Go Back   IceInSpace > Equipment > Software and Computers

Reply
 
Thread Tools Rate Thread
  #21  
Old 05-01-2018, 11:30 AM
gary
Registered User

gary is offline
 
Join Date: Apr 2005
Location: Mt. Kuring-Gai
Posts: 5,926
News of the bug has now reached the mainstream press with Forbes magazine reporting on it :-
https://www.forbes.com/sites/thomasb.../#930982c39328

Intel have released this statement :-
https://newsroom.intel.com/news/inte...arch-findings/
Reply With Quote
  #22  
Old 05-01-2018, 11:45 AM
gary
Registered User

gary is offline
 
Join Date: Apr 2005
Location: Mt. Kuring-Gai
Posts: 5,926
Some early Kernel-based Virtual Machine (KVM) benchmarking when
running the Linux 4.15 KPTI patches :-
https://www.phoronix.com/scan.php?pa...kpti-kvm&num=1

(Note this article is multiple pages. Page selection at bottom of article)
Reply With Quote
  #23  
Old 05-01-2018, 12:19 PM
RickS's Avatar
RickS (Rick)
PI cult recruiter

RickS is offline
 
Join Date: Apr 2010
Location: Brisbane
Posts: 10,584
For anybody who's interested in embedded devices ARM has released a list of their architectures that are vulnerable to these attacks:

https://developer.arm.com/support/security-update
Reply With Quote
  #24  
Old 05-01-2018, 12:54 PM
gary
Registered User

gary is offline
 
Join Date: Apr 2005
Location: Mt. Kuring-Gai
Posts: 5,926
Quote:
Originally Posted by RickS View Post
For anybody who's interested in embedded devices ARM has released a list of their architectures that are vulnerable to these attacks:

https://developer.arm.com/support/security-update
Hi Rick,

That would imply that somewhere around 99% of all smartphones and tablets on the planet are affected for a start.
Reply With Quote
  #25  
Old 05-01-2018, 12:55 PM
luka's Avatar
luka
Unregistered User

luka is offline
 
Join Date: Apr 2007
Location: Perth, Australia
Posts: 1,164
Just be aware that there are two issues at hand, Meltdown and Spectre.

Meltdown impacts only the Intel CPUs and ARM64 (Cortex-A75 only). It is more severe, for example javascript in browser could read kernel memory. This is the big one as it is problem with the actual Intel architecture and can be only fixed in software by significant performance penalties or by a hardware change (moving to AMD CPU).

Spectre on the other hand includes several possible attacks. It is not as severe as it is more difficult to exploit but also more difficult to fix. It affects all CPUs. However, it is worth noting that the newer AMD CPUs (Ryzen and Epyc) employ a hardware neural network for branch prediction. This is much less predictable but, in theory, still possible to exploit.

Also note that Intel propaganda machine is trying hard to confuse the issue and minimise the damage by mixing up two exploits (Meltdown and Spectre) and trying to make it look like all CPUs are affected. In reality one type of exploit with less severity is general while the severe one is Intel specific.
Reply With Quote
  #26  
Old 05-01-2018, 02:05 PM
RickS's Avatar
RickS (Rick)
PI cult recruiter

RickS is offline
 
Join Date: Apr 2010
Location: Brisbane
Posts: 10,584
Quote:
Originally Posted by gary View Post
That would imply that somewhere around 99% of all smartphones and tablets on the planet are affected for a start.
G'day Gary,

Yes, unfortunately... smartphones and tablets tend to use the newer ARM architectures. They also run a lot of third party software.

For more deeply embedded devices things may not be quite so bad. A lot of the processors used there have architectures that aren't affected and the software is more locked down. I have been checking all the parts we use at work...

Cheers,
Rick.
Reply With Quote
  #27  
Old 05-01-2018, 06:01 PM
luka's Avatar
luka
Unregistered User

luka is offline
 
Join Date: Apr 2007
Location: Perth, Australia
Posts: 1,164
A glimmer of hope from Google regarding the Spectre problem (variant 2). "Retpoline" effectively disables speculative execution by isolating branch target prediction. The patch works on the binary level and not at the OS level. Google claims that the performance loss is almost zero, close to the old mispredicted branch.

Of course this does not address Meltdown (variant3) so KPTI is still needed for the Intel CPUs with possibly large performance hits.
Reply With Quote
  #28  
Old 06-01-2018, 05:52 AM
fsr
Registered User

fsr is offline
 
Join Date: Nov 2015
Location: Hurlingham, Buenos Aires
Posts: 23
It seems like Intel's protected mode wasn't so protected after all...
Reply With Quote
  #29  
Old 06-01-2018, 01:46 PM
RickS's Avatar
RickS (Rick)
PI cult recruiter

RickS is offline
 
Join Date: Apr 2010
Location: Brisbane
Posts: 10,584
https://imgs.xkcd.com/comics/meltdown_and_spectre.png
Reply With Quote
  #30  
Old 06-01-2018, 03:31 PM
gary
Registered User

gary is offline
 
Join Date: Apr 2005
Location: Mt. Kuring-Gai
Posts: 5,926
Apple released a statement today with regards their mitigation plans for all Mac OS, iOS and tvOS devices :-
https://support.apple.com/en-us/HT208394
Reply With Quote
  #31  
Old 06-01-2018, 04:09 PM
AndrewJ
Watch me post!

AndrewJ is offline
 
Join Date: Mar 2006
Location: Melbourne
Posts: 1,905
Pity this didnt come out a few months ago.
Apple could have blamed the "designed slowdown" of old machines on this instead of trying to cover up crud batteries :-)
Andrew ( am i being to cynical ? )
Reply With Quote
  #32  
Old 06-01-2018, 04:18 PM
multiweb's Avatar
multiweb (Marc)
ze frogginator

multiweb is offline
 
Join Date: Oct 2007
Location: Sydney
Posts: 22,062
Quote:
Originally Posted by RickS View Post
Reply With Quote
  #33  
Old 06-01-2018, 04:38 PM
RickS's Avatar
RickS (Rick)
PI cult recruiter

RickS is offline
 
Join Date: Apr 2010
Location: Brisbane
Posts: 10,584
Quote:
Originally Posted by gary View Post
Apple released a statement today with regards their mitigation plans for all Mac OS, iOS and tvOS devices :-
https://support.apple.com/en-us/HT208394
Good to know my watch is ok
Reply With Quote
  #34  
Old 07-01-2018, 06:43 PM
rustigsmed's Avatar
rustigsmed (Russell)
Registered User

rustigsmed is offline
 
Join Date: Mar 2012
Location: Mornington Peninsula, Australia
Posts: 3,950
some benchmarking

https://www.youtube.com/watch?v=JbhKUjPRk5Q

write-speeds have taken a hit
Reply With Quote
  #35  
Old 22-01-2018, 12:55 PM
gary
Registered User

gary is offline
 
Join Date: Apr 2005
Location: Mt. Kuring-Gai
Posts: 5,926
Peter Bright, Technology Editor at Ars, writes in a 16 Jan 2018 article on how Spectre and Meltdown patches are causing some drivers to have issues
and that Intel's CPU microcode update caused crashes on some systems.

Intel then issued a warning not to install it on systems with Haswell and Broadwell processors.

Some older anti-virus software is also getting in the way of OS patches.

Story here :-
https://arstechnica.com/gadgets/2018...ks-get-closer/
Reply With Quote
Reply

Bookmarks

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +10. The time is now 04:15 PM.

Powered by vBulletin Version 3.8.7 | Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Advertisement
Bintel
Advertisement
Testar
Advertisement