SPECTRE and MELTDOWN: Bug rocks Intel / ARM CPUs

[ELIESEH]

Don't feel left out. At this stage nobody has fully a functioning patch. Microsoft has released an update which disables the variant 2 mitigation because Intel's microcode is so unstable. Intel are going to want to make sure they get it right next time, which means this could take a long time to filter through all the CPU model's, chipsets and motherboards.

Best thing you can do right now, is make sure your browser is up-to-date and includes it's own mitigation.

There is no solution.
the only solution is a new CPU.
this is the sad truth.

[HempOil]

And so it begins...

http://www.securityweek.com/malware-...-flaws-emerges

[JJackson]

There is no solution.
the only solution is a new CPU.
this is the sad truth.

A new CPU is not a solution. They are all vulnerable to this design defect. In fact, I suspect it will be a couple of years, at best, before you see an architecture that has no "known" vulnerabilities at the chip level.

[Dimebag]

It's now the end of Jan and whilst I appreciate the list ASUS put out was vast, I'm still sat on an X99 enthusiast platform that cost me a fortune and is still vulnerable.
I'm pretty close to ditching the entire thing and just buying from another vendor that has appeared to make a better effort at producing some decent microcode to fix the issues. I appreciate this isn't the fault of ASUS but I'm not impressed by how slow this is moving.

The only real solution IS a new CPU, the fact one without the flaws doesn't exist yet doesn't negate that.

[Volfin]

I've been really patient. but the microcode has been out for a while now. Where is the new bios for Sabertooth X99? I'm just supposed to be left vulnerable? This is ridiculous.

[rmongiovi]

You're not paying attention. Intel pulled the microcode and told OEMs to back it out. It causes reboots and data loss.

[zvober]

Renowned Linux kernel maintainer Greg Kroah-Hartman shared today some interesting details on the performance impact of the Meltdown and Spectre patches on the Linux kernel.
According to some recent benchmarks done by a user on some Linux systems running newer kernel versions on a particular network-heavy load, the recently released Linux 4.15 kernel appears to be between 7 and 9 percent faster than Linux kernel 4.11. But if the new KPTI (Kernel Page-Table Isolation) patches that mitigate the recently discovered Meltdown security vulnerability are enabled on the Linux 4.15 kernel, then the performance is just 1 or 2 percent slower than on systems running Linux kernel 4.11.

http://news.softpedia.com/news/linux...s-519639.shtml

[SlackROG]

And so it begins...

http://www.securityweek.com/malware-...-flaws-emerges

Hmm I guess they'll have to shut the Internet off for a while... LOL

Renowned Linux kernel maintainer Greg Kroah-Hartman shared today some interesting details on the performance impact of the Meltdown and Spectre patches on the Linux kernel.
According to some recent benchmarks done by a user on some Linux systems running newer kernel versions on a particular network-heavy load, the recently released Linux 4.15 kernel appears to be between 7 and 9 percent faster than Linux kernel 4.11. But if the new KPTI (Kernel Page-Table Isolation) patches that mitigate the recently discovered Meltdown security vulnerability are enabled on the Linux 4.15 kernel, then the performance is just 1 or 2 percent slower than on systems running Linux kernel 4.11.

http://news.softpedia.com/news/linux...s-519639.shtml

4.15 user here, who rolls their own! WoOt

Runs great, as fast as any kernel I've ever used, no slow downs here! Vrooom

[Volfin]

You're not paying attention. Intel pulled the microcode and told OEMs to back it out. It causes reboots and data loss.

I don't give a crap. I want the fix. there's now over 100 viruses running around that explot meltdown and i'm sitting here with my ass flapping in the wind.

https://www.techrepublic.com/google-...ns-of-malware/

I'll gladly take a random reboot over infection.

[alligator69]

I don't give a crap. I want the fix. there's now over 100 viruses running around that explot meltdown and i'm sitting here with my ass flapping in the wind.

I'll gladly take a random reboot over infection.

Well, Intel has asked manufacturers to stop distributing the faulty microcode.

Feel free to contact Intel directly and let them know your feelings about this whole situation.
I’m sure they’ll care!
https://www.intel.com/content/www/us...t-support.html

Let us know how it went!
(seriously though, if they tell you anything useful, do post)