Monday, July 2nd 2018
Intel Releases "Spectre" Hardening Microcode Updates for "Ivy Bridge" thru "Westmere" Architectures
Intel today released the latest round of CPU micro-code updates for its processors, which expand support for Intel processor microarchitectures ranging all the way back to 1st generation Core "Westmere," and "Lynnfield," and including "Sandy Bridge" and "Ivy Bridge" along the way, at various stages of roll-out (beta, pre-production, and production). This update probably features hardening against "Spectre" variant 4, and perhaps even RSRR (rogue system register read) variant 3A, chronicled in CVE-2018-3640.
Source:
Intel
39 Comments on Intel Releases "Spectre" Hardening Microcode Updates for "Ivy Bridge" thru "Westmere" Architectures
I wonder after all the patches from Intel, how much real performance is left compared to AMD hardware.
For enterprise these patches impact some serious numbers.
I am stil waiting to hear about actual real world application of these "flaws". So far its all nerds complaining about bios updates.
Then again people have been known to save their credentials on internet cafe computers because it was too much of a bother to enter them 2-3 times. Why would a stuttering game be any different?
But you're right, this should not be confused with vaccination. That's a whole different ballgame with different stakes.
Only bad thing that they didn't updated official BIOS on the product page. So please, bombard you mobo manufacturer with requests for updated BIOS.
en.wikipedia.org/wiki/Spectre_(security_vulnerability)
meltdownattack.com/
www.csoonline.com/article/3247868/vulnerabilities/spectre-and-meltdown-explained-what-they-are-how-they-work-whats-at-risk.html
Get your facts straight. :shadedshu:
Sadly, as much as I agree with one of the low quality posts about us needing to filter better, an IQ test would kill us (I mean, have you ever taken one?), and is biased to certain groups besides... What we are doing now is fine.
Can you honestly say you'd take another one, just to post here?
I'll answer for you (and keep in mind I love it here):
Fuck no.
It also doesn't test any kind of practical knowledge. "Common sense is unfortunately not very common" comes to mind. :)
So, this exploit has been known for a while now, right? Has any malicious software actually been identified as trying to use this exploit and being successful at it? Is it even feasible? I know it can be done but, is it realistic?
Virus may have been the wrong term (semantics) but the fact remains (IF) stolen data is used that contains usernames/ passwords etc, it can be used to gain control of systems.
If an IQ test were implemented, quite a few members should fail based on their lack of ability to read between the lines and lack of lateral thinking.
@Everyone - Get along or move along. Also, stop derailing the thread and stay on topic.
www.phoronix.com/scan.php?page=article&item=intel-spectre-ssbd&num=1