'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Discussion in 'other security issues & news' started by Minimalist, Jan 2, 2018.

  1. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,239
    Location:
    Among the gum trees
    Symantec blog:

    Meltdown and Spectre: Chip Vulnerabilities Could Facilitate Memory Leaks


     
  2. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    You've misunderstood me. I am not debating you, there is nothing to debate. I was correcting you by presenting a fact: AMD and Intel are not in the same basket.
     
  3. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    7,997
    Nope. The patch is for all CPUs.
    ----------
     
    Last edited: Jan 7, 2018
  4. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,239
    Location:
    Among the gum trees
    My Netgear has a dual core Broadcom processor, does anybody know what that means in this context?
     
  5. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,060
    Location:
    UK
  6. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,060
    Location:
    UK
  7. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    7,997
  8. Dragon1952

    Dragon1952 Registered Member

    Joined:
    Sep 16, 2012
    Posts:
    2,470
    Location:
    Hollow Earth - Telos
    How do we know if we got the edge and explorer tweaks released my MS.
     
  9. liba

    liba Registered Member

    Joined:
    Jan 21, 2016
    Posts:
    344
    Just run the test here : https://repl.it/repls/DeliriousGreenOxpecker

    If you can read the letter "The Magic Words are Squeamish Ossifrage." it means that theorically any website can steal your complete browser session with a few javascript. You log into your bank account, then you visit a rogue website = your credentials are stolen.

    And now if you ever tell me "But you should only visit trusted website" let me tell you that I could just post this kind of code on this forum and the result would be the same.
    And now, your anti spyware won't be of any use.

    https://forum-en.msi.com/index.php?PHPSESSID=ev97i60iramn22cvvkmn0fakl7&topic=297707.0
     
  10. oliverjia

    oliverjia Registered Member

    Joined:
    Jul 21, 2005
    Posts:
    1,926
    Sneaky *******. Intel.
    Good thing I haven't patronized Intel since 2012 when I bought a Core i7-2700K.
    I also have an AMD FX-8300 CPU laying around, together with a Gigabyte MB and HDD, RAM etc. I'll built an AMD computer tomorrow and switch to it. Guess I'll have to flip the 2700K computer on Craigslist. What a shame. It's been serving me so well over the years until Meltdown and Spectre.
     
  11. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,883
    Location:
    Slovenia, EU
  12. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,365
    Location:
    Italy
    Last edited: Jan 7, 2018
  13. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,239
    Location:
    Among the gum trees
    I didn't allow anything in NoScript but I could read that. :doubt:
     
  14. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,365
    Location:
    Italy
    You have to allow the page.
     
  15. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    7,997
    What about line 37?

     
  16. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,365
    Location:
    Italy
    I do not understand.

    The letter "The Magic Words are Squeamish Ossifrage."does not appear in the console.
     
  17. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,629
    That's just the code. You've got nothing to worry about, unless it is displayed in the right column after you click on the run button.
     
  18. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    7,997
  19. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,629
  20. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,365
    Location:
    Italy
    Confirmed.
    My pc with XP is not affected.:):):argh::argh:
     
  21. mary7

    mary7 Registered Member

    Joined:
    Oct 17, 2017
    Posts:
    57
    Location:
    Italy
    Hi Sampei, 2 of my 3 computers have cpu intel that aren t in that list
    Pentium (R) CPU B960
    Pentium G3260

    the one in the list is the Celeron J series

    so they are immune?

    I run the test and the letter "The Magic Words are Squeamish Ossifrage."does not appear in the right console.

    I have another question I have Kis2017 antivirus, if I open with Safemoney my bank site the isolation of browser protected with Safemoney will block malicious javascript that could stole the data thanks the meltdown and spectre vulnerability?
     
  22. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,365
    Location:
    Italy
    You have an MP.;)
     
  23. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    2,009
    Location:
    Member state of European Union
    What text does it print on non-vulnerable hardware/mitigated OS?

    Update:
    BTW I think this test executed on this page is executed on remote computer so this will not test my machine, but remote server.
     
    Last edited: Jan 7, 2018
  24. mary7

    mary7 Registered Member

    Joined:
    Oct 17, 2017
    Posts:
    57
    Location:
    Italy
    I run the specucheck.exe
     

    Attached Files:

    • 1.PNG
      1.PNG
      File size:
      10.3 KB
      Views:
      16
  25. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,365
    Location:
    Italy
    Your version (1.0.0) is obsolete.
    There is 1.0.4.
    ;)
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.