laitimes

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

Xiao Cha was sent from The Temple of Oufei

Qubits | Official account QbitAI

There is not much time left for Nvidia.

Lapsus$, a hacking group that stole Nvidia's 1TB of data, made a request:

The GPU drivers of Windows, macOS, and Linux systems must be completely open sourced before the end of The US time on March 4 (4 p.m. Beijing time on the 5th), otherwise the confidential data will be made public.

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

Last week, a ransomware group called Lapsus$ claimed that they had successfully hacked into Nvidia's corporate network and stole a large number of hardware schematics and software source code, including Nvidia's yet-to-be-released RTX 3090 Ti.

Lapsus$ then proposed to Nvidia to remove the mining limitations in all 30 Series graphics drivers.

On Tuesday, Lapsus$, which seemed to speak for miners, changed the requirements, which is an open source graphics driver.

So there was a magical scene on the Internet: miners and players who were originally inseparable are now working together to eat melons.

There are even netizens cheering for the miners:

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

What I didn't expect was that the events that were already dramatic enough had another twist this morning.

Lapsus$ sent Nvidia good news and bad news.

The good news is that they may delay the disclosure of confidential data.

The bad news is that they are negotiating with buyers to sell the data for $1 million.

At this moment, Lao Huang's heart did not know what it was like.

Nvidia was hacked

On February 26, the British "Daily Telegraph" was the first to report the news that Nvidia was hacked.

Nvidia later admitted to being hacked on Feb. 23.

The hacking group Lapsus$ claimed responsibility for the attack, also saying it already owned 1tb of Nvidia's proprietary data and uploaded employees' emails and passwords.

Lapsus$ is not well known in the industry, and their first ransomware attack was last December, when they attacked brazil's ministry of health, stealing 50tb of data, including vaccination information of Brazilian citizens.

Later, Lapsus$ also attacked a media company in Portugal and a telecommunications company in South America.

Nvidia was the first tech giant they successfully attacked.

Over the weekend, Lapsus$ leaked a file called "integdev_gpu_drv.rar" in the Telegram group, which is close to 20GB, but the download address has been blocked.

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

However, the netizens who have downloaded the data analyzed the content and found many important data.

For example, Nvidia will release the flagship code name AD102 in the 40 series graphics cards, with a 384-bit bus, 24GB of video memory, and the L2 cache to 96MB.

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

The header file for Nvidia's super-resolution technology, DLSS, was also compromised.

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

Lapsus$ also has access to the emails and passwords of 71,000 Nvidia employees, who are said to have internally asked employees to update their passwords.

The above is just the tip of the iceberg of leaking data, Lapsus$ said that as long as Nvidia meets their requirements, they will delete a large hw folder, which contains the schematic and source code of NVIDIA graphics cards.

Miner players work together to eat melons

In recent years, NVIDIA can be said to have offended users many times.

Because the "mine bosses" who mined cryptocurrencies took a large number of graphics cards, the price of graphics cards soared, and players could not find a card.

Therefore, Nvidia updated the GPU driver and added LHR, or Lite Hash Rate, to limit the mining rate, hoping to allow more graphics cards to flow into the hands of players.

In fact, this move did not alleviate the shortage of graphics cards, and the miners did not take advantage of it, which can be said to offend both sides.

As for the problem of graphics card drivers, it goes back 10 years.

Because Nvidia GPUs do not support the open source operating system Linux, The father of Linux, Linus Torvalds, scolded "fxxk NVidia" in a 2012 speech and made famous gestures.

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

No matter which of the hackers' requirements Nvidia meets, the miners and players will always have a winner, so there is a spectacle of two hostile camps working together to eat melons.

The material in the hands of the hacking organization Lapsus $ is fierce enough, which has aroused the curiosity of the majority of netizens.

When the media asked Nvidia whether it would meet the hacker's requirements, Nvidia only gave a brief official statement and did not say whether it would meet the hacker's requirements.

And in this incident, the most innocent is probably Nintendo.

Leaked data shows that Nvidia is developing chips for Nintendo's next-generation consoles.

The data has been confirmed to contain the source code for the DLSS technology developed for Nintendo, in addition to many references to "NVN2", which is the codename of the Tegera X1 chip used by the Switch.

Nvidia was hacked with an ultimatum: today the GPU driver must be open sourced or 1TB of confidential data will be released

So will "NVN2" be a Switch Pro? Nintendo players said there was hope.

Reference Links:

[1]https://techcrunch.com/2022/03/04/nvidia-ransomware-hackers-demands/

[2]https://www.theverge.com/2022/3/4/22962217/nvidia-hack-lapsus-have-i-been-pwned-email-breach-password

Read on