Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 22
Like Tree5Likes

Thread: Vulnerabilities: Spectre and Meltdown

  1. #11
    WHERE IS GOD DennyCrane's Avatar
    Join Date
    Apr 2006
    Location
    Kekistan
    Posts
    77,003

    Re: Vulnerabilities: Spectre and Meltdown

    Serious question- has there been any verified instances, out in the wild, of real attacks using these vulnerabilities?
    0118 999 881 999 119 7253

  2. #12
    Time 2 Play DigitalDD's Avatar
    Join Date
    May 2003
    Location
    The Land of OZ
    Posts
    6,729

    Re: Vulnerabilities: Spectre and Meltdown

    Not yet, its similar to the Intel Management Engine flaws from back in 2015 & 2017 they are quite complicated to pull off remotely.
    DennyCrane likes this.

  3. #13
    Time 2 Play DigitalDD's Avatar
    Join Date
    May 2003
    Location
    The Land of OZ
    Posts
    6,729

    Re: Vulnerabilities: Spectre and Meltdown

    So it seems more and more unique samples are being submitted to AV test sites so the exploits for Spectre & Meltdown are making their way out in the wild.

    Just a little warning.


  4. #14
    WHERE IS GOD DennyCrane's Avatar
    Join Date
    Apr 2006
    Location
    Kekistan
    Posts
    77,003

    Re: Vulnerabilities: Spectre and Meltdown

    Ruh roh, Shaggy.
    0118 999 881 999 119 7253

  5. #15
    Time 2 Play DigitalDD's Avatar
    Join Date
    May 2003
    Location
    The Land of OZ
    Posts
    6,729

    Re: Vulnerabilities: Spectre and Meltdown

    For those on windows 10: Microsoft announces new updates to protect against Spectre and Meltdown attacks | ZDNet

    I'm guessing they'll be some more BIOS updates from motherboard makers too.
    VincentVega likes this.

  6. #16
    Registered User
    Join Date
    Mar 2018
    Location
    Tampa, Florida
    Posts
    11

    Re: Vulnerabilities: Spectre and Meltdown

    "I'm guessing they'll be some more BIOS updates from motherboard makers too."

    That's good to know. More security then?

  7. #17
    Time 2 Play DigitalDD's Avatar
    Join Date
    May 2003
    Location
    The Land of OZ
    Posts
    6,729

    Re: Vulnerabilities: Spectre and Meltdown

    Hopefully. I would assume after this the next gen chips/chipsets should be more secure.

    Alas the similar flaws found in AMD chips/chipsets have been verified.
    https://community.amd.com/community/...-labs-research

  8. #18
    Time 2 Play DigitalDD's Avatar
    Join Date
    May 2003
    Location
    The Land of OZ
    Posts
    6,729

    Re: Vulnerabilities: Spectre and Meltdown

    More related hardware issues in intel chips, i guess we should stop using computers.. https://www.tomshardware.com/news/in...ack,39333.html

    From article:
    Intel clarified that it's not recommending everyone to disable Hyper-Threading, but that some of its customers should consider the option depending on their security needs:

    "Once these updates are applied, it may be appropriate for some customers to consider additional steps. This includes customers who cannot guarantee that trusted software is running on their system(s) and are using Simultaneous Multi-Threading (SMT). In these cases, customers should consider how they utilize SMT for their particular workload(s), guidance from their OS and VMM software providers, and the security threat model for their particular environment. Because these factors will vary considerably by customer, Intel is not recommending that Intel® HT be disabled, and it’s important to understand that doing so does not alone provide protection against MDS."

    Google seems to be one of those select customers which considers the risk of keeping HT enabled just too big. The company has published on the Chromium site that HT will be disabled in Chrome OS version 74:

    "To protect users, Chrome OS 74 disables Hyper-Threading by default. For the majority of our users, whose workflows are primarily interactive, this mitigates the security risk of MDS without a noticeable loss of responsiveness. Chrome OS 75 will contain additional mitigations."

  9. #19
    C-57D VincentVega's Avatar
    Join Date
    Mar 2006
    Location
    Altair IV
    Posts
    46,271

    Re: Vulnerabilities: Spectre and Meltdown

    sigh. I'm due for a new work computer, but I am trying to wait as long as possible to get the best hardware mitigation

  10. #20
    WHERE IS GOD DennyCrane's Avatar
    Join Date
    Apr 2006
    Location
    Kekistan
    Posts
    77,003

    Re: Vulnerabilities: Spectre and Meltdown

    Just buy a dog so you're 100% safe.
    VincentVega likes this.
    0118 999 881 999 119 7253

Page 2 of 3 FirstFirst 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Advertise:
Ads@StrafeRight.com

Terms of Service || Privacy & DMCA Policies || About Us
Powered by vBulletin® Version 4.2.2
Copyright © 2019 vBulletin Solutions, Inc. All rights reserved.
Search Engine Friendly URLs by vBSEO 3.6.0

All times are GMT -4. The time now is 07:17 AM.
Design by DanFortH