The Official Meltdown/Spectre Omnibus Thread

[acewiza]

Saw this yesterday and again today. Looks like a developing situation worth monitoring.

https://thenextweb.com/insider/2018/01/ ... e-patches/

[Wheelerof4te]

It was even on RT, LOL:
https://www.rt.com/news/416712-intel-bug-fix-problems/
One comment FTW (even though it wasn't Windows-exclusive, yada, yada):

I guess without doubt we know they call it WINDOWs for a reason. It lets things in and out.

I think there might be more flaws discovered in the future.

[kopper]

I think there might be more flaws discovered in the future.

Absolutely. I wouldn't be surprised that it would hit harder on e.g. AMD or ARM next time. I'd love to get on bandwagon of Intel-shaming, but these things are rarely airtight. Intel was the unlucky one this time, let's just wait for the next one.

I'm not saying there's no crappy engineering involved or anything. I don't know enough background and I don't know exactly what is involved with these vulnerabilities. It just feels (judging by the public's reactions) that people are quick to forget stuff like hearthbleed, shellshock, POODLE, etc. Those happened to open-source and yes, I know that those are not hardware related. Stuff is created or updated, bugs are introduced, some of them lead to vulnerabilities. It would be rather interesting if hardware was immune to human screw-ups.

[dotlj]

Intel update on the problem. https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr

HP stop BIOS updates and start again. https://support.hp.com/us-en/document/c05869091

Dell also. http://www.dell.com/support/article/us/en/04/sln308588/microprocessor-side-channel-vulnerabilities-cve-2017-5715-cve-2017-5753-cve-2017-5754-impact-on-dell-emc-products-dell-enterprise-servers-storage-and-networking-?lang=en

also http://lkml.iu.edu/hypermail/linux/kernel/1801.2/04628.html

[acewiza]

Another article in PC World today:

https://www.pcworld.com/article/3251171/components-processors/intels-plan-to-fix-meltdown-in-silicon-raises-more-questions-than-answers.html

[acewiza]

So now my question is: How much of a premium price will the new Mectre-safe silicon demand, and for how long?

http://www.sci-tech-today.com/news/Intel-Plans-Spectre--Meltdown-Patches/story.xhtml?story_id=13000EIO5YZA

[bw123]

So now my question is: How much of a premium price will the new Mectre-safe silicon demand, and for how long?

http://www.sci-tech-today.com/news/Intel-Plans-Spectre--Meltdown-Patches/story.xhtml?story_id=13000EIO5YZA

Oh heck, let's just all upgrade everything, that will be great for the "economy" and what's good for BigBidnez is good for America.

http://www.sci-tech-today.com/news/Inte ... 000EIO5YZA

Dear Visitor, Our system has found that you are using an ad-blocking browser add-on. We just wanted to let you know that our site content is, of course, available to you absolutely free of charge. Our ads are the only way we have to be able to bring you the latest high-quality content, which is written by professional journalists, with the help of editors, graphic designers, and our site production and I.T. staff, as well as many other talented people who work around the clock for this site. So, we ask you to add this site to your Ad Blocker’s "white list" or to simply disable your Ad Blocker while visiting this site.

[dotlj]

Following Intel, RedHat, Dell, HP and a host of others who have issued updates, then issued another update to remove the first update, now M$ joins the party.
https://access.redhat.com/solutions/3315431?sc_cid=701f2000000tsLNAAY&
https://support.microsoft.com/en-us/help/4078130/update-to-disable-mitigation-against-spectre-variant-2
With the number of bugs in Windows, how would they know if a problem was caused by one of the mitigations or it was just one of the increasing number of bugs that is part of Windows?

It looks like this party will be going for a while yet.

[acewiza]

Unsurprisingly, Mectre is headlining news of the latest kernel...
https://www.linux.com/blog/intro-to-linux/2018/1/linux-kernel-415-unusual-release-cycle