Intel Meltdown and Spectre

[kingtopcat]

Between this & the Intel Management Engine Vulnerability I'm beginning to wonder if Intel's decade long hegemony is at an end because AMD's chips aren't as fragile?

                                                                                                                           kingtopcat

[Grzwacz]

Hi

Just built an 8700k system.

Intel knew about the flaws before releasing Coffee Lake and did nothing to mitigate.

Microsoft Windows 10 update for the OS fix has broken Asus software.

Very frustrating.

Tom

[mdklassen]

> because AMD's chips aren't as fragile?

Doubtful.  Even Apple CPUs are vulnerable.

In fact, one Microsoft update KB4056894 (January 3, 2018) has "bricked" three computers, all with AMD processors, all running Windows 7.   None of the Windows 7 systems with Intel processors have experienced the problem.

Hint: run "System Restore" on the affected computers, selecting the most-recent checkpoint (created by Windows Update, just before it did any updating), to "unbrick" those AMD-based systems.

For EXCELLENT articles about the two vulnerabilities, read: 

         https://isc.sans.edu/forums/diary/Meltdown+and+Spectre+clearing+up+the+confusion/23197/

and:

https://isc.sans.edu/forums/diary/Spectre+and+Meltdown+What+You+Need+to+Know+Right+Now/23193/

from the "Internet Storm Center" group at SANS.

[treysis]

---

@Keesjand wrote:

Use this tool from intel to check your sustem:

https://www.intel.com/content/www/us/en/support/articles/000025619/software.html

from there FAQ's:

: The Intel-SA-00086 Detection Tool reports that my system is vulnerable. What do I do?
A: Intel has provided system and motherboard manufacturers with the necessary firmware and software updates to resolve the vulnerabilities identified in Security Advisory Intel-SA-00086.

Contact your system or motherboard manufacturer regarding their plans for making the updates available to end users.

Some manufacturers have provided Intel with a direct link for their customers to obtain additional information and available software updates (Refer to the list below). 

---

This tool DOES NOT check for Spectre and/or Meltdown vulnerability. This tool is for the recent Intel Management Engine vulnerability. Most systems should have received a patch for this already. Mine did so in November 2017, and thus doesn't show to be vulnerable anymore, but is still vulnerable to Spectre.

The date of the tool is also a hint: it was released in December 2017, weeks before Meltdown/Spectre were announced.

[jpmackay1]

Lucky you go tthe patch and mine with " OMEN by HP 870-xxx Desktop PC " TBD. Guess that they are not ready to release the patch till HP are ready to in one day down the road.

John

[M4nti0n]

I did call the Dutch HP support number today, they told me that they didn't know anything about computer technical stuff and made a support ticket on the HP UK support page for me.
After an hour or 4, 5 I got called back by someone from HP UK. He told me that I would receive a mail today clarifying what HP is up to.
He also told me they officially will release Intel Firmware upgrades (for my laptop: EliteBook 840 G1) tomorrow (9 January 2018).
I will wait for that mail and copy it (partially) here.

[jpmackay1]

Nice to see that Dutch HP Support is willing to listen to you about after they have no idea bout computer technical stuff.  Not in U.S. they didn't ask for support ticket and all they said the reponsibility is in the hands of Intel. Maybe they will listen about this sometime soon or later.

John

[M4nti0n]

They actually already have an updated firmware of the Intel ME so that will be released sooner or later. 🙂

[Keesjand]

Oeps, I thought Intel did know in December about Spectre and/or Meltdow

[treysis]

M4nti0n: ME-vulnerability has NOTHING to do with Spectre (or Meltdown).