Memory-maker Micron has found a way to keep prices for its products sky-high for another five years, by signing 16 “strategic customer agreements” (SCAs) that include a floor price the company says comes with “a very robust gross margin for Micron, well above our peak quarterly margins in any past cycle.”

Micron CEO, president and chairman Sanjay Mehrotra explained the SCAs in prepared remarks delivered during the company’s Q3 earnings call. He explained that Micron has signed 16 SCAs, most of them covering 2026 to 2030, and that they involve a commitment to buy a certain quantity of product and pay for it in a pricing band that has a floor and a ceiling price. The floor price covers the historically high gross margins mentioned above, and the ceiling price means those who commit to an SCA are insulated if memory prices go even higher.

  • 0ops@piefed.zip
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    1
    ·
    2 days ago

    How the hell does one hide and then use a backdoor in ram?

    • Venator@lemmy.nz
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 days ago

      could have a chip that looks for a certain sequence of bytes then changes some other bytes as a result… it would probably introduce massive latency though…

      • WhyJiffie@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 day ago

        tbh I think it doesn’t need to manipulate the data on the stick for doing malicious things. it would just need a tiny processor consuming almost nothing, and doing its own communication on the bus it has access to. but I don’t have any idea about the possibilities

        • Venator@lemmy.nz
          link
          fedilink
          English
          arrow-up
          1
          ·
          23 hours ago

          I was just thinking that would be the simplest way to do it, but I think you might be right that that way would be more feasible…

      • whatiswrongwithyou@lemmy.ml
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 days ago

        Hang on, I’m gonna add a suspicious new component onto a part that is incredibly expensive and heavily scrutinized specifically for speed and latency that will bit bash the I/o.

        • Venator@lemmy.nz
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 day ago

          yeah you’d have to disguise it as part of another chip, and use lower latency parts and then sell it as higher latency…

          • grinning_serpent@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            9 hours ago

            Or you could just make a waifu gacha game that people install freely because, dude: anime tiddies! And it requires kernel level anticheat because you definitely don’t want people getting their waifus and husbandos for free.

            I don’t know that any of that is or could be connected to spyware, but it seems like if I wanted to orchestrate some kind of hidden state sponsored spyware network, targeting the gooners that will voluntarily install software on their phones and computers would be a lot simpler than hiding shit in RAM.

    • nomad@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      2
      ·
      2 days ago

      You add a piece of code that scans for a specific very big prime number and if it finds that, you look for any process and inject into stdlibc any backdoor of your choice

      • whatiswrongwithyou@lemmy.ml
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 days ago

        You add a piece of code (to ram, which famously does not hold information while unpowered).

        Which scans for a specific very big prime number (finding large primes quickly would completely invalidate the world’s cryptography and therefore banking, that’s why people are afraid of the quantum boogeyman).

        You look for any process and inject into stdlibc any backdoor of your choice (just any process, doesn’t need elevated permissions, assuming they use libc, assuming the backdoor hasn’t been patched out from the other end, defeated by any of the dozens of software integrity checks that have become standard).