nVidia data leak thread

[BFG10K]

Keeping updated as info comes in:

DLSS: https://www.techpowerup.com/292479/nvidia-dlss-source-code-leaked
Drivers: https://www.techpowerup.com/292512/...rs-demand-geforce-drivers-be-made-open-source
Ada Lovelace memory bus: https://www.techpowerup.com/292555/nvidia-geforce-ada-lovelace-memory-bus-width-info-leaked
Ada Lovelace caches: https://www.techpowerup.com/292529/nvidia-increases-caches-for-ada-lovelace-to-catch-up-with-amd
National security disaster? https://semianalysis.substack.com/p/nvidia-hacked-a-national-security?s=r

 

[blckgrffn]

Looks like it came from the recent hack. If true it opens up a whole can of worms for nVidia, and I can't imagine they're too happy about it. If China copies this proprietary information nVidia can't do anything about it.

NVIDIA DLSS Source Code Leaked

The mother of all cyberattacks hit NVIDIA over the weekend, putting out critical driver source-code, the ability to disable LHR for mining, and even insights into future NVIDIA hardware, such as the Blackwell architecture. An anonymous tipster sent us this screenshot showing a list of files they...

www.techpowerup.com

The LHR defeating code was bounty enough for this effort. Not too mention all the other information that can be gleaned and it's value.

 

[Saylick]

I got a feeling that DLSS 2.0 doesn't contain much secret sauce beyond using Nvidia specific executive units, i.e. tensor cores, when running the portions of the algorithm that use machine learning. I'm just speculating here but if Intel can do XeSS and get most of the performance of DLSS 2.0, which is basically temporal super sampling that uses machine learning to do the most optimal curve fitting between pixels from each frame, but without the need for tensor cores, then the competitive landscape with respect to DLSS and other upscaling techniques is the same as before. It does suck for Nvidia to have their info leaked, especially given their proprietary approach to every technology they claim to invent, but I honestly don't think this leak harms them that much. The driver leaks might do more damage, however.

 

[Mopetar]

DLSS isn't worth much. Anything related to hardware design is far more valuable.

 

[Asterox]

Hm, so Nvidia kindergarden marketing or counter attack is failed.

NVIDIA allegedly hacked the ransomware attackers back by encrypting 1TB of its stolen data - VideoCardz.com

NVIDIA hacks the attackers Vx-underground, a group sharing samples of the malware and viruses, has reported on Twitter that the supposed NVIDIA ransomware attack was performed by a South American group called LAPU$. Supposed messages from the hacking group, Source: @vx-underground The group...

videocardz.com

 

[Saylick]

The debacle continues...

Hackers now demand NVIDIA should make their drivers open source or they leak more data - VideoCardz.com

NVIDIA in even bigger trouble Hackers that infiltrated NVIDIA systems are now threatening to release more confidential information unless the company commits to open sourcing their drivers. Following (now) multiple reports of the ransom cyber attack on NVIDIA servers, the hacking group LAPSUS$...

videocardz.com

I don't think Nvidia is going to do anything seeing as how the hacker group has no reason to uphold their promise. You have to treat whatever was stolen as a lost cause and should not be negotiating with terrorists who can totally kill the hostages even after you give them the ransom money.

 

[Shmee]

They should, at very least, do away with LHR. Open source drivers would be nice too.

 

[Krteq]

For open source drivers we will need signed firmwares first

 

[GodisanAtheist]

Time for NV to develop an Machine/Deep Learning cyberwarfare suite and get into the data protection business...

 

[Asterox]

Hm, big problems no doubt.

Nvidia Hacked - A National Security Disaster

The hack contains sensitive info on future GPU configurations, source code for software, tester, simulation, and Verilog code.This could be the most significant act of corporate espionage in a generation.

semianalysis.substack.com

 

[BFG10K]

OP updated with more info.

The hackers are in a world of hurt for messing with a large corporation like nVidia. We've seen what happens when people download simple MP3s. With this, expect multiple life sentences if they're ever brought to justice.

I've also seen multiple comments online against nVidia like "serves them right for being dicks!" and "now we'll get open source drivers for Linux!" That's a very slippery slope to go down. I might decide your favorite company "is a dick" and start damaging them because of...reasons.

 

[Dribble]

In the end if anything bad happens to a company we the consumers generally lose - either because products get delayed or cancelled, or because fixing what happens costs money and those costs have to be recouped in higher prices.

 

[GodisanAtheist]

I agree broadly with @BFG10K , but at the same time the juicy Lovelace leaks (that sounds a bit racier than I imagined, but I'll leave it) leave me as a bit of a hypocrite here.

 

[igor_kavinski]

Cybercriminals who breached Nvidia issue one of the most unusual demands ever | Ars Technica

Remove LHR or your data leaks!

Really bad turn of events for all gamers if Nvidia gives in.

 

[GodisanAtheist]

Ok so I guess the question is did miners do it or is this 5d chess to increase the hate leveled toward miners?

 

[Krteq]

That thing about LHR removal demand was a "fake news".

LAPSUS officially demanded only open-sourcing of NV drivers.

Still I don't like any security hacks on anyone

 

[igor_kavinski]

That thing about LHR removal demand was a "fake news".

Are you sure? ArsTechnica still haven't updated the news article to inform their readers that it's fake news.

 

[nisryus]

nm, just saw igor_kavinski already posted the link to the article.

 

[Borealis7]

Breaking news: Hackers demand nVidia change their next architecture codename to Linda Lovelace!

 

[Asterox]

More problems, as expected.

Malware now using NVIDIA's stolen code signing certificates

Threat actors are using stolen NVIDIA code signing certificates to sign malware to appear trustworthy and allow malicious drivers to be loaded in Windows.

www.bleepingcomputer.com

 

[DeathReborn]

More problems, as expected.

Malware now using NVIDIA's stolen code signing certificates

Threat actors are using stolen NVIDIA code signing certificates to sign malware to appear trustworthy and allow malicious drivers to be loaded in Windows.

www.bleepingcomputer.com

Yet still there are people who will blame Nvidia for the malware and those who will praise the hackers for taking on Nvidia.

 

[Panino Manino]

I head that Samsung was also completely leaked.

I understand that all this may cause problems for us, but what about the companies? How this affects their immediate futures?

 

[igor_kavinski]

I suppose not that much. If someone uses their leaked trade secrets, they can still sue them into oblivion. It might actually do us some good in that this "free" knowledge sharing may lead to new innovations from thoughtful minds. If suppose Nvidia is doing something one way, it may be possible to achieve the same thing more efficiently in a completely different way, bypassing any legal hurdles and fostering innovation.

If nothing else, we can hope AMD will learn how to do better performing raytracing

 

[Saylick]

I suppose not that much. If someone uses their leaked trade secrets, they can still sue them into oblivion. It might actually do us some good in that this "free" knowledge sharing may lead to new innovations from thoughtful minds. If suppose Nvidia is doing something one way, it may be possible to achieve the same thing more efficiently in a completely different way, bypassing any legal hurdles and fostering innovation.

If nothing else, we can hope AMD will learn how to do better performing raytracing

Fair point, but is it legal to look at a competitor's stolen source code to understand the inner workings and then with that knowledge develop a better approach? Assume that nothing is re-used from the stolen code.

Similarly, if I just happened to see internal roadmaps from a competitor and then pivoted my roadmap as a result, is that legal?

 

[igor_kavinski]

Not a legal expert!