Intel Meltdown and Spectre

[mdklassen]

> Is Meltdown and Spectre be capable in  attaching to  java files only?  

Both "Meltdown" and "Spectre" are vulnerabilities, not malicious software.

Compare to some family-member wanting to drive your automobile on a long trip, when you know that you have one "vulnerable" tire that has no tread, decaying sidewalls, and an embedded nail.  Would you give them the keys, and let tnem into your automobilel?

Similarly, if you let some malicious software into your computer, your computer is "doomed".

That malware can do anything it is programmed to do, including exploiting any vulnerabilities, such as "Meltdown" and "Spectre".  Lock-out the malware, and you're protected from all the vulnerabilities.

> I do not know how it spreads?

To date, nobody knows.  As the Other Person quoted, no such malware has been seen "in the wild".

When there is, your anti-virus software will be updated to recognize and block that malware.

P.S. There are other vulnerabilities in Windows.  Microsoft might "patch" some of them, on Shrove Tuesday February 13, 2018, as part of their monthly release of security-updates (2nd Tuesday of every month, at 10 AM Pacific).

So, don't become "obsessed" by "Meltdown" and/or "Spectre" -- don't let any malware into your computer.

[krzemien]

There's been some movement couple of days ago and document has been up-issued to v.9, with some TBDs resolved into actual links.

https://support.hp.com/us-en/document/c05869091

However, I can see that it got reverted back to v.8 suddenly?

So, for afficionados only - as retrieved today:

https://webcache.googleusercontent.com/search?q=cache:gzoSxePgc_cJ:https://support.hp.com/us-en/docu...

[Grzwacz · Accepted solution]

Hello everyone

Intel has released Spectre microcode updates for newer processors to OEM's.

Please refer to this article for more information.

Tom

[krzemien]

There you go chaps:

HP Consumer Desktop PC BIOS Update (ROM Family SSID 2B4B)

PRODUCT TYPE(S):
Desktops;Workstations;Consumer Desktops

HARDWARE PRODUCT MODEL(S):
OMEN by HP 870-xxx Desktop PC
HP ENVY 750-0xx Desktop PC
HP ENVY xxxx PC
HP ENVY Phoenix 850-0xx Desktop PC

Details here:

http://whp-aus1.cold.extweb.hp.com/pub/softpaq/sp85001-85500/sp85454.html

And here (shown for my OMEN, but applicable for all other PCs with MoBos as per the above):

https://support.hp.com/gb-en/drivers/selfservice/swdetails/omen-by-hp-870-000-desktop-pc-series/1108...

Direct download link:

http://ftp.hp.com/pub/softpaq/sp85001-85500/sp85454.exe

Notabene #1: this update required restarting my PC twice. And also there was rather confusing message from SoftPaq pre-loader (?) about removal of AC/battery in order to succeed

Notabene #2: HP Support Assistant yet again has not found this update for my PC

Notabene #3: Main document (https://support.hp.com/us-en/document/c05869091) not updated...

Results:

[qazwsx27]

I notice that bios updates have appeared on the HP website.  My  Laptop is model 15-bs0xx.  bios F35 is listed as the fix.   Has anyone applied the bios on their pc.   I would like to know what the outcomes of the bios update have been.  I am a little hesitant to apply the fix, and wonder if anyone else has tried.

Vince