What you need to know about Meltdown and Spectre

Discussion of hardware related issues
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

What you need to know about Meltdown and Spectre

Post by crosscourt »

These issues attack almost all cpus in the last 10 years at least.

More here, https://meltdownattack.com
Site Moderator
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

Re: What you need to know about Meltdown and Spectre

Post by crosscourt »

At the least you need the latest version of the 4.4, 4.9 or 4.14 kernel and either an updated bios or microcode. Browsers will need to be updated as well as a few other apps and most of these appear to have been done already in the various distros I use.
Site Moderator
User avatar
Rademes
Posts: 13
Joined: Mon Jan 22, 2018 7:38 pm
Location: Latvia

Re: What you need to know about Meltdown and Spectre

Post by Rademes »

According to Linux Mint blog, Kernel 4.13.0-25 also contains necessary patches. https://blog.linuxmint.com/?p=3496
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

Re: What you need to know about Meltdown and Spectre

Post by crosscourt »

That was done by a few distros like Mint but depending on what distro you have you must have the patched 4.4,4.9 or 4.14 kernel.

The 4.13 kernel patched doesnt exist in all distros.
Site Moderator
User avatar
Rademes
Posts: 13
Joined: Mon Jan 22, 2018 7:38 pm
Location: Latvia

Re: What you need to know about Meltdown and Spectre

Post by Rademes »

EPIC FAIL to Intel....... :evil: I am sure, that these vulnerabilities had been successfully exploited for Years! Hackers just stayed quiet and happy...and reach!
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

Re: What you need to know about Meltdown and Spectre

Post by crosscourt »

The thing I try to explain to hardware users is the fact that errata exists in all hardware. Thats been going on since the old days, but some problems were easier to exploit at certain times with certain hardware. Software also has many flaws that can be attacked so even though Intel made a huge mistake they arent the only only one as Spectre can affect the other cpus not affected by Meltdown. Also intel wasnt the only one with Meltdown as ARM screwed up as well. Ive been happy with Intel's response to these issues with detailed tech support and many fixes that came out pretty quickly.

What we have to focus on now is correcting the issue for now and redesigning hardware in the future.
Site Moderator
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

Re: What you need to know about Meltdown and Spectre

Post by crosscourt »

Intel intends to bring out corrected cpus this year and of course new designs down the road. Firmware and software fixes for most recent cpus, thru Ivy Bridge but check with your mobo maker or oem system maker as they may have patches/bios updates available.
Site Moderator
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

Re: What you need to know about Meltdown and Spectre

Post by crosscourt »

So far Ive seen nothing from Intel about help for the Sandy Bridge cpus. Im upgrading to a I3 3240 from a G630 due to this situation for now.
Site Moderator
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

Re: What you need to know about Meltdown and Spectre

Post by crosscourt »

Whats interesting is so far there have been no reported exploits of these issues other than the reports that came from Intel and other sources.
Site Moderator
User avatar
crosscourt
Posts: 11100
Joined: Sun Jan 14, 2018 5:38 pm
Location: Wash DC
Contact:

Re: What you need to know about Meltdown and Spectre

Post by crosscourt »

Intel has released microcode for the Meltdown/Spectre issues for Sandy/Ivy Bridge cpus. Check with the maker of your pc or head over to Intel's site for more info.
Site Moderator
Post Reply