Author Topic: Major flaw in millions of Intel chips -- (Spectre & Meltdown)  (Read 18888 times)

0 Members and 1 Guest are viewing this topic.

Offline Frands

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1044
  • Esbjerg, Denmark
    • View Profile
Major flaw in millions of Intel chips -- (Spectre & Meltdown)
« on: January 03, 2018, 03:37:00 PM »
BBC News 3. January 2018

A serious flaw in the design of Intel's chips will require Microsoft, Linux and Apple to update operating systems for computers around the world.
Intel has not yet released the full details of the vulnerability, but it is believed to affect chips in millions of computers from the last decade.
The UK's National Cyber Security Centre (NCSC) said it was aware of the issue and that patches were being produced.
Some experts said a software fix could slow down computers.
"We are aware of reports about a potential flaw affecting some computer processors. At this stage there is no evidence of any malicious exploitation and patches are being produced for the major platforms," the NCSC said in a statement.


Full story: http://www.bbc.com/news/technology-42553818

_______
Our greatest glory is not in never falling but in rising every time we fall.
- Confucius
-----
Trend Micro Internet Security


Home Forums:
https://www.landzdown.com/
http://securitygarden.blogspot.dk/
https://www.classicrockforums.com/

Offline Aaron Hulett

  • Administrator
  • Hero Member
  • *****
  • Posts: 1394
  • Schrödinger's cat walks into a bar... and doesn't.
    • View Profile
    • My Site
Re: Major flaw in millions of Intel chips
« Reply #1 on: January 03, 2018, 04:59:48 PM »
The long-term yucky part:

"The effects of the updates to Linux and Windows could incur a performance slowdown of between five and 30 percent, experts said."

The impact to both Intel as a brand and machines running affected chips is going to be interesting to say the least. At some point we'll need a list of impacted chips and a way to know if the chip/system we own and/or we're about to buy isn't impacted by this (both the chip, and the OS being smart enough to not implement the fix on a system running a chip not affected by this).

Happy New Year! :P

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19507
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #2 on: January 03, 2018, 06:24:24 PM »
Windows Insiders with Build 17035 already have the fix.  My desktop running the builds is so old, I haven't really noticed a change in performance.  I make a point of using Microsoft Edge on it and it hasn't seemed slowerl.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19507
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #3 on: January 03, 2018, 06:59:39 PM »
Intel Responds to Security Research Findings

Quote
Intel and other technology companies have been made aware of new security research describing software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from computing devices that are operating as designed. Intel believes these exploits do not have the potential to corrupt, modify or delete data.

Recent reports that these exploits are caused by a “bug” or a “flaw” and are unique to Intel products are incorrect. Based on the analysis to date, many types of computing devices — with many different vendors’ processors and operating systems — are susceptible to these exploits.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7213
  • Liverpool FC - YNWA
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #4 on: January 03, 2018, 07:00:50 PM »
Intel says ‘design flaw’ report is inaccurate: https://www.marketwatch.com/story/intel-stock-headed-for-worst-day-in-more-than-a-year-amd-pops-on-chip-design-flaw-report-2018-01-03

Quote
“Recent reports that these exploits are caused by a ‘bug’ or a ‘flaw’ and are unique to Intel products are incorrect,” Intel said in a statement. “Based on the analysis to date, many types of computing devices—with many different vendors’ processors and operating systems—are susceptible to these exploits.”

The company continued: “Intel is committed to product and customer security and is working closely with many other technology companies, including AMD, ARM Holdings and several operating system vendors, to develop an industrywide approach to resolve this issue promptly and constructively.”

Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19507
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #5 on: January 03, 2018, 07:54:00 PM »
Microsoft issues emergency Windows update for processor security bugs - The Verge
Quote
Microsoft is issuing a rare out-of-band security update to supported versions of Windows today. The software update is part of a number of fixes that will protect against a newly-discovered processor bug in Intel, AMD, and ARM chipsets. Sources familiar with Microsoft’s plans tell The Verge that the company will issue a Windows update that will be automatically applied to Windows 10 machines at 4PM ET / 1PM PT today.

The update will also be available for older and supported versions of Windows today, but systems running operating systems like Windows 7 or Windows 8 won’t automatically be updated through Windows Update until next Tuesday. Windows 10 will be automatically updated today.

Just checked and no updates here, Windows 10, 64bit, Version 1709.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Aaron Hulett

  • Administrator
  • Hero Member
  • *****
  • Posts: 1394
  • Schrödinger's cat walks into a bar... and doesn't.
    • View Profile
    • My Site
Re: Major flaw in millions of Intel chips
« Reply #6 on: January 03, 2018, 08:18:43 PM »
"While Microsoft is quickly addressing the issues, the fixes will also rely on firmware updates from Intel, AMD, or other vendors that are rolling out."

Oh? So I need the patch and something else? Hope that also comes down through WU.

Offline Frands

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1044
  • Esbjerg, Denmark
    • View Profile
Our greatest glory is not in never falling but in rising every time we fall.
- Confucius
-----
Trend Micro Internet Security


Home Forums:
https://www.landzdown.com/
http://securitygarden.blogspot.dk/
https://www.classicrockforums.com/

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19507
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #8 on: January 04, 2018, 12:09:05 PM »
Information about the Microsoft Out-of-Band security update posted here.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19507
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19507
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #10 on: January 04, 2018, 05:12:01 PM »
From Meltdown Mitigation - Malwarebytes Endpoint Protection - Malwarebytes Forums:
Quote
For now, users with MB3 based software installed and registered with Windows Action Center will not be able to receive any MS updates automatically, starting with the Jan. 2018 update. You can either apply the update manually or set the Malwarebytes action center setting to "Never register Malwarebytes in Windows Action Center" so that the MS update can apply automatically. Only Windows 10 and Server 2016 have patches.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7213
  • Liverpool FC - YNWA
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #11 on: January 04, 2018, 06:12:09 PM »
“Meltdown” affects chips made by Intel. “Spectre” affects nearly all mid-range and high-end processors, including those found in smartphones.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline techie

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 599
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #12 on: January 04, 2018, 09:47:19 PM »
Some good reading are located here:

https://www.pcworld.com/article/3245606/security/intel-x86-cpu-kernel-bug-faq-how-it-affects-pc-mac.html

https://meltdownattack.com/#faq-fix

"Apple quietly protected against Meltdown in macOS High Sierra 10.13.2, which released on December 6" 

IOS is questionable and of course the Apple iPhones that were 32-bit will probably never get a fix.



Offline plodr

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 1108
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #13 on: January 05, 2018, 12:44:17 PM »
Quote
even if you have a phone that’s vulnerable, Google notes that “exploitation has been shown to be difficult and limited on the majority of Android devices.”
Quote
an attacker would need access to your unlocked phone as Spectre is unlikely to be implemented or triggered remotely.
Source: https://www.pcworld.com/article/3245790/mobile/spectre-cpu-faq-phones-tablets-ios-android.html

So people with older android phones that don't get a patch, don't need to panic.

Offline pastywhitegurl

  • Hero Member
  • *****
  • Posts: 1047
  • advanced techno feeb
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #14 on: January 05, 2018, 03:26:08 PM »
From what I'm reading, Intel hasn't released it's patches yet  (scheduled for next week sometime)

So even though a patch was installed for Windows10 this week, we are not fully protected yet, is that right?