The Computer Sky is Falling!!!! - But, your Luger Friends are here to help you...

mrerick · 01-04-2018, 12:49 PM

f you've been watching the news the last couple of days, you realize that a major flaw in the architecture of personal computer and mobile processors has been discovered and now exposed.

The potential exploit goes by the name "Spectre" or "Meltdown" and you'll find lots of news coverage and writeups about it.

They range from the most technical discussions possible to "the sky is falling" sensationalist news items.

One thing they don't tell you is how to mitigate or fix the problem.

If you run Windows 10, a fix was released today which will come through the normal channel as "2018-01 Cumulative Update for Windows 10 Version 1709". You want this fix and want it installed as soon as possible. Use the "Windows Update" function under settings (the little gear symbol on the lower right menu) and "Updates & Security" to get it installed. If it doesn't come in the next day or two automatically, there is a way to download it, but all maintenance has to be installed in sequence and it gets complicated. The specific problem is "KB4056892" and the fix can be downloaded from:

https://www.catalog.update.microsoft...px?q=KB4056892

but try and avoid using this, instead relying on Windows Update's normal distribution.

If you use earlier versions of Windows, the fix won't be released until the next weekly update stream is released.

If you use Linux, I know that the fix was released today in the Fedora 27 update for the "4.14.11" kernel. As of today, Ubuntu has said that they are still working on it. The command under Linux for updating the system is:

"sudo dnf --refresh update"

You must then enter "root's password. Other distributions have similar commands.

Android is due to release a fix January 5th and start distributing it to carriers for their update streams.

This problem is a serious one that has not yet been exploited by the hackers. It's sure to be exploited very soon so it does make sense to address it. Every processor made by Intel and AMD since 1995 is vulnerable to one or both of the exploits. This is probably a good reason to avoid older operating systems on your computers and phones / tablets from now on.

Note that a fair amount of software was written to take advantage of the processor feature that is insecure, and these fixes will stop using that feature - resulting in computing slowing down world wide - perhaps 5-10%...

This article has more details, including discussion of browser related updates that are also coming:

https://www.cnet.com/news/spectre-me...erability-faq/

Cheers!

Marc

Edward Tinker · 01-04-2018, 02:04 PM

we are working on it at work - its a lot of detailed info, but it is also unlikely to strike anyone

01-04-2018, 12:49 PM	#1
mrerick Super Moderator - Patron LugerForum Life Patron Join Date: Dec 2009 Location: Eastern North Carolina, USA Posts: 3,907 Thanks: 1,374 Thanked 3,108 Times in 1,509 Posts	The Computer Sky is Falling!!!! - But, your Luger Friends are here to help you... f you've been watching the news the last couple of days, you realize that a major flaw in the architecture of personal computer and mobile processors has been discovered and now exposed. The potential exploit goes by the name "Spectre" or "Meltdown" and you'll find lots of news coverage and writeups about it. They range from the most technical discussions possible to "the sky is falling" sensationalist news items. One thing they don't tell you is how to mitigate or fix the problem. If you run Windows 10, a fix was released today which will come through the normal channel as "2018-01 Cumulative Update for Windows 10 Version 1709". You want this fix and want it installed as soon as possible. Use the "Windows Update" function under settings (the little gear symbol on the lower right menu) and "Updates & Security" to get it installed. If it doesn't come in the next day or two automatically, there is a way to download it, but all maintenance has to be installed in sequence and it gets complicated. The specific problem is "KB4056892" and the fix can be downloaded from: https://www.catalog.update.microsoft...px?q=KB4056892 but try and avoid using this, instead relying on Windows Update's normal distribution. If you use earlier versions of Windows, the fix won't be released until the next weekly update stream is released. If you use Linux, I know that the fix was released today in the Fedora 27 update for the "4.14.11" kernel. As of today, Ubuntu has said that they are still working on it. The command under Linux for updating the system is: "sudo dnf --refresh update" You must then enter "root's password. Other distributions have similar commands. Android is due to release a fix January 5th and start distributing it to carriers for their update streams. This problem is a serious one that has not yet been exploited by the hackers. It's sure to be exploited very soon so it does make sense to address it. Every processor made by Intel and AMD since 1995 is vulnerable to one or both of the exploits. This is probably a good reason to avoid older operating systems on your computers and phones / tablets from now on. Note that a fair amount of software was written to take advantage of the processor feature that is insecure, and these fixes will stop using that feature - resulting in computing slowing down world wide - perhaps 5-10%... This article has more details, including discussion of browser related updates that are also coming: https://www.cnet.com/news/spectre-me...erability-faq/ Cheers! Marc __________________ Igitur si vis pacem, para bellum - - Therefore if you want peace, prepare for war. Last edited by mrerick; 01-04-2018 at 02:50 PM.

01-04-2018, 02:04 PM	#2
Edward Tinker Super Moderator Eternal Lifer LugerForum Patron Join Date: Jun 2002 Location: North of Spokane, WA Posts: 15,924 Thanks: 2,014 Thanked 4,518 Times in 2,087 Posts	we are working on it at work - its a lot of detailed info, but it is also unlikely to strike anyone