Intel bug incoming? Meltdown and Spectre exploits

[beany_bot]

Because you need a BIOS update / CPU microcode patch to fix the security issues. If your motherboard maker hasn't released an update in the last 24 hours then wait until they do and update as soon as possible. These security issues can't just be fixed by an operating system patch, you need a BIOS update / CPU microcode fix.

How many people outside the enthusiast community are going to do this? 0.00001%??

 

[Swinbag]

How far are these BIOS updates going back? Will z77 be getting them?

I was just wondering this myself - looks like users on older chipsets could be SOL for BIOS updates.

 

[Cromulent]

How many people outside the enthusiast community are going to do this? 0.00001%??

That is probably true. Looks like hackers just got a late Christmas present. Millions of computers that are vulnerable and 99% of users not knowing what they need to do to fix the security problem.

 

[Cromulent]

I was just wondering this myself - looks like users of older chipsets could be SOL for BIOS updates.

I'm wondering if my X79 ASUS Sabertooth will get a BIOS update at some point. I guess it is too old to be supported now.

 

[ltron]

So is this fixed at the OS level, ie a Windows Update, my laptop manufacturer just pointed me towards https://meltdownattack.com

Meltdown is, Spectre is not and requires a Bios update.

 

[jigger]

For most home users, why the panic this is just a threat no certain attack.

If by most users you mean a single machine mainly used for gaming then switched off then yeah, not a big deal. If you have a more than one machine and/or use the system for other tasks then you probably should have at least a healthy level of concern.

Until this mess is sorted out attacks will almost certainly come. How the exploits are used and to what effect is anyone's question.

 

[jigger]

Meltdown is, Spectre is not and requires a Bios update.

BIOS update for every Intel machine?

 

[LoadsaMoney]

Firefox Quantum has updated for them.

 

[Things change I've changed]

I'm still a little confused as to what can be gained from the exploites, I thought passwords etc where encrypted? what does this hack actually allow hackers to have from your system that and average person should be concerned about?

 

[Rimsy]

I'm still a little confused as to what can be gained from the hack, I thought passwords etc where encrypted? what does this hack actually allow hackers to have from your system that and average person should be concerned about?

banks / infrastructure being messed with is probably the main worry here I guess?

 

[V F]

banks / infrastructure being messed with is probably the main worry here I guess?

Banks and their security practices.

 

[thenewoc]

BIOS update for every Intel machine?

Bring on the class action I say. Reimbursement for a flawed CPU and the cost of replacing the mobo to facilitate a CPU that doesn't have the issue or is at least supported through an updated CPU microcode / bios update.

 

[ltron]

BIOS update for every Intel machine?

Yes, just Intel I believe as I think the Bios update is to fix Spectre variant 2 which AMD are not vulnerable to. However, I wish they'd clarify this as it's confusing.

 

[jigger]

I'm still a little confused as to what can be gained from the hack, I thought passwords etc where encrypted? what does this hack actually allow hackers to have from your system that and average person should be concerned about?

A lot. Depends what you do with the system and what information you have. Take control the network host file and you could have some fun.

 

[killianzz]

I just heard about this and unfortunately know very little about computer/network security (although probably a lot more than the average Joe.

I bought an i7 8700k in December for my gaming rig - will the software patch that would impact it's performance have already been installed? I noticed an 8% drop in BF1 fps recently, but I assumed this was as a result of a BF1 patch. I'd rather not install the patch, all I really care about with this rig is gaming performance. There's no data on there that I'd care about if it was accessed. Is it possible to avoid installing the performance hindering patch? (Or uninstall it if it has already been installed?)

Also, would having a secure VPN running constantly nullify the vurnerability or not?

All of my personal data is on my server which I will of course install all the fixes on.

 

[jigger]

Yes, just Intel I believe as I think the Bios update is to fix Spectre variant 2 which AMD are not vulnerable to. However, I wish they'd clarify this as it's confusing.

This could roll on for decades...

 

[jigger]

Bring on the class action I say. Reimbursement for a flawed CPU and the cost of replacing the mobo to facilitate a CPU that doesn't have the issue or is at least supported through an updated CPU microcode / bios update.

Only useful inside the US.

 

[thenewoc]

Only useful inside the US.

Surely the EU has something similar to spank these bad bois.

 

[jigger]

Surely the EU has something similar to spank these bad bois.

The EU will fine Intel a few billion. Only useful for those inside the EU though. Great timing LOL. Maybe Intel was waiting for our exit to save a few quid.

 

[humbug]

Intel PR, if it has not already will go into absolute overdrive putting out fires now, i expect the internet about to be flooded with benchmarks apparently showing no performance penalties, no real security flaws and general "everything is super at Intel, nothing to see here" articles going up in the next few days.