Major design flaw in Intel chips

Huge security flaw in intel chips produced in the last 10 years, including ARM, meaning most of PCs running on intel chips, most android phones running on ARM

tl:dr two major vulnerabilities are found

1. Meltdown, affects Intel chips and lets hackers bypass the hardware barrier between applications run by users and the computer’s memory, potentially letting hackers read a computer’s memory and steal passwords.


2. Spectre, affects chips from Intel, AMD and ARM and lets hackers potentially trick otherwise error-free applications into giving up secret information.



The entire technology world is talking about it, as concerns over performance dips after patch is applied

https://www.reuters.com/article/us-...ly-all-phones-computers-at-risk-idUSKBN1ES1BO

 

That Spectre logo is cute~
I liked how Intel CEO dumped his shares back in Dec

But yeah, only real performance hit so far, are databasing and compiling workloads, High I/O High network activities. None of which concern the average consumer...directly.
Consumers with PCI-E NVME SSDs however will be affected badly though...but that's a small number of people...

 

yea i'm in charge of patching 5000 servers right now as an emergency, fuck my life lol, our fear is the performance hit will affect mostly our database servers running on sql server, i'm also reading that it might affect virtualization, which we have a lot of as well :(

the intel CEO dumping his shares just screams of inside trading

 

CEOs does that all the time. Equifax, WellsFargo, Groupon....... i can go on and on and on lol

 

we use ESET as our security software but I was POCing a software called solarwinds that can automate the windows patching. I don't really need it for Linux as i can script those.

 

i just use the microsoft security on windows7 and windows defender on windows 10. no worries from me. sextapes goes strait to external hard drive and i never save pw on laptop lol

 

I actually use ESET at home as well, imo, it's worth the money, especially i have a lot of work files on my own computer, it's firewall is very sensitive (which could be good or bad depending on situation), for me it can get annoying if i am doing a lot of work revolving insecure ssl

 

Oh dear, yeah...If you're running servers + virtualization, you'll definitely feel the hit. Feel sorry for you Basically anything that involves a lot of syscalls, you're screwed.

I also feel bad for the less technical consumers. They'll wake up in the morning after a windows automatic update and get a performance hit, especially on older systems without PCID, and wonder, what's going on...

Technically all x86 based processors are affected, Intel, AMD and ARM (smartphone)

 

yup, it's not entirely bad, i was able to convince them a fast rollout will be more catastrophic than anything. If we learned anything with wannacry, we patched a database server and it went hard down and never came back up, so with this we are able to slow roll, so gives me time to whip up some handy scripts

 

I suppose, people aren't able to remotely exploit it yet...though still a long road ahead, because it's a software patch, hackers will now know where to look and attack the fix itself. Will still need a hardware overhaul later down the line...AMD's opportunity to snag some market share in the data center

 

to be fair, most of these exploits needs server access in order to access the vulnerability, if you somehow has root access anyways, you probably won't need that vulnerability lol.

on the other hand, i am hearing a lot of good things about EPYC, I believe Microsoft Azure and at least Amazon has start using EPYC, it'll be good to see AMD snatch some market shares as well

 

competition = lower price

 

i'd love to build an AMD Ryzen machine one day if they can keep up what they're doing