Avatar

How to protect against the Meltdown and Spectre CPU security flaws (Technology)

by Joe The Android Guy, Friday, January 05, 2018, 18:34 (18 days ago)

Spectre and Meltdown are the names of the flaws found in a number of processors from Intel, ARM and AMD that could allow hackers to access passwords, encryption keys and other private information from open applications.

The flaws, found by a number of people including a member of Google’s Project Zero, are sending shock waves through the IT world. Namely, it was revealed that they had been present in chip designs for over 20 years, and that they affect a number of companies’ processors, meaning the flaws could be found on a huge number of devices, from PCs to web servers and even smartphones.


http://www.techradar.com/how-to/how-to-protect-against-the-meltdown-and-spectre-cpu-sec...

Avatar

How to protect against the Meltdown and Spectre CPU security flaws

by X2daZ, Friday, January 05, 2018, 19:12 (18 days ago) @ Joe The Android Guy

20 years and we're just finding out about it? what's really going on? :-hmm

How to protect against the Meltdown and Spectre CPU security flaws

by Mark, Friday, January 05, 2018, 20:51 (18 days ago) @ Joe The Android Guy

Windows 8.1 here and did auto update but nothing comes back for KB4056892

Avatar

How to protect against the Meltdown and Spectre CPU security flaws

by Rich Rover, Saturday, January 06, 2018, 11:17 (18 days ago) @ Mark

Windows 8.1 here and did auto update but nothing comes back for KB4056892

Windows 10 got it. 7 and 8 will get it on patch Tuesday

How to protect against the Meltdown and Spectre CPU security flaws

by DKessle, Thursday, January 11, 2018, 09:33 (13 days ago) @ Rich Rover

So the OS will get a security update but do we have to download a patch or update from INTEL themselves?

Avatar

How to protect against the Meltdown and Spectre CPU security flaws

by Rich Rover, Friday, January 12, 2018, 18:08 (11 days ago) @ DKessle

So the OS will get a security update but do we have to download a patch or update from INTEL themselves?

Keep an eye out for any updates on their website regarding your processor https://downloadcenter.intel.com/product/873/Processors

How to protect against the Meltdown and Spectre CPU security flaws

by jason_clyde, Sunday, January 14, 2018, 12:47 (10 days ago) @ Rich Rover

Just keep a look out for any firmware updates from Intel
Keep a look out on your motherboard's website for any chipset or bios updates
Keep all your software and Windows up to date

How to protect against the Meltdown and Spectre CPU security flaws

by Michael, Tuesday, January 09, 2018, 13:41 (15 days ago) @ Mark

Got update KB4056895 for 8.1 today

Avatar

How to protect against the Meltdown and Spectre CPU security flaws

by Johnny, Cambridge, Friday, January 05, 2018, 23:40 (18 days ago) @ Joe The Android Guy

Is this an elaborate ruse to get people using old hardware to upgrade as they won't be patching the really old stuff.

Avatar

How to protect against the Meltdown and Spectre CPU security flaws

by Pinky, North Yorkshire, Saturday, January 06, 2018, 01:24 (18 days ago) @ Joe The Android Guy

How is this not headline news?

--
[image]

How to protect against the Meltdown and Spectre CPU security flaws

by erb, Saturday, January 06, 2018, 10:41 (18 days ago) @ Joe The Android Guy

People are getting a little carried away in the hype. It's very unlikely that grandmas computer is going to be hacked because of this flaw

Avatar

How to protect against the Meltdown and Spectre CPU security flaws

by Rich Rover, Saturday, January 06, 2018, 11:15 (18 days ago) @ Joe The Android Guy

This is a good simple explanation I see from a user AT2512 on Reddit


The general gist of it is: two major security flaws were found with the design of most processors made in the last 10-20 years. In short they allow for malicious programs (or code in webpages?) to get potentially sensitive information out if the CPU they should definitely not be able too.

The two issues are known as Meltdown and Spectre, they achieve broadly the same thing through different methods.

Meltdown is exclusive to Intel processors, and can be fixed with an OS patch which will likely hit performance (significantly in some tasks, negligibly in others).

Spectre effects almost all CPUs released in the last 20 years, by everyone. It is harder to exploit than Meltdown, but is more widespread and harder to patch. There are two types of Spectre (so far), the first one effects everything, but is hard to exploit, in a meaningful way. The second version is a more useful exploit; in theory it can effect everything the first did, in reality AMD seem confident that their CPU architecture makes thier CPUs much less susceptible (in thier words a near 0 chance), and claim that so far in testing no one has been able to compromise an AMD CPU with that version of Spectre.

How to protect against the Meltdown and Spectre CPU security flaws

by fran, Sunday, January 07, 2018, 14:42 (17 days ago) @ Joe The Android Guy

How to protect against the Meltdown and Spectre CPU security flaws

by mittenmagmike, Tuesday, January 09, 2018, 15:08 (15 days ago) @ Joe The Android Guy

Anybody else smell NSA all around this. Sure they have been using this exploit for years.

How to protect against the Meltdown and Spectre CPU security flaws

by bricks and bones, Thursday, January 11, 2018, 10:10 (13 days ago) @ Joe The Android Guy

They always give these exploits headline grabbing names to terrify the public. Makes me wonder

Avatar

Simple test program for Windows

by The Warlord, Monday, January 22, 2018, 03:37 (2 days ago) @ Joe The Android Guy

you can run to see where you stand on the vulnerabilities

download link at https://www.grc.com/inspectre.htm

[image]

powered by OneCoolThing