What you need to know about Meltdown and Spectre

[crosscourt]

These issues attack almost all cpus in the last 10 years at least.

More here, https://meltdownattack.com

[crosscourt]

At the least you need the latest version of the 4.4, 4.9 or 4.14 kernel and either an updated bios or microcode. Browsers will need to be updated as well as a few other apps and most of these appear to have been done already in the various distros I use.

[Rademes]

According to Linux Mint blog, Kernel 4.13.0-25 also contains necessary patches. https://blog.linuxmint.com/?p=3496

[crosscourt]

That was done by a few distros like Mint but depending on what distro you have you must have the patched 4.4,4.9 or 4.14 kernel.

The 4.13 kernel patched doesnt exist in all distros.

[Rademes]

EPIC FAIL to Intel....... I am sure, that these vulnerabilities had been successfully exploited for Years! Hackers just stayed quiet and happy...and reach!

[crosscourt]

The thing I try to explain to hardware users is the fact that errata exists in all hardware. Thats been going on since the old days, but some problems were easier to exploit at certain times with certain hardware. Software also has many flaws that can be attacked so even though Intel made a huge mistake they arent the only only one as Spectre can affect the other cpus not affected by Meltdown. Also intel wasnt the only one with Meltdown as ARM screwed up as well. Ive been happy with Intel's response to these issues with detailed tech support and many fixes that came out pretty quickly.

What we have to focus on now is correcting the issue for now and redesigning hardware in the future.

[crosscourt]

Intel intends to bring out corrected cpus this year and of course new designs down the road. Firmware and software fixes for most recent cpus, thru Ivy Bridge but check with your mobo maker or oem system maker as they may have patches/bios updates available.

[crosscourt]

So far Ive seen nothing from Intel about help for the Sandy Bridge cpus. Im upgrading to a I3 3240 from a G630 due to this situation for now.

[crosscourt]

Whats interesting is so far there have been no reported exploits of these issues other than the reports that came from Intel and other sources.

[crosscourt]

Intel has released microcode for the Meltdown/Spectre issues for Sandy/Ivy Bridge cpus. Check with the maker of your pc or head over to Intel's site for more info.