It is currently Tue Oct 16, 2018 7:33 pm



Post new topic Reply to topic  [ 7 posts ] 
Author Message
PostPosted: Fri Jan 05, 2018 1:00 pm 
Offline
Colonel
Colonel
User avatar

Joined: Mon Oct 11, 2010 7:54 pm
Posts: 109
Images: 1
Location: Portage, MI
This came up on TeamSpeak the other day, I thought I would share current information which includes a number of additional links.

https://www.us-cert.gov/ncas/alerts/TA18-004A
Image


Top
 Profile  
Reply with quote  
PostPosted: Fri Jan 05, 2018 2:30 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Sun Jun 09, 2013 2:36 pm
Posts: 491
I'm not the smartest can in the box but how can patching an exploit slow down the host's machine?

Lacto
True friends stab you in the front.
Oscar Wilde


Top
 Profile  
Reply with quote  
PostPosted: Fri Jan 05, 2018 3:04 pm 
Offline
Colonel
Colonel
User avatar

Joined: Mon Oct 11, 2010 7:54 pm
Posts: 109
Images: 1
Location: Portage, MI
Well there are multiple levels of fixes, not all will slow down the machine. I would start with testing to see if your machine is vulnerable first. Here are a couple of tools for doing your own assessment.

Intel and Linux have developed tools to detect and mitigate the Meltdown and Spectre vulnerabilities in Windows and Linux. See INTEL-SA-00075 Detection and Mitigation Tool (Windows) and INTEL-SA-00075 Linux Detection and Mitigation Tools (Linux) for further information.

As for your question in basic terms it would limit a special CPU memory process designed to speed up most CPU's. Here is a clip from another article.

Again, the CPU exploits in play here are extremely technical, but in a nutshell, the exploit allows access to your operating system’s sacrosanct kernel memory because of how the processors handle “speculative execution,” which modern chips perform to increase performance. An attacker can exploit these CPU vulnerabilities to expose extremely sensitive data in the protected kernel memory, including passwords, cryptographic keys, personal photos, emails, or any other data on your PC.
Meltdown is the more serious exploit, and the one that operating systems are rushing to fix. It “breaks the most fundamental isolation between user applications and the operating system,” according to Google. This flaw most strongly affects Intel processors because of the aggressive way they handle speculative execution, though a few ARM cores are also susceptible.
Image


Top
 Profile  
Reply with quote  
PostPosted: Fri Jan 05, 2018 6:43 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Sat Apr 10, 2010 2:11 pm
Posts: 6970
Images: 21
Location: FL-USA
If you want to be 200% protected from these, and any future vulnerabilities online...

The best solution for most would be to use this as your address book:

Image

this as your word processor:

Image

for your spreadsheets:

Image

this as your internet search engine:

Image

oh...don't forget your emails...

Image

:lolsign:
"Lead, follow, or get out of the way."----Thomas Paine

"I am sore wounded but not slain I will lay me down and bleed a while And then rise up to fight again"

Image


Top
 Profile  
Reply with quote  
PostPosted: Sat Jan 06, 2018 12:53 am 
Offline
Command Sergeant Major
Command Sergeant Major
User avatar

Joined: Wed Jan 07, 2015 12:55 am
Posts: 512
Images: 0
Location: Lafayette, LA (USA)
:lolsign: :lolsign: :lolsign: :lolsign:
Sincerely,

[RAW] Leo


=========================================================
Image
=========================================================
Image
=========================================================
My favor saying, "It is what it is"


Top
 Profile  
Reply with quote  
PostPosted: Sat Jan 06, 2018 2:19 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Sun Jun 09, 2013 2:36 pm
Posts: 491
Thx Nightmare. Good Article on speculative execution.

Lacto
True friends stab you in the front.
Oscar Wilde


Top
 Profile  
Reply with quote  
PostPosted: Sun Jan 07, 2018 5:09 am 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Wed Jul 30, 2014 6:33 pm
Posts: 845
Images: 4
Location: Abbeville, Louisiana
:lolsign: :lolsign:


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron