Intel Meltdown and Spectre

[mdklassen]

>  I do have the firmware update but can't remember where I get this firmware update?

> I know it's not from HP but somewhere online last night.

Possibly, a "hacker" gained remote access to your computer, via the vulnerability, and "patched" your system. 

Much much much more likely is that it was a Windows Update -- check its history.  :smileyindifferent:

[jpmackay1]

So here is what I had in my History of Wndows Update.

January 3, 2018—KB4056892 (OS Build 16299.192)

Is that the one for the patch.

John

[jpmackay1]

Thank you for the link and I just ran Ashampoo Spectre Meltdown CPU Checker to see if mine is safe and got both Spectre and Meltdown in green box " Safe ". Good to know mine is safe.

Thank you to you for finding the link and post for everyone to check their CPU on their desktop or laptop

John

[mdklassen]

> here is what I had in my History of Wndows Update.

> January 3, 2018—KB4056892 (OS Build 16299.192)

> Is that the one for the patch?

From "reading-between-the-lines" at: http://support.microsoft.com/KB/4056892

it seems like the answer is YES.

[jvillal]

Hi guys,

First of all, thanks for all the info shared here. I have an OMEN by HP Desktop PC - 870-206ns and I'm a bit concern about this issue.

I've used the ashampoo tool shared in the previous page and found out that my computer is affected by Spectre (fortunately is protected against Meltdown). Windows 10 is up to date and I have installed all the updates proposed by the HP Update center.

I've also read the Security Bulletin shared before but found no trace of OMEN 870 series (there is update plans for OMEN 880 and OMEN X, for instance). Does it mean that the OMEN 870 series are not planed to be updated?

Is there something I can do? Am I missing anything?

Thanks in advance.

BR.

[krzemien]

Just as a matter of clarification:

1. Recent Microsoft patches - KB4056892 for Win 10 x64 - fudges (=OK, patches) Meltdown issue

2. Spectre can only be patched by joint effort of CPU (Intel in majority of cases) and PC manufacturers (HP in our case), which result with firmware (=typically BIOS) update. These are pending.

All 870-xxx Omens seem to be missing on that HP's bulletin, but I gather - juding by what's on the list itself - that availability is driven by ROM Family SSIDs.

Last but not least, one can read in this bulletin:

Report: To report a potential security vulnerability with any HP supported product, send Email to: hp-security-alert@hp.com.

I strongly suggest that you do that (I did).

[jvillal]

Thanks @krzemien for your prompt response. I've followed your reocomendation and just sent the email to report the problem. Let's see how it evolves 🙂

Cheers!

[jpmackay1]

Will you let us know here in the forum what HP have to say about the security information on HP OMEN 870-XXX when you receive yoru reply from them.

John

[krzemien]

I never got any response from that lot.

Best to keep an eye on this bulletin, I think, it may be up-issued shortly...

EDITED TO ADD: Bulletin has been updated (and trimmed-down somewhat either), still no sign of 870-xxx OMEN machines

[jvillal]

@krzemien, as you pointed out the bulletin has been updated. Not only is there no sign of 870-xxx OMEN machines but they have removed the 880-xxx from the list (I swear they were present before)

As you mentioned before, I guess they will add the 870-xxx eventually (sooner than later, I hope)