Hacker News Reader

Is it just me or is there almost no information in this advisory besides telling people to update their firmware?

I don't know what this vulnerability is or how it is exploited and I barely know what systems of mine might be affected by it.

View on HN

Yes, which makes it really annoying because the one thing you want to know is how you can see if this has already been exploited which is the difference between a system wipe and just a firmware upgrade.

I would truest the message "has been exploited" but not the message "has not been exploited". Who could state the latter with any sincerity? Intel could do state this only with confidence if they'd monitor every of their systems sold, which I sincerely hope is not the case. If you have vulnerable, critical systems you need to consider them being exploited. The bug was there for years and for all what we know at least state actors have been going to great lengths to exploit vulnerabilities they could get hold of.

That's correct. You can't prove a negative, so this is always true in the context of a potential breach.

Reply on news.ycombinator.com