niconiconi,

Fun fact: Just like microcontrollers, the fuse bits in desktop CPUs can occasionally get loose, causing single-bit flips. This is likely responsible for many strange CPUIDs in the wild, some reported cases include "GenuineIotel" CPUs [1] and a "Intel Core i4" CPU. [2]

[1] https://twitter.com/InstLatX64/status/1101230794364862464
[2] https://www.bilibili.com/video/BV13t4y127TX

starfrost,
@starfrost@wetdry.world avatar

@niconiconi the real question is when will the bit turning off the rest of the cores in the ccx in my cpu flip on its own and my ryzen 5 5600 will magically become a ryzen 7 5700x (slightly overclocked and with the wrong cpuid and probably busted cores)

LockEx,
@LockEx@ioc.exchange avatar

@niconiconi cosmic rays have been attributed to bit flipping in memory.
https://www.johndcook.com/blog/2019/05/20/cosmic-rays-flipping-bits/

niconiconi,

@LockEx Not just "attributed", it's an experimental fact. But it's likely irrelevant in the case I've showed here. In this case it's not volatile DRAM data corruption that would disappear after a reboot, it's a case of permanent data corruption within the non-volatile ROM. DRAM is volatile and easy to flip by cosmic rays, ROM is not easy. It's still possible to flip a Flash or ROM cell via radiation, but only when it's flying in the outer space. Most likely it's just a natural failure mode of ROM/Flash due to charge leakage.

niconiconi,

@LockEx If you're interested, here are some great technical standards that explain the problem of data corruptions from cosmic rays by the International Telecommunication Union. I've shared previously, reposting for visibility...

K.124 : Overview of particle radiation effects on telecommunication systems https://www.itu.int/rec/T-REC-K.124-202201-I/en

K.130 : Neutron irradiation test methods for telecommunication equipment (yes, apparently some people already started testing telecom equipment in critical infrastructure using a particle accelerator) https://www.itu.int/rec/T-REC-K.130-202201-I/en

gsuberland,
@gsuberland@chaos.social avatar

@niconiconi I am currently in the midst of writing a paper on CPUID trickery that has taken me years to complete and only now do I find out that it's not immutable??

gsuberland,
@gsuberland@chaos.social avatar

@niconiconi I did wonder why the instlatx datasets had some weird stuff in them.

niconiconi,

@gsuberland The fuse bits (at least those that control the marketing name) are likely controlled by a EEPROM with write protection, just like microcontrollers. Gamers Nexus's AMD tour video had a section about how CPU SKUs are programmed by fuse bits from JTAG. Another fun fact: on AMD, the "model name" part of the CPUID is (temporarily) overwrittable by OS via MSR. https://chipsandcheese.com/2022/10/27/why-you-cant-trust-cpuid/

gsuberland,
@gsuberland@chaos.social avatar

@niconiconi I knew they were factory programmed rather than mask ROM but didn't know they were susceptible to glitching.

that AMD overwrite is cool AF :D

f4grx,
@f4grx@chaos.social avatar

@gsuberland @niconiconi GenuineHack

niconiconi,

@gsuberland I don't think it's a one-time glitching, the CPUID corruption I linked is permanent (at least for that "Core i4").

gsuberland,
@gsuberland@chaos.social avatar

@niconiconi yeah, I guess it's some weird charge leakage and the LSB got dropped from 1 to 0?

gsuberland,
@gsuberland@chaos.social avatar

@niconiconi I also just realised that this needs to be added to my rant on "statements of volatility are lies"

jpm,
@jpm@aus.social avatar

@gsuberland @niconiconi with enough ionising radiation, all data is mutable

gsuberland,
@gsuberland@chaos.social avatar

@jpm @niconiconi true, but even if you set the bar at "you can modify this without using a delidding tool and a very fancy optical train and a pulsed UV laser" most SoVs are still divorced from reality.

gsuberland,
@gsuberland@chaos.social avatar

@niconiconi damnit, now I want to crowbar Vcore with an ultrafast GaN FET during a tight cpuid instruction loop to see what happens

penguin42,
@penguin42@mastodon.org.uk avatar

@niconiconi @gsuberland I thought the model name was set by the bios (or maybe microcode?) on some devices. Also note in a VM the hypervisor can make anything up there.

eragon,

@niconiconi @gsuberland Then with some electron beam trickery I'm pretty sure some scientists will rewrite those EEPROM for fun and get really funny CPU names.

PS: Saying this because I know someone in second year of their master in computer science that had to read and report on scientists hacking into AIs running on GPUs. By using an electron beam to break the AI.

gsuberland,
@gsuberland@chaos.social avatar

@eragon @niconiconi this would be a fun project for @breakingtaps :D

  • All
  • Subscribed
  • Moderated
  • Favorites
  • Electronics
  • ethstaker
  • DreamBathrooms
  • InstantRegret
  • tacticalgear
  • magazineikmin
  • Youngstown
  • thenastyranch
  • mdbf
  • slotface
  • rosin
  • modclub
  • kavyap
  • cubers
  • osvaldo12
  • megavids
  • khanakhh
  • cisconetworking
  • Durango
  • everett
  • ngwrru68w68
  • Leos
  • normalnudes
  • GTA5RPClips
  • tester
  • provamag3
  • anitta
  • JUstTest
  • lostlight
  • All magazines