Re: Uh Oh - NEW Data Leak Found in Intel Processors

The Natural Philosopher <tnp@invalid.invalid> writes:

On 24/05/2025 11:08, Richard Kettlewell wrote:

That’s rather naive. Domestic users are absolutely a target. For
example when building a botnet the ownership of the endpoints is
totally irrelevant - it’s all about quantity, not quality.

 
Ah. Do you think this is the easiest way to build a botnet?

Indeed not; BPRC would be one step in a more complex attack, in this
case probably one of several steps between an initial compromise and
establishing a persistent foothold.

My impression is that the technical lack of sophistication of most
ratware apps is only exceeded by the complete disregard of basic
security on internet connected hosts.

Attacks get added to collections like Metasploit, not much
sophistication is really required to use them.

All that said I’m sure you’re right that real-life botnets don’t need to
bother with anything much smarter than trying common passwords, but they
are just an example: the point is that domestic users are in general
terms targets, even when not reading on the toes of the rich, powerful
or criminal.

Meanwhile, unless you’re a developer on a compiler, hypervisor, kernel
or browser then all you can do about is keep up to date with updates...

--
https://www.greenend.org.uk/rjk/