It seems like every month or so we hear about a new security flaw affecting tons of consumer-grade CPUs. Perhaps that shouldn’t be surprising, though, since the complexities of modern processors and the PCs around them have grown to truly labyrinthian degrees.
But the latest issue affecting AMD processors is pretty big — so big, in fact, that it extends back through generations of CPUs, some of which are long out of support and may never be fixed.
“You basically have to throw your computer away.”
Enrique Nissim, security researcher
The “Sinkclose” flaw allows an infected PC to run unchecked code on an AMD Ryzen processor in System Management Mode, bypassing checks in Windows and even most BIOS and UEFI setups. The issue was discovered by researchers from IOActive and shown off at Defcon.
Once compromised, these systems can be infected with bootkits that run circles around conventional security tools, including antivirus suites and Windows’ own built-in defenses. It could even be able to remain on a PC after a completely fresh operating system install.
Researcher Enrique Nissim described the deeply technical process required to physically scour the PC’s memory of the infection, then summed it up with: “You basically have to throw your computer away.”
AMD says that it had been alerted to the security flaw and has already “released mitigation options” for Ryzen-based PCs and industrial data center machines, and that embedded AMD hardware (like the APUs in game consoles) will be updated soon.
AMD’s full list of products affected by the Sinkclose vulnerability includes chips as old as the Ryzen 3000 series from 2019. All of these will be updated to close the vulnerability.
But that list is at odds with the report issued to Wired, which says the vulnerability exists in chips going all the way back to 2006. The majority of those are, obviously, far beyond their last official updates — and to be fair, most of them probably aren’t currently active. But that’s such a huge number of machines, both personal and industrial, that hundreds of thousands of them are inevitably still in operation and possibly even running crucial infrastructure.
The good news is that this isn’t an easy vulnerability to exploit, at least as far as we know right now because the researchers are giving AMD time to issue patches before they fully explain it. But for it to be exploited, a program would need kernel-level access to a system in order to inject the code into the pre-OS boot sequence. (The researchers say that Microsoft and its OEM partners should be sending out updates that patch the vulnerability on current systems before too long.)
The bad news is that kernel-level vulnerabilities, while technically complex and often patched by Microsoft or other companies, are fairly common. They’re exactly the kind of vulnerabilities that state-level teams of hackers and industrial espionage agents look for, because they’re so powerful and can be exploited on so many systems.
Further reading: Hackers can watch your screen via HDMI radiation
It seems like every month or so we hear about a new security flaw affecting tons of consumer-grade CPUs. Perhaps that shouldn’t be surprising, though, since the complexities of modern processors and the PCs around them have grown to truly labyrinthian degrees.
But the latest issue affecting AMD processors is pretty big — so big, in fact, that it extends back through generations of CPUs, some of which are long out of support and may never be fixed.
“You basically have to throw your computer away.”Enrique Nissim, security researcher
The “Sinkclose” flaw allows an infected PC to run unchecked code on an AMD Ryzen processor in System Management Mode, bypassing checks in Windows and even most BIOS and UEFI setups. The issue was discovered by researchers from IOActive and shown off at Defcon.
Once compromised, these systems can be infected with bootkits that run circles around conventional security tools, including antivirus suites and Windows’ own built-in defenses. It could even be able to remain on a PC after a completely fresh operating system install.
Researcher Enrique Nissim described the deeply technical process required to physically scour the PC’s memory of the infection, then summed it up with: “You basically have to throw your computer away.”
AMD says that it had been alerted to the security flaw and has already “released mitigation options” for Ryzen-based PCs and industrial data center machines, and that embedded AMD hardware (like the APUs in game consoles) will be updated soon.
AMD’s full list of products affected by the Sinkclose vulnerability includes chips as old as the Ryzen 3000 series from 2019. All of these will be updated to close the vulnerability.
But that list is at odds with the report issued to Wired, which says the vulnerability exists in chips going all the way back to 2006. The majority of those are, obviously, far beyond their last official updates — and to be fair, most of them probably aren’t currently active. But that’s such a huge number of machines, both personal and industrial, that hundreds of thousands of them are inevitably still in operation and possibly even running crucial infrastructure.
The good news is that this isn’t an easy vulnerability to exploit, at least as far as we know right now because the researchers are giving AMD time to issue patches before they fully explain it. But for it to be exploited, a program would need kernel-level access to a system in order to inject the code into the pre-OS boot sequence. (The researchers say that Microsoft and its OEM partners should be sending out updates that patch the vulnerability on current systems before too long.)
The bad news is that kernel-level vulnerabilities, while technically complex and often patched by Microsoft or other companies, are fairly common. They’re exactly the kind of vulnerabilities that state-level teams of hackers and industrial espionage agents look for, because they’re so powerful and can be exploited on so many systems.
Further reading: Hackers can watch your screen via HDMI radiation
Amazon’s Leadership and Corporate Culture: Lessons from Jeff Bezos
Amazon, one of the most influential and innovative companies in the world, has a corporate culture and leadership philosophy shaped largely by its founder, Jeff Bezos. Bezos’s approach to leadership and his vision for Amazon have set the company apart in the highly competitive tech and retail sectors. This article explores the key elements of Amazon’s leadership and corporate culture, and the lessons that can be drawn from Bezos’s unconventional methods.
The Bezos Leadership Philosophy
Jeff Bezos founded Amazon in 1994, and his leadership philosophy has been instrumental in driving the company’s success. Central to Bezos’s approach is a relentless focus on the customer. He famously emphasized, “We’re not competitor obsessed, we’re customer obsessed. We start with the customer and we work backwards.” This mantra has guided Amazon’s product development, customer service, and innovation strategies.
Bezos’s customer-centric philosophy manifests in various ways. For instance, Amazon’s customer service policies are designed to maximize customer satisfaction, often going above and beyond industry standards. This includes offering easy returns, fast shipping, and a broad range of products. The commitment to customer experience is not merely a slogan but a guiding principle that influences every aspect of Amazon’s operations.
Innovation and Risk-Taking
Another hallmark of Bezos’s leadership is a strong emphasis on innovation and risk-taking. Bezos has been known for his willingness to experiment and embrace failure as part of the innovation process. His approach is encapsulated in the principle that “failure and invention are inseparable twins.” This mindset has led to the creation of groundbreaking products and services such as Amazon Web Services (AWS), Kindle, and Alexa.
Bezos encourages employees to think big and explore unconventional ideas. Amazon’s “Day 1” mentality, as described by Bezos, means treating every day as if it were the first day of the company’s existence. This approach fosters a culture of continuous improvement and creativity, where employees are motivated to push boundaries and explore new possibilities.
The Two-Pizza Rule
Bezos’s leadership style also emphasizes the importance of small, agile teams. The “Two-Pizza Rule” is a notable example of this principle. According to this rule, teams should be small enough to be fed with two pizzas. The rationale behind this is that smaller teams are more effective at communicating and collaborating, which leads to faster decision-making and more innovative solutions.
The Two-Pizza Rule has influenced Amazon’s organizational structure, promoting a decentralized and flexible approach to management. It encourages teams to be autonomous and take ownership of their projects, leading to a more dynamic and responsive organization.
Long-Term Thinking
One of the defining features of Bezos’s leadership is his long-term thinking. Bezos has consistently prioritized long-term goals over short-term gains, a strategy that has often led to criticism from investors focused on quarterly results. However, Bezos believes that focusing on the long term is essential for building a sustainable and successful business.
This long-term perspective is reflected in Amazon’s investments in infrastructure, technology, and talent. For example, Amazon’s substantial investments in its fulfillment network and cloud computing services were made with the expectation of significant long-term returns. Bezos’s willingness to forgo immediate profits in favor of future growth has been a key driver of Amazon’s success.
Leadership Principles
Amazon’s leadership principles are a cornerstone of its corporate culture and reflect Bezos’s values and vision. These principles guide decision-making, employee behavior, and company policies. Some of the most notable principles include:
Customer Obsession: Always start with the customer and work backwards. Work to earn and keep customer trust.
Invent and Simplify: Seek out new solutions and simplify processes to make things easier for customers.
Hire and Develop the Best: Raise the performance bar with every hire and promotion. Recognize exceptional talent and help them grow.
Deliver Results: Focus on the key inputs for your business and deliver them with the right quality and in a timely fashion.
These principles help create a unified company culture where employees are aligned with Amazon’s mission and values. They also serve as a framework for evaluating performance and making strategic decisions.
A Culture of High Standards
Bezos is known for his insistence on high standards, which is reflected in Amazon’s corporate culture. He believes that maintaining high standards is crucial for driving excellence and innovation. This approach has led to a demanding work environment where employees are expected to deliver exceptional results and continuously improve.
While this culture of high standards has contributed to Amazon’s success, it has also been a point of contention. Critics have pointed to the intense pressure and high expectations placed on employees, leading to concerns about work-life balance and employee well-being. Bezos and Amazon have addressed these concerns in various ways, including investing in employee benefits and programs aimed at improving workplace conditions.
Lessons for Other Organizations
Amazon’s leadership and corporate culture offer several valuable lessons for other organizations:
Customer Focus: Prioritizing the customer can drive innovation and create a competitive edge. Companies should continually seek to understand and meet customer needs.
Embrace Failure: Viewing failure as a learning opportunity rather than a setback can foster innovation and resilience. Encouraging experimentation and risk-taking can lead to breakthroughs.
Small Teams, Big Impact: Smaller, autonomous teams can be more agile and effective. Empowering teams to make decisions and take ownership can drive productivity and creativity.
Long-Term Vision: Balancing short-term pressures with a focus on long-term goals can lead to sustainable growth and success. Investing in future-oriented projects can pay off over time.
High Standards: Setting high standards and striving for excellence can drive performance and improvement. However, it is important to balance this with consideration for employee well-being.
Conclusion
Jeff Bezos’s leadership and Amazon’s corporate culture have been instrumental in shaping the company’s success and influence. Bezos’s focus on the customer, innovation, long-term thinking, and high standards has created a unique and powerful organizational environment. While there are challenges associated with this approach, the lessons from Amazon’s leadership can provide valuable insights for other organizations striving for excellence and growth.
