That’s so stupid, also because they have fixes for Zen and Zen 2 based Epyc CPUs available.

Intel vs. AMD isn’t “bad guys” vs. “good guys”. Either company will take every opportunity to screw their customers over. Sure, “don’t buy Intel” holds true for 13th and 14th gen Core CPUs specifically, but other than that it’s more of a pick your poison.

How is AMD “screwing us over”? Surely they aren’t doing this on purpose? That seems very cynical.

They are 100% intentionally not patching old chips intentionally by not allocating resources to it. It’s a conscious choice made by the company.

That’s not what I was referring to. I was referring to the act of “adding vulnerabilities”. Surely they aren’t doing that on purpose. And surely they would add fixes for it if it was economically viable? It’s a matter of goodwill and reputation, right?

I don’t know, I just don’t think it’s AMD’s business model to “screw over” their customers. I just don’t.

No they are just choosing not to roll out the fix to a known issue, which is screwing customers over on purpose (to increase profits). It’s not a matter of goodwill, they sold a product that then turned out to have a massive security flaw, and now they don’t want to fix even though they absolutely could.

I’m guessing it’s a balance between old products, effort, severity, etc. As we’ve learned, this is only an issue for an already infected system. 🤷‍♂️

Ryzen 3000 CPU are still sold as new, I even bought one six months ago, they’re no where near being classified as “old”. And this is not an only an issue for already infected systems because uninfected systems will intentionally be left vulnerable.

Ryzen 3000 series CPUs are still sold as new

Ah, that changes things. Not great. But still,

uninfected systems will intentionally be left vulnerable

what I meant was that apparently only compromised systems are vulnerable to this defect.

what I meant was that apparently only compromised systems are vulnerable to this defect.

That is not correct. Any system where this vulnerability is not patched out by AMD (which is all of gen 1, 2 and 3 CPUs) is left permanently vulnerable, regardless of whether or not they already are compromised. So if your PC is compromised in a few months for some reason, instead of being able to recover with a reinstall of your OS, your HW is now permanently compromised and would need to be thrown out…just because AMD didn’t want to patch this.

What I meant was exactly that, which you corroborated as correct. You’d first have to already compromise these systems, as well as exploit this vulnerability.

Gosh, it’s not easy getting my point across here today, I’m sorry.

All I’m saying is that I don’t think AMD is doing this to us, on purpose. I think it’s just happened, and they’re not handling it very well, even though it’s somewhat understandable. At least to me. 🤷‍♂️

But then again, I have no reason to be attacked or have my system compromised, so my situation is better than others’, perhaps.

I think what most people disagree with, is that the active choice from AMD to not fix a very fixable issue, is a choice they know leaves customers is a seriously bad position. This is something they choose to do to their customers, because they could just as well choose to help them.

they could just as well choose to help them.

I think that’s what I have a hard time believing. If they could “just as well” help, it is my belief that they also would. Because I don’t think they’re morons. I think they know this hurts their reputation. There has to be some obstacle, be it financial or lack of man power or… something. That is my belief.

Don’t you (all) think that sounds more likely than them just leaving their customers in the dark for no other reason than not having to do work?

Of course there’s a financial reason, they’ve done a cost}benefit analysis and decided that it’s financially better to screw over those customers than to spend money fixing it. But that’s exactly the issue!

I mean… 🤷‍♂️ The analysis is made, decision made. I probably have an affected system but… What’s the real risk for private end users? Should I really be so concerned?