Major Intel CPU Hardware Vulnerability Found

[jsfitz54]

PATCH: If you have it done correctly, check W10 version number...

Download January 3 CU KB4056892 x64 (601.8MB)

Brings system to 16299.192

List of improvements and fixes found here.(page doesn't want to load with IE, for me anyway, works fine with Edge though)

 

[John Naylor]

Everything that's coming out today has it going far beyond Intel and into even mobile phones .... that won't stop pundits / fans of all sides from running 28 benchmarks and publishing the best / worst one of the bunch as "typical impact"

 

[trog100]

Closing backdoors is a good thing. Major data leaks that affect national security and private finance and utility companies and hospitals needs to stop.
This has been going on more heavily these past 2 years.

I'm glad for the shake up.

Who do we have to blame?
Nefarious actors include: North Korea, Russia, China, Iran and others.

i would lay the blame far closer to home.. but then again i aint a patriotic american.. just an old cynical English dude.. he he

trog

 

[notb]

So, you have confirmed what i continue telling you, i don't have that update
#118

I had a similar issue. Check if your connection isn't marked as metered.
Mine was, I switched it off and the update appeared instantly.

Microsoft, Intel and NVIDIA
explains a lot , I've found a signature i think.

Because I like to invest in large, fairly stable companies making electronics? I don't think that's a very unique approach.
I have 8 companies on a list. I can tell you the forth one: SAP.
They tick all the right boxes: big, fairly dominant in their niche, paying stable dividends, relatively diversified if possible (Intel's weakness, but they're working on it) and I understand their products.
It's meant to be a fairly safe portfolio for the next decade or so. It's going to replace some stock-based investment funds and I'm hoping for 20% yearly.

Just to inform you:
1) why there are no Internet-era giants like Amazon or Alphabet: they don't pay dividends,
2) why there is no AMD: because I think they will be restructured before we see AM5.

In fact, 2018 might be the year when both Intel and AMD fire their CEOs. Interesting.

 

[TheoneandonlyMrK]

I had a similar issue. Check if your connection isn't marked as metered.
Mine was, I switched it off and the update appeared instantly.
View attachment 95586

Because I like to invest in large, fairly stable companies making electronics? I don't think that's a very unique approach.
I have 8 companies on a list. I can tell you the forth one: SAP.
They tick all the right boxes: big, fairly dominant in their niche, paying stable dividends, relatively diversified if possible (Intel's weakness, but they're working on it) and I understand their products.
It's meant to be a fairly safe portfolio for the next decade or so. It's going to replace some stock-based investment funds and I'm hoping for 20% yearly.

Just to inform you:
1) why there are no Internet-era giants like Amazon or Alphabet: they don't pay dividends,
2) why there is no AMD: because I think they will be restructured before we see AM5.

In fact, 2018 might be the year when both Intel and AMD fire their CEOs. Interesting.

Fair enough and fairly wise I would say but i was just having a crypto meeting with a friend (i got him into mining and run his stuff) and his main gist of the evening was , Can someone talk up or down particular cryptos via social media channels etc and affect the price in a helpful way, i think you can.
It made me realise that this can be a legitimate motivator to people.

 

[FireFox]

I had a similar issue. Check if your connection isn't marked as metered.
Mine was, I switched it off and the update appeared instantly.

Everything is ok there.

As you can see my system is still 16299 instead 16299.192

Download January 3 CU KB4056892 x64 (601.8MB)

Brings system to 16299.192

 

[R-T-B]

who must have root access

In his own VM...

This is a VM-internal exploitable bug, bill. Average Joe may not be able to make heads or tails of memory but a skilled hacker with nefarious intentions can.

 

[biffzinker]

Performance impact of Windows patch and BIOS update (0606) on i7-8700 on ASUS PRIME Z370-A motherboard using Realbench 2.56

I just finished running Rise of the Tomb Raider benchmarks, 1080p, very high preset, FXAA.
Unpatched:

• Mountain Peak: 131.48 FPS (min: 81.19 max: 197.02)
• Syria: 101.99 FPS (min: 62.73, max: 122.24)
• Geothermal Valley: 98.93 FPS (min:76.48, max: 117.00)
• Overall score: 111.31 FPS

Windows patch only:

• Mountain Peak: 135.34 FPS (min: 38.21 max: 212.84)
• Syria: 102.54 FPS (min: 44.22, max: 144.03)
• Geothermal Valley: 96.36 FPS (min:41.35, max: 148.46)
• Overall score: 111.93 FPS

Windows patch and BIOS update:

• Mountain Peak: 134.01 FPS (min: 59.91 max: 216.16)
• Syria: 101.68 FPS (min: 38.95, max: 143.44)
• Geothermal Valley: 97.55 FPS (min:46.18, max: 143.97)
• Overall score: 111.62 FPS

Average framerates don't seem affected.

Everyone's favorite Geekbench

Unpatched:

Windows Patch Only

Windows Patch + BIOS Update

Source: Reddit

 

[fullinfusion]

Ryzen 2 here I come!!

And next exploited will be Nvida lol

 

[okidna]

Everything is ok there.

As you can see my system is still 16299 instead 16299.192



View attachment 95588

Run "winver" command and you will see your full Windows version.

 

[R0H1T]

The AWS forum seems to be having a meltdown of sorts

 

[R-T-B]

The AWS forum seems to be having a meltdown of sorts

To be fair, if I I was a web service hoster I'd be concerned. But I doubt AWS is that stupid to not patch.

 

[R0H1T]

To be fair, if I I was a web service hoster I'd be concerned. But I doubt AWS is that stupid to not patch.

I was referring to AWS customers, lots of them have seen a performance hit & there's huge concern wrt security & the kind of misinformation Intel's doing won't help anyone at all.
For instance not one mention of a microcode update by Intel IIRC.

 

[FireFox]

Run "winver" command and you will see your full Windows version.

I will when i get home this afternoon.

 

[R0H1T]

Another way to see how you're vulnerable ~ https://github.com/ionescu007/SpecuCheck

 

[FireFox]

Another way to see how you're vulnerable ~ https://github.com/ionescu007/SpecuCheck
View attachment 95594

Do you mind to explain that screenshot?

 

[R0H1T]

Do you mind to explain that screenshot?

The first part is meltdown CVE-2017-5754 (patched yesterday with MS' KB4056892) user pages marked global scratch that, seems irrelevant

This is an evolving situation so I won't comment more than I already know or understand.

The second is spectre 2 (CVE-2017-5715) which needs a hardware fix (microupdate) from Intel & an OS update I presume, that's still to be patched.

 

[johnspack]

Can I keep this microcode update off my 1650.... I run multiple vms at times... and I can't afford slowdowns on this old thing. And I don't give a dam if they share memory!
Yeah, I know.....

 

[R0H1T]

Can I keep this microcode update off my 1650.... I run multiple vms at times... and I can't afford slowdowns on this old thing. And I don't give a dam if they share memory!
Yeah, I know.....

There's always that choice, though I don't know what microcode update you're talking about? The MS KB4056892 is for meltdown on win10, it doesn't have any microcode update that I know of.

 

[notb]

An excellent article about the situation. Highly recommended.
https://arstechnica.com/gadgets/201...el-apple-microsoft-others-are-doing-about-it/

 

[Vlada011]

Real Bench 2.54 Image Edition 5820K 4.2GHz

September 17

197.304
28.2745

October 14

199.103
26.7559

December 7

197.903
26.9221

December 10

198.633
26.8232

After Windows Update
Januar 6

138.704
38.4125


Intel just destroy enjoying of people in benchmark tests, overclocking, delidding, watercooling, etc.
No everything look pointless and to be honest many people will don't like any more to test their systems like that and that will reflect on motherboard vendors and memory vendors, watercooling systems, delidding tolls, etc...

How someone could ask to buy i7-8700K, are you normal. Who normal think about upgrade before complete fix and completely new Core.
Intel sell us same Core 10 years and it's not weird why all of them have same problems.

 

[FireFox]

As i said in some of my previous post before, my Machine runs FIFA, DOOM and the rest of the others Games i own, that said i am fine, Benchmarks? My Machine wasn't built for that.

 

[notb]

Intel just destroy enjoying of people in benchmark tests, overclocking, delidding, watercooling, etc.

Yup, Intel doesn't care about all that. Nor does the other 99.9% of human race. You have to live with that.
You're benchmarking your system at least once a month? For how long has this been going on? Seriously?

 

[Ahhzz]

"Security experts said it was impossible to know whether hackers had used the two software flaws to steal data, though it’s possible given that rumors of the flaws had been circulating for several months within the security community."
"Cybersecurity researcher Matt Tait said he first learned about Meltdown last week. With about a day of work, he was able to develop a functioning example of how the vulnerability could work. He said it’s impossible to know whether malicious hackers have deployed Meltdown because the flaw creates no record of the intrusion.
'The reality is we don’t know,' said Tait, a senior cybersecurity fellow at the Robert S. Strauss Center at the University of Texas at Austin. 'Now that the vulnerability has been made public, we should expect this being exploited in the wild in the next few days.' "

Accepting that it's not a major risk to most people, we have no way of knowing whether or how long it was exploited.

 

[HTC]

As i said in some of my previous post before, my Machine runs FIFA, DOOM and the rest of the others Games i own, that said i am fine, Benchmarks? My Machine wasn't built for that.

It's a good thing that you can be attacked by this by something external to your PC then: Take a look @notb 's post link (which i quote below) and scroll down to the "microsoft" section, just below the blue background pic and start reading from there.

It's a good thing this can't affect you then, right? Oh wait ...

An excellent article about the situation. Highly recommended.
https://arstechnica.com/gadgets/201...el-apple-microsoft-others-are-doing-about-it/