bunch of parallel systems.

            In a just world they’d be legally required to provide the fixes, or fully refund the entire platform cost. It’s not remotely ethical to allow this to exist unpatched anywhere, regardless of support life.

    • @Decipher0771@lemmy.ca
      link
      fedilink
      English
      711 months ago

      “Both sides”

      “Vote third party!”

      Wtf seriously this isn’t the same thing remotely but the arguments used are.