Huge Intel CPU Bug

[zakblood]

latest information is it's all types of cpu from all makers,

Code: Select all

https://www.cnet.com/uk/how-to/how-to-fix-meltdown-spectre-intel-amd-arm-windows-mac-android-ios/

and doesn't just effect windows either, as the link now shows, it's global

[zakblood]

for now, a quick fix if you wish to use it,

To turn on Site Isolation on Windows, Mac, Linux, Chrome OS or Android:

Type or copy-paste chrome://flags/#enable-site-per-process into the URL field at the top of your Chrome web browser, then hit the Enter key.
Look for Strict Site Isolation, then tap or click the box labeled Enable.
If your work is saved, hit Relaunch Now. Otherwise, save your work, then quit and relaunch Chrome.

or wait for the patches to roll out the auto ones etc, your call as always, this is just part or a larger issue, but patched or fixed on day one, the others will roll out asap

[Karri]

Good news is that this doesn't affect game performance, at least as per initial testing.

[zakblood]

Code: Select all

https://support.microsoft.com/en-gb/help/4056892/windows-10-update-kb4056892

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

Addresses issue where event logs stop receiving events when a maximum file size policy is applied to the channel.
Addresses issue where printing an Office Online document in Microsoft Edge fails.
Addresses issue where the touch keyboard doesn’t support the standard layout for 109 keyboards.
Addresses video playback issues in applications such as Microsoft Edge that affect some devices when playing back video on a monitor and a secondary, duplicated display.
Addresses issue where Microsoft Edge stops responding for up to 3 seconds while displaying content from a software rendering path.
Addresses issue where only 4 TB of memory is shown as available in Task Manager in Windows Server version 1709 when more memory is actually installed, configured, and available.
Security updates to Windows SMB Server, the Windows Subsystem for Linux, Windows Kernel, Windows Datacenter Networking, Windows Graphics, Microsoft Edge, Internet Explorer, and the Microsoft Scripting Engine.

plus more than a few other fixes, so far a 6 hour test has confirmed really no impact on games, so it's seems it's only a few apps which it may effect[;)]

[berto]

Beyond the vague "security updates to ... Windows Kernel ...", do we have confirmation that KB4056892 fixes the Meltdown and Spectre bugs specifically? Has Microsoft otherwise made this clear?

[Lecivius]

ORIGINAL: berto


Beyond the vague "security updates to ... Windows Kernel ...", do we have confirmation that KB4056892 fixes the Meltdown and Spectre bugs specifically? Has Microsoft otherwise made this clear?

No. Meltdown 'might' be corrected via a patch, yet to be seen. I don't see how Spectre can be fixed in any other fashion than new HW.

[Rodwonder]

Thanks for the heads up!!! Wow!

[ncc1701e]

ORIGINAL: Karri

Good news is that this doesn't affect game performance, at least as per initial testing.

Cool crossing fingers... [:)]

[Franciscus]

It's the end of the world...Run for the hills [:D][:D][:D]

Seriously I am not overly concerned about all this stuff in regard to my personal usage of PCs.

But if this will entail significant performance drops in the servers of my hospital - that are already a their limits -that may seriously affect my daily work.


We will see...

[Lobster]

ORIGINAL: Lecivius

ORIGINAL: berto


Beyond the vague "security updates to ... Windows Kernel ...", do we have confirmation that KB4056892 fixes the Meltdown and Spectre bugs specifically? Has Microsoft otherwise made this clear?

No. Meltdown 'might' be corrected via a patch, yet to be seen. I don't see how Spectre can be fixed in any other fashion than new HW.

So when can I expect my new CPU to arrive to replace my old one because of manufacturing defects? [:D]

[Lecivius]

ORIGINAL: Lobster

ORIGINAL: Lecivius

ORIGINAL: berto


Beyond the vague "security updates to ... Windows Kernel ...", do we have confirmation that KB4056892 fixes the Meltdown and Spectre bugs specifically? Has Microsoft otherwise made this clear?

No. Meltdown 'might' be corrected via a patch, yet to be seen. I don't see how Spectre can be fixed in any other fashion than new HW.

So when can I expect my new CPU to arrive to replace my old one because of manufacturing defects? [:D]

I'll get right on that! [;)]

[berto]

This:

It really boils down to – as we said, and Intel pointed out – your workload. If you just play games on your PC, you will not see a slowdown because the software rarely jumps to the kernel during gameplay. Your game will be mostly talking to the graphics processor.

If all you do is browse Twitter, write emails, and type away in a word processor, you probably won't notice any difference. If you do a lot of in-memory number crunching, you won't see much of an impact because again the kernel isn't getting in the way. If you have PCID support enabled on your hardware and in your kernel, any performance hit should be minimized.

If you hammer the disk, the network, or use software that makes lots of system calls in and out of the kernel, and you're lacking working PCID support, you will see a performance hit. And it's a good idea to warn you, right?

It's a given for this particular issue that any slowdown is dependent upon the kind of work the affected system is being asked to do. Gamers will maintain their frame rates, but that's not what this is about. It's about enterprise workloads and data centers. With reports of SQL database slowdowns of up to 20 or so per cent, it seems premature to say the impact should not be significant. If a company's AWS, Microsoft Azure, or Google Cloud bill ends up being, say, three, five or eight per cent higher as a consequence of prolonged compute times, that's significant.

[zakblood]

yes agreed the impact seems to be less than they feared anyway, for most for now, just some more today news,...

Meltdown and Spectre: All Mac devices affected says Apple

Apple has said that all iPhones, iPads and Mac computers are affected by two major flaws in computer chips.

It emerged this week that tech companies have been racing to fix the Meltdown and Spectre bugs, that could allow hackers to steal data.

Apple said it had already released some patches but there was no evidence that the vulnerability had been exploited.

But it advised downloading software only from trusted sources to avoid "malicious" apps.

Mac users have often believed that their devices and operating systems are less vulnerable to security issues than, for example Android phones or computers running Microsoft systems.

But the Meltdown and Spectre flaws are found in all modern computer processing units - or microchips - made by Intel and ARM, and together the firms supply almost the entire global computer market.

"All Mac systems and iOS devices are affected, but there are no known exploits impacting customers at this time," Apple said in blog post on the issue.

"These issues apply to all modern processors and affect nearly all computing devices and operating systems."

Apple said it had already released "mitigations" against Meltdown in its latest iPhones and iPad operating system update - iOS 11.2 and the macOS 10.12.2 for its MacBooks and iMacs.

Meltdown does not affect the Apple Watch, it said, as the bug was an issue with Intel processors which are not contained in that device.

Patches against Spectre, in the form of an update to web browser Safari, will be released "in the coming days".

Google and Microsoft have already issued statements telling users which products are affected by the bugs.

Google said its Android phones - which make up more than 80% of the global market - were protected if users had the latest security updates.

And Microsoft has already released fixes for many of its services.

[pzgndr]

ORIGINAL: zakblood
yes agreed the impact seems to be less than they feared anyway, for most for now, just some more today news,...

I saw this too at Major chip flaws affect billions of devices . But...

The flaws could allow an attacker to read sensitive data stored in the memory, like passwords, or look at what tabs someone has open on their computer, researchers found. Daniel Gruss, a researcher from Graz University of Technology who helped identify the flaw, said it may be difficult to execute an attack, but billions of devices were impacted.

Does a computer chip kernel actually store sensitive transient data in memory, and is the kernel hackable? This doesn't sound correct to me, but this is so deep into the chip technology that it's mind boggling. Who knows. I'd like to see more information from a more reputable tech source than CNN.

[carll11]

Intel, AMD, Qualcommn, several other ARM manufacturers ALL, allowed the same 'design' flaw to get not only out the door, but stay out 'undetected' for a decade'..........go ahead, ponder that for a while............. then go read up on chip architecture. You tell me, what are the odds?

[carll11]

To Pzgndr;

Does a computer chip kernel actually store sensitive transient data in memory, and is the kernel hackable?

short answer- yes..........I would not use the term store though not as we normally use it, I'd say it this way; the 'call' is made, sometimes even ahead of time anticipating your request for information, it may 'reside' on the chip cache for a bit, when you shut down the cache should flush.
The 'kernal' is hacakble yes.

[Lobster]

It's about enterprise workloads and data centers. With reports of SQL database slowdowns of up to 20 or so per cent,

So how does this affect game servers?

[Zap]

So when should I buy a new computer that will have the new CPU without this bug. i'm sure all the stores and shipping outlets are stocked full of these bug ridden CPU'ss

[Mobius]

I think that may be the solution. Unfortunately I replaced my 3 computers last year. Bad timing.

[Lobster]

ORIGINAL: Zap

So when should I buy a new computer that will have the new CPU without this bug. i'm sure all the stores and shipping outlets are stocked full of these bug ridden CPU'ss

Ouch. This is looking like a multi billion dollar snafu. [8|]