Jump to content
Corsair Community

Corsair one i165 updated bios


Recommended Posts

So, it seems like the last bios from the corsair team for the i160/i165 was in june of 2019- However, according to MSI, there are several updates available since then which deal with many issues, security among them.

 

Should we attempt to install those bios updates from MSI directly? If not, when will corsair make these security patches available? I am still within my 2 year warranty period so I would hope I could at least get a security update in this time frame.

 

Thank you

Link to comment
Share on other sites

Don't hold your breath on this one, you more than likely cannot update them directly from MSI. At least with the a100, the board and BIOS are a custom variant of an off the shelf board.

 

Since pretty much day 1, I have been unable to use a majority of my USB ports due to the AMD x570 bug. I can't use iCUE because the constant USB connections issues turns off my fan.

 

The kicker is that a BIOS update for the retail version of my board fixes the problem. Corsair refuses to update their custom BIOS because it is not a security issue.

 

 

https://forum.corsair.com/v3/showthread.php?t=200587

Link to comment
Share on other sites

Don't hold your breath on this one, you more than likely cannot update them directly from MSI. At least with the a100, the board and BIOS are a custom variant of an off the shelf board.

 

Since pretty much day 1, I have been unable to use a majority of my USB ports due to the AMD x570 bug. I can't use iCUE because the constant USB connections issues turns off my fan.

 

The kicker is that a BIOS update for the retail version of my board fixes the problem. Corsair refuses to update their custom BIOS because it is not a security issue.

 

 

https://forum.corsair.com/v3/showthread.php?t=200587

 

 

Well, they do say they will provide a update for security issues. However, there is a security issue they have not patched so I am confused. Can someone from Corsair confirm/deny if they intend to patch security issues with their one year old machine?

 

Since the last patch was in June 2019, these are the current security issues that are unpatched on corsairs side (But patched by the manufacturer)

 

https://www.bleepingcomputer.com/news/security/intel-patched-22-vulnerabilities-in-the-june-2020-platform-update/

 

Every, single, exploit above will work on every corsair one user given the correct environment

 

Sorry, but if I didnt even bother to check this was the case I wouldnt have even known. How could corsair think its OK to go almost a entire year without providing a security patch?

 

Depending on the outcome of corsairs response here, We need to spam this information on twitter to people like Linus from Linus Tech Tips who did several videos on the Corsair One telling him why he shouldnt recommend it anymore if this is the case. ( I only purchased this machine in the first place because he recommended it )

Link to comment
Share on other sites

Corsair's support for their systems is practically non-existent. In some areas it my actually be illegal. I've emailed GN about it, and left comments on his videos about my USB issues. Nothing came of it though.

 

They don't sell replacement parts, once your out of warranty... your out of luck if it breaks

Emailing support takes 1-3 days for each reply

I've gone back and forth with support for a month because they couldn't understand the issue.

Once they acknowledged the issue, they ghosted me.

 

Emailing support about my USB issues... their solution was to keep checking the downloads page for IF there was an update... not WHEN. I asked if they had their version of the BIOS in testing, they said that they didn't have that information.

 

They couldn't even give me a direct link to the downloads page for my machine, they gave me the URL to the Downloads page and said to search for my model.

Link to comment
Share on other sites

  • 2 weeks later...
Is there a reason that staff is not replying to this thread? When can we expect the latest security updates for the bios to be provided? Should people who purchase the new 3080 based corsair ones also expect to not have bios updates in the future?
Link to comment
Share on other sites

Im just going to reply here every once in a while to bump the thread until we get a real answer (read, not "Let me look into that for you" )

 

Anyone whos thinking of buying a new Corsair One, send them to this thread and let them know they wont be able to buy replacement parts once their warranty expires or expect security updates on the bios past the first 6 months.

 

That includes people who do reviews on youtube, send them this thread

Link to comment
Share on other sites

I've been doing that on my own thread asking for a BIOS update. They'll respond once in a blue moon that there is nothing to add and contact support.

 

Support wants to replace my entire system when all it needs is a BIOS update that ASUS already released.

Link to comment
Share on other sites

And another one. Im sure we will get a response from corsair one of these days.

 

And when we do, I guarantee you it totally wont say

"Thanks, we are looking into this, let me send this to the team that handles bios" with no further updates.

Link to comment
Share on other sites

I've only been asking since October in my own version of this thread lol.

 

Corsair support wants to put a hold on my credit card and RMA my system instead of giving me a BIOS update to fix the AMD USB issue.

 

The WebStore keeps rejecting my payment info and can't tell my why.

Link to comment
Share on other sites

Another bump! Still no response from anyone at corsair. I have been reaching out to tech reviewers telling them to check out this forum before they review the new corsair one- I suggest you do the same. Just link them to threads of us asking for security updates for the BIOS with no response or non-responses.
Link to comment
Share on other sites

Bazwelle is probably right that we should go formal with tech support tickets to get the matter more front-and-center.

 

In the meantime, I would like to chime in to "bump" this thread. The lack of clear response to Azureblood2 in his linked thread begging for BIOS security updates is very concerning to me. I'll take this opportunity to re-up his main point:

 

Corsair, if you elect to fork and customize a BIOS, you assume a due diligence corporate responsibility to maintain and patch said core system component. You will lose customers and sacrifice future sales as it becomes clear you do not take that responsibility seriously. Please escalate this matter internally and rectify it.

Link to comment
Share on other sites

The only thing Corsair corporate is responsible for is walking our money to the bank. This will go unheard and nothing will be fixed.

 

Hey Azureblood2, I'll try to illustrate something. If we talk to the sales person in a car dealership of the issues we are having with our car, instead of the service department, our car issue will never be fixed. We could go the easy route and relay our discontent to the car dealership manager, but he would still send us to the service department.

 

I work in IT and I know it can be frustrating and long to go through normal IT. I've experienced it on many occasions as a client and with in fact with Corsair IT to satisfactory results. You may not get the quick answer you are looking for and the IT specialist will likely want to troubleshoot things with you. Because even the IT specialist likely doesn't have the ability to change bios's, he would likely need to prove to the engineers (that's what we call them here) that the issue is caused at the bios level and a revision would need to be pushed. And I'm serious when I say prove. Every place I've worked in IT, you have to prove the engineer that he's wrong. They will always push back without proof.

 

Opening an official support case (ticket) you will have the right people looking at the case, the IT department, not the representatives (no offence and no derogatory intention).

 

If it were me dealing with your case, I would try to resolve your USB issue that is affecting your iCue first and foremost, before looking into a bios revision. If I were not able to replicate the issue on the same hardware in the shop, I would suspect either a software issue or a faulty hardware issue in your computer.

 

Hope this helps.

Link to comment
Share on other sites

I had an official support ticket open for iCUE turning off my fan. It took me a month of emailing back and forth with the tech to get him to understand that my overheating issue wasn't because it was summer, but because iCUE was turning off my fan. He said he messaged the appropriate dept, and closed the ticket. The issue never got resolved, I set my fan speed at 100% and forgot about it.

 

When AMD announced there was a problem with the x570 chipset, I assumed this was the cause of my issues with iCUE. I opened another support ticket asking for the BIOS update that would resolve the USB issue, and by extension the iCUE issue.

 

Support had no idea when or even IF there was going to be a BIOS update. The only option they gave me was to RMA the system. 2 months later I'm still trying to RMA it, but support has gone radio silent on me. It has been a week and they are not responding to any of my emails.

 

In that time frame a BIOS update was released, but support couldn't be bothered to tell me that through the open ticket. I found out about it thanks to another user of this forum commenting on my 8 month long thread asking for this update.

 

Even with that BIOS update, the iCUE issue persists. I updated iCUE from version 3.x to version 4.x, and the issue persists.

 

At this point I am done with Corsair. I was fully committed to buying an a200, even opened a support ticket when my order got canceled... twice. Now I've canceled my orders for new hardware, and as soon as I can get a hold of a new graphics card I will be selling my a100.

 

This could've been avoided by just replying to my RMA ticket with 'We are still looking into it'

Link to comment
Share on other sites

I had an official support ticket open for iCUE turning off my fan. It took me a month of emailing back and forth with the tech to get him to understand that my overheating issue wasn't because it was summer, but because iCUE was turning off my fan. He said he messaged the appropriate dept, and closed the ticket. The issue never got resolved, I set my fan speed at 100% and forgot about it.

 

That's unfortunate! IMO, it's not good practice to close a ticket when escalating a case internally, because you, the client, then have no way to ask for an update on said case.

 

When AMD announced there was a problem with the x570 chipset, I assumed this was the cause of my issues with iCUE. I opened another support ticket asking for the BIOS update that would resolve the USB issue, and by extension the iCUE issue.

 

Support had no idea when or even IF there was going to be a BIOS update.

 

In that time frame a BIOS update was released, but support couldn't be bothered to tell me that through the open ticket. I found out about it thanks to another user of this forum commenting on my 8 month long thread asking for this update.

 

Even with that BIOS update, the iCUE issue persists. I updated iCUE from version 3.x to version 4.x, and the issue persists.

 

The way I see this, and I'm giving Corsair the benefit of the doubt, that considering that you were likely not the only client that bought that system, Corsair IT would have been inundated with IT requests with the same nature as yours, and at that point would have initiated corrective measures to resolve the said general issue. Again, giving them benefit of the doubt, if they haven't done so, is because there are not more cases of this issue. And would also explain why the RMA suggestion was made. The unfortunate side effect of remote IT support such as what Corsair and other manufacturers do, is that the first opened requests would be labelled as singular separate issues instead of a trend pointing to a general issue, and RMA would be suggested.

 

The only option they gave me was to RMA the system. 2 months later I'm still trying to RMA it, but support has gone radio silent on me. It has been a week and they are not responding to any of my emails.

 

I wouldn't be surprised that Covid and the worldwide shortages on semiconductors is the reason your RMA request has stalled and that your new request for hardware were cancelled. I hear that car manufacturers have major amounts of vehicles in parking lots without chips. At work we've run out of computers and laptops to deploy and have been unable to acquire new ones without major delays since the Pandemic started. This is causing huge headaches in every manufacturing sectors and related business. At this point demand has eclipsed supply and we are seeing the effects. I'm not defending Corsair even though I greatly looks like it lol.

 

 

 

 

In wanting to help you, have you tried to perform a repair of Windows from an ISO file or a full re-install of Windows at this point? I don't know if you mentioned this in another forum. I can refer you to some information if you like.

Link to comment
Share on other sites

The reason the RMA has stalled is because they need to put a hold on my credit card in order for them to send the new system. This goes through the Web Store, which keeps rejecting my payment method. I verified the billing address and phone number on the order verbally with my credit card company (Chase). Chase also assured me that they approved the transactions, fraud prevention did not block any of the transactions.

 

I got on the phone with corsair support 7 days ago in order to move the RMA along. They escalated it to the team leader, who responded to the ticket. She escalated the ticket to 'Urgent', and said they were looking into it. I have been asking for status updates, and neither the support tech or the team leader is responding to my questions about how to proceed with this RMA. Even an acknowledgment of my email would've gone a long way here.

 

I have been building my own systems for the better part of two decades, for me, my friends and my employer. I normally never would've bought a pre-built, but I really liked the look and form factor of this machine. I have done full re-installs of windows multiple times on this machine.

 

Thank you for wanting to help me, and I appreciate you bringing a different view to the table. At this point, I'm just done with Corsair. There is nothing they can do to keep me as a customer. It s a shame because I really did like this hardware.

Link to comment
Share on other sites

Caliente,

 

Thanks very much for taking notice of the i160/i165 BIOS update security concerns. I am very grateful for your and the team's engagement.

 

There is a broader debate afoot in the security community about Intel Management Engine (ME) in particular. See Wiki reference: https://en.wikipedia.org/wiki/Intel_Management_Engine#Security_vulnerabilities

 

Also past concerns regarding "Spectre" and "Meltdown" vulnerabilities. Many complexities involving Intel microcode that are an industry-wide frustration. There are no perfect solutions, but coordinating with MSI to bake-in the latest Intel security updates to BIOS is a good start.

 

Thanks again for Corsair's engagement. For USA-based staff, please have a great and reflective Memorial Day weekend.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...