« previous next »
Pages: 1 [2] 3 4 ... 7   Go Down

Author Topic: Major flaw in millions of Intel chips -- (Spectre & Meltdown)  (Read 20140 times)

0 Members and 1 Guest are viewing this topic.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7237
  • Liverpool FC - YNWA
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #15 on: January 05, 2018, 04:16:46 PM »
Logged
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19738
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #16 on: January 08, 2018, 06:16:47 PM »
Apple has also released security updates -- some in December, others today:  Apple Releases Security Updates for Spectre CPU Flaw
Logged


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline satrow

  • LzD Friends
  • Full Member
  • *****
  • Posts: 213
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #17 on: January 08, 2018, 06:28:24 PM »
Nvidia have also been moved to publish fixes, new driver packs for their GPUs are out already, Variant #2 looks like the main vuln. for them: http://nvidia.custhelp.com/app/answers/detail/a_id/4611
Logged

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 629
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #18 on: January 10, 2018, 12:15:37 PM »
Logged

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19738
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #19 on: January 11, 2018, 12:40:25 PM »
At the bottom of Protect your Windows devices against Spectre and Meltdown - Windows Help is a list of OEM /Server device manufacturers to check with your device manufacturer for firmware updates.
Logged


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 629
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #20 on: January 11, 2018, 01:21:09 PM »
Be advised that Lenovo has had to "pull" several of the CPU/BIOS/microcode updates, after problems were encountered.  So perhaps rushing to install these as soon as available may not be the best strategy... let someone else be the "guinea pig" for a week (or two).

The following was copied/pasted from https://support.lenovo.com/us/en/solutions/len-18282 :

Withdrawn CPU Microcode Updates: Intel provides to Lenovo the CPU microcode updates required to address [Spectre] Variant 2, which Lenovo then incorporates into BIOS/UEFI firmware. Intel recently notified Lenovo of quality issues in two of these microcode updates. These are marked in the product tables with “Earlier update X withdrawn by Intel” and a footnote reference to one of the following:

*1 – (Kaby Lake U/Y, U23e, H/S/X) Symptom: Intermittent system hang during system sleep (S3) cycling. If you have already applied the firmware update and experience hangs during sleep/wake, please flash back to the previous BIOS/UEFI level, or disable sleep (S3) mode on your system; and then apply the improved update when it becomes available. If you have not already applied the update, please wait until the improved firmware level is available.

*2 – (Broadwell E) Symptom: Intermittent blue screen during system restart. If you have already applied the update, Intel suggests continuing to use the firmware level until an improved one is available. If you have not applied the update, please wait until the improved firmware level is available.
Logged

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19738
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #21 on: January 11, 2018, 02:15:10 PM »
Logged


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19738
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #22 on: January 11, 2018, 04:04:30 PM »
Don't want to use the Microsoft PowerShell cmdlet to find out if your device is affected by the Meltdown/Spectre CPU vulnerabilities?  Ashampoo has released the "Ashampoo Spectre Meltdown CPU Checker" tool.  Information at Ashampoo Spectre Meltdown CPU Checker.

Edit Note:  Corrected the link to TheWindowsClub article.
Logged


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline Pete!

  • Hero Member
  • *****
  • Posts: 5201
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #23 on: January 11, 2018, 04:21:38 PM »
Yesterday, the McAfee security suite, provided by my ISP, had two "Software Updates".
Afterwards, I was able to get the Windows 10 January cumulative update.

However, the "Ashampoo Spectre Meltdown CPU Checker" tool tells me that although I'm safe from Meltdown, I'm still vulnerable to Spectre.
Logged

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 629
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #24 on: January 11, 2018, 04:54:49 PM »
Meltdown is mitigated by the January Microsoft Windows Updates (on 64-bit systems; but NOT on 32-bit systems).
However, Spectre requires the CPU/firmware (BIOS/UEFI) update from your PC's manufacturer!
Logged

Offline Aaron Hulett

  • Administrator
  • Hero Member
  • *****
  • Posts: 1401
  • Schrödinger's cat walks into a bar... and doesn't.
    • View Profile
    • My Site
Re: Major flaw in millions of Intel chips
« Reply #25 on: January 11, 2018, 05:00:51 PM »
Logged

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 629
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #26 on: January 11, 2018, 05:03:38 PM »
Logged

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7237
  • Liverpool FC - YNWA
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #27 on: January 11, 2018, 05:40:57 PM »
That link works ...

Interesting that this laptop is 'safe' from both, even though the BIOS hasn't been updated.
Logged
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19738
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Major flaw in millions of Intel chips
« Reply #28 on: January 11, 2018, 05:42:16 PM »
Logged


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline ky331

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 629
    • View Profile
Re: Major flaw in millions of Intel chips
« Reply #29 on: January 11, 2018, 06:05:08 PM »
Winchester:   Can you confirm the Ashampoo-tool results via the PowerShell Script, or by running SpecuCheck (from a Command/DOS prompt)?

Here's what I'm seeing on a Win7x64 system:

[Meltdown=CVE-2017-5754:  Rogue Data Cache Load;
 Spectre   =CVE-2017-5715:  Branch Target Injection ]
Logged
Pages: 1 [2] 3 4 ... 7   Go Up
« previous next »