Security flaws in Intel, AMD, ARM chips

Discuss various technical topics not related to Mozilla.
Post Reply
User avatar
Virtual_ManPL
Posts: 2052
Joined: July 24th, 2008, 5:52 am
Contact:

Re: Security flaws in Intel, AMD, ARM chips

Post by Virtual_ManPL »

Fix for:
- Mozilla Firefox - 57.0.4
- Mozilla Firefox Mobile - 57.0.4
- Windows 7 Service Pack 1 - KB4056897 (Security-only update) or KB4056894 (Monthly Rollup) [with botnet aka diagnostics, telemetry and data gathering included]
- Windows 8.1 - KB4056898 (Security-only update)
- Windows 10 Version 1709 - KB4056892
- Windows 10 Version 1703 - KB4056891
- Windows 10 version 1607 - KB4056890
- Windows 10 Version 1511 - KB4056888
- Windows 10 LTSB - KB4056893
- Windows Server 2016 - KB4056890
- Windows Server 2012 R2 - KB4056898 (Security-only update)
- Windows Server 2012 - KB4056899 (Security-only update) or KB4056896 (Monthly Rollup)
- Windows Server 2008 R2 Service Pack 1 - KB4056897 (Security-only update) or KB4056894 (Monthly Rollup) [with botnet aka diagnostics, telemetry and data gathering included]
+ look for updated drivers and firmware

Chromium and Chrome aren't patched yet ](*,) [-X #-o [-(
Virtualfox persona
Tired of constant Firefox UI changes? XUL extensions are not working anymore? Try SeaMonkey, Waterfox Classic, Pale Moon.
User avatar
Snake4
Posts: 1841
Joined: December 27th, 2017, 4:03 am
Location: Australia

Re: Security flaws in Intel, AMD, ARM chips

Post by Snake4 »

there is something you can turn on to secure Chrome. let me look again an i shall reply here but i believe it'll be on by default in 64 anyway

its called
Strict Site isolation look for that an enable it

https://www.neowin.net/news/google-chro ... -the-month
Nightly Blog
Release Calendar
Posted With Chrome Or Firefox
User avatar
Virtual_ManPL
Posts: 2052
Joined: July 24th, 2008, 5:52 am
Contact:

Re: Security flaws in Intel, AMD, ARM chips

Post by Virtual_ManPL »

Mouse4 wrote:there is something you can turn on to secure Chrome. let me look again an i shall reply here but i believe it'll be on by default in 64 anyway

its called
Strict Site isolation look for that an enable it

https://www.neowin.net/news/google-chro ... -the-month
I know, as it's in hyperlink I posted
Virtual_ManPL wrote:[...] Chrome aren't patched yet [...]
What's more, it's not enabled by default and it's only temporary measure, not full and complete mitigation.

Point is that Google won't be releasing ASAP patched version of Chrome 63.
Google will wait for next release cycle, so till Chrome 64, which will be released on 2018-01-23.
So looks like the security is not Google priority. ](*,) [-X #-o [-(
Virtualfox persona
Tired of constant Firefox UI changes? XUL extensions are not working anymore? Try SeaMonkey, Waterfox Classic, Pale Moon.
User avatar
James
Moderator
Posts: 27999
Joined: June 18th, 2003, 3:07 pm
Location: Made in Canada

Re: Security flaws in Intel, AMD, ARM chips

Post by James »

AMD CPUs are safe against the current version of Meltdown, which focuses primarily on Intel’s architecture.

Depending on how the final patched for the Intel CPU kernel bug vulnerability are implemented the AMD CPU's may still suffer a performance hit as collateral damage. It was requested for Linux kernel to make an exception for AMD cpu's since they are not vulnerable to current meltdown.
User avatar
Snake4
Posts: 1841
Joined: December 27th, 2017, 4:03 am
Location: Australia

Re: Security flaws in Intel, AMD, ARM chips

Post by Snake4 »

Linux creator Linus Torvalds has harsh words for Intel over chip design https://www.neowin.net/news/linux-creat ... hip-design
Nightly Blog
Release Calendar
Posted With Chrome Or Firefox
morat
Posts: 6404
Joined: February 3rd, 2009, 6:29 pm

Re: Security flaws in Intel, AMD, ARM chips

Post by morat »

Bruce Schneier comments on Spectre and Meltdown
http://www.schneier.com/blog/archives/2 ... mel_1.html
User avatar
Grumpus
Posts: 13238
Joined: October 19th, 2007, 4:23 am
Location: ... Da' Swamp

Re: Security flaws in Intel, AMD, ARM chips

Post by Grumpus »

Doesn't matter what you say, it's wrong for a toaster to walk around the house and talk to you
User avatar
Snake4
Posts: 1841
Joined: December 27th, 2017, 4:03 am
Location: Australia

Re: Security flaws in Intel, AMD, ARM chips

Post by Snake4 »

Nightly Blog
Release Calendar
Posted With Chrome Or Firefox
User avatar
Snake4
Posts: 1841
Joined: December 27th, 2017, 4:03 am
Location: Australia

Re: Security flaws in Intel, AMD, ARM chips

Post by Snake4 »

Nightly Blog
Release Calendar
Posted With Chrome Or Firefox
User avatar
LIMPET235
Moderator
Posts: 39936
Joined: October 19th, 2007, 1:53 am
Location: The South Coast of N.S.W. Oz.

Re: Security flaws in Intel, AMD, ARM chips

Post by LIMPET235 »

Thanks for the links but no thanks.
I'll wait 'n' see what they say & recommend for my WIN7 (Cat "B", Security Only updates), at...
> https://www.askwoody.com/
:)
[Ancient Amateur Astronomer.]
Win-10-H/64 bit/500G SSD/16 Gig Ram/450Watt PSU/350WattUPS/Firefox-115.0.2/T-bird-115.3.2./SnagIt-v10.0.1/MWP-7.12.125.

(Always choose the "Custom" Install.)
User avatar
Grumpus
Posts: 13238
Joined: October 19th, 2007, 4:23 am
Location: ... Da' Swamp

Re: Security flaws in Intel, AMD, ARM chips

Post by Grumpus »

There's a current update in Linux for the Intel-microcodes.
Make sure you have appropriate microcode support packages from the repos or you won't know when there are changes.
Doesn't matter what you say, it's wrong for a toaster to walk around the house and talk to you
User avatar
DanRaisch
Moderator
Posts: 127187
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Re: Security flaws in Intel, AMD, ARM chips

Post by DanRaisch »

For which distress?
User avatar
Grumpus
Posts: 13238
Joined: October 19th, 2007, 4:23 am
Location: ... Da' Swamp

Re: Security flaws in Intel, AMD, ARM chips

Post by Grumpus »

Linux Mint 17.x, 18.x,; Ubuntu 14.x and Ubuntu 16.x so far thats all I have on this system.
Maybe more - There's also this for chuckles . . . oops!
Doesn't matter what you say, it's wrong for a toaster to walk around the house and talk to you
Post Reply