Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

FormerOstrich

(2,702 posts)
Sat Jan 6, 2018, 02:53 AM Jan 2018

"Spectre" and "Meltdown"

I can't help but think that there isn't enough attention about the "Spectre" and "Meltdown" flaws.

tech-firms-battle-to-resolve-major-security-flaw

This seems explosive to me and I can't help but think there isn't a great deal to this that we don't know yet. The cost to fix the problem is going to be huge and have a large impact on a lot of companies (especially those running older equipment/software).

How have IT departments you know responded to this?

1 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
"Spectre" and "Meltdown" (Original Post) FormerOstrich Jan 2018 OP
For Meltdown - It is a fundamental flaw in the CPU chip lapfog_1 Jan 2018 #1

lapfog_1

(29,205 posts)
1. For Meltdown - It is a fundamental flaw in the CPU chip
Sat Jan 6, 2018, 03:29 AM
Jan 2018

The only way to prevent it on the current installed base of affected processors (Intel, ARM, maybe AMD or not) is to turn off speculative execution which could negatively affect performance (by as much as 30 percent).

I'm guessing the exploit is hard to use and unlikely to yield quick results.

It was criminal that the chip architects didn't think about this exploit (allowing speculative execution to bypass normal addressing checks enforced by virtual to physical address mapping (page table entries).

My understanding is that possibly some versions of Linux / Unix would not be open to the exploit due to how the address translation is set up (but I would have to defer to a Linux kernel expert on this).


Latest Discussions»General Discussion»"Spectre" and "Meltdown"