What are the technical details of microcode-20130808.tgz?

[LWats]

Hello,

I have heard that microcode-20130808.tgz (https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=23082 Download Center) supposedly patches vunerabilities and increases system performance. But I have never seen such a vague defintion before. I would like to know if possible:

• The exact bugs and/or vunerabilties which are fixed
• What other things might have been updated; this would dramatically help before issuing a deployment with untended regressions over the network.
• e.g. a real changelog.

Additionally...

• Why is this code not opensource?
• Would you ever consider making it open source and under a https://www.gnu.org/licenses/license-list.html# GPLCompatibleLicenses free software license in light of recent events? e.g. http://www.techrepublic.com/blog/it-security/researchers-create-nearly-undetectable-hardware-backdoor/ Researchers create nearly undetectable hardware backdoor - TechRepublic

- This would allow:

1. Independent Security Research over the code base to strengthen the code and make it less vunerable
2. Ease confidence that Intel is not installing backdoors
3. The addition of new features and improvements over time.

Thank you for your time.

[Allan_J_Intel1]

Hi anonymousfriend,

Your issue has been escalated to our research department; as soon as I can, I will send you a message with my findings. Thank you for your patience and understanding.

Allan.

[LWats]

Hello Allan,

Any future findings on this?

Here is more reason to provide more transparency and establish trust -

December 29th:

http://www.spiegel.de/international/world/catalog-reveals-nsa-has-back-doors-for-numerous-devices-a-940994.html http://www.spiegel.de/international/world/catalog-reveals-nsa-has-back-doors-for-numerous-devices-a-940994.html

Thank you.

[Allan_J_Intel1]

I am still waiting for information from engineering; as soon as I can, I will send you a message with my findings.

Allan.

[LWats]

Thank you allan, I look forward to their response. Also if possible it would benefit others to make a public statement vs. contacting me directly.