Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

hmm interesting, i see microcodes that aren't included with the normal dat file provided by intel, how curious , i see newer microdes for harpertown era chips, mainly 10676_plat91 , which was updated in 2015. i wonder where these came from, how strange

 

I doubt Intel has published a finalized list of affected processors....or that they ever will.

 

I have no doubt they will only do what they "NEED" to though the lawsuit against them might have something to say about that, thought if intel in hot water they all should be, no if's and's or but's

 

Can't hold other companies responsible for what Intel does...or what Intel's marketing claims. Intel's processors are the only ones that are affected by every aspect of the 2 "bugs".... Also, only Intel claims to sell the "most secure processors" ever made.....which is a proven false statement.

 

true but intel isnt the only one these flaws effect,it all a whole lot drama made worse by social media crazed world we live in

 

Only 1 of the 4 (total) flaws affects AMD. Meltdown is solely Intel, though Intel's PR claims to the contrary. Spectre is 3 different vulnerabilities, only 1 of which affects AMD, while all 3 affect Intel. In total, Intel was made aware of at least 5 major security vulnerabilities in 2017.... AMD was made aware of 2.... their fTPM being the other.

 

https://www.ebay.com/sch/i.html?_from=R40&_sacat=0&_nkw=xeon+server&_sop=10

that is alot of servers listed today, listings created on jan 6 go past 150 pages.

 

Windows does but *nix doesn't, I think the point is that there is no hard border. It is possible to read/write to part of the memory, you're not supposed to.

 

AFAIK, the firmware update is for Spectre, not Meltdown. The former is mitigated through microcode+OS+application updates, the latter only through the OS.

Meltdown has been fixed. Spectre has been not completely fixed and probably never will be. It's a combination of microcode, OS and application patches, which doesn't completely fix the issue. It's only fixable in future CPUs.

The Spectre fix (so the firmware update) does not have a performance impact. It's minimal.

 

Yeah,but they are the only one who released "Coffee Lake" knowing it was vulnerable to Spectre and Meltdown in september 2017.

"The company was fully aware that the product it is releasing was vulnerable to the three vulnerabilities plaguing its processors today, the two more publicized of which, are "Spectre" and "Meltdown."
Google Project Zero teams published their findings on three key vulnerabilities, Spectre (CVE-2017-5753 and CVE-2017-5715); and Meltdown (CVE-2017-5754) in mid-2017, shared with hardware manufacturers under embargo; well before Intel launched "Coffee Lake."

But,Intel don't wanna stop the production of new flawed cpus because...greed and
Intelligence Gathering.


Edit: strange,but on Windows 7,the tests after post-patch give me a little bump in loading games (on Hdd) and some benches in Aida64 or PerftTest 8.

 

The one thing I'm mostly worried about, is all the people downloading and running Tools/scripts, from unknown, or untrusted sources.
Do you really want to run a Powershell script as Admin or update your BIOS without being sure of exactly what is being done to your PC ?

The way the "Fix" has been explained, by ANYONE, is as clear as mud.

Right now, I beleive the best idea is to wait, and give it a few days.
Someone needs to give the Layman a good explanation, and a good Fix plan, if there is one.
Everyone should get a Fix, but I don't beleive everyone will get a fix.

So, Chill, and don't install or run anything fom a source you don't know, or trust.

edit : With all the Panic caused by this, more people are going to be infected by trying to patch their system, than actually be infected as an unpatched system...

 

Sorry if already posted, list of Asus boards that are impacted (in spoiler), so will be getting BIOS updates, not sure if its complete, or if its going to be updated as and when though (as only got 2x x99 boards on there, and none of them are mine).

Spoiler

https://www.asus.com/News/V5urzYAT6myCC1o2?_ga=2.109660237.958891166.1515068667-676642648.1512981630

 

Looks like there's little chance my ASRock z77/i5-3570K combo ever being updated...unless I find out how to do it myself (if thats even possible).

 

Cheers, that explains the problem well, but is there the same type of Vid to explain the solution ?

Change CPU Hardware is not a good solution, even if it is the best one, because there is no "fixed" hardware out there...
At least this might give a "bump" to other CPU hardware.
Maybe HP can dust off the Alpha, and let us have that back ?
Or the return of the Mips ?

 

Get your Ataris and Amigas out of the attic. Time to dust them off.

 

Well if theres one consolation, it affects billions of users. Maybe safety in numbers. By the time it takes malware writers to extract sensitive data from CPU cache/kernel memory, how many users can they process and sift through out of the billions out there?

 

But I can see a danger in people being specifically targeted by spy agencies or hackers determined to get to specific individuals.