2018 is not Starting off well - Intel CPUs Expose Kernel Contents to Users

harshness

SatelliteGuys Master
May 5, 2007
18,890
4,065
Salem, OR
Intel was saying "hey, it's not just us, everybody does it."
If an AMD processor encounters an instruction with higher privilege, it doesn't execute it in anticipation of getting permission and that's the whole point. It takes longer but in the long run it doesn't risk exposing the result of the privileged instruction.

I should note that this is mostly of concern to enterprises that engage in cloud computing where elements of a computer are shared with other enterprises. The sad part is that many of these enterprises use the same perversions of Windows so standalone users suffer the performance consequences (unless their antivirus solution prevents installation of the "mitigation") as collateral damage.
 

Foxbat

Addicted to new HW
Supporting Founder
Pub Member / Supporter
Lifetime Supporter
Nov 25, 2003
20,767
14,555
Michiana
Saw that xkcd took on explaining the Spectre and Meltdown vulnerability:
meltdown_and_spectre.png

(New zero-day vulnerability: In addition to rowhammer, it turns out lots of servers are vulnerable to regular hammers, too.)

Apple released macOS 10.13.2 which patches around the Spectre exploit. Also, iOS 11.2.2 for A-series devices.
 
  • Like
Reactions: TheKrell

Users Who Are Viewing This Thread (Total: 0, Members: 0, Guests: 0)

Who Read This Thread (Total Members: 1)

Latest posts