[DISCUSSION] Meltdown and Spectre

Discussion in 'PC Hardware' started by scaramonga, Jan 3, 2018.

  1. Yen

    Yen Admin (retired)
    Staff Member

    May 6, 2007
    13,126
    14,196
    340
    #421 Yen, Nov 19, 2018
    Last edited: Nov 19, 2018
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. Tiger-1

    Tiger-1 MDL Guru

    Oct 18, 2014
    7,894
    10,736
    240
    HI Yen :), well is one thing to think but severals users don't think as me; so I believe so is impossible to control my (Windows OS's) CPU/ram systems!! therefore all around the world are in bad hands!! if is true is better I call my my belowed hammer and return to times of Windows 2000 for workstastions? or NT4...hmm I have have one decent machine and I know how to controll all inside of them then if I'm not control my workstastions is better works of line using Windows 2000 with severals complications related to drivers or better returning to Windows 7 remembering that I'm old and so maybe I'm dead until jan 2020 DAMM M$FT inglorius days unfortunately, sorry Yen but for me seen is news today...and until now I haven't 0 issues related to to spectre and and their cousins and and another craps, I Use AMD and never had NON issues poor my belowed Mr. Bill Gates maybe more old than me...;)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. toyo

    toyo MDL Senior Member

    Aug 14, 2009
    472
    313
    10
    Retpoline is enabled in the last version of 1809. However, there's this:

    "Retpoline is not applicable to Skylake and later processors from Intel."

    That means it's not enabled on my 8700K by default, nor do I know if it's actually compatible, and I can;t remember Google saying anything about such restrictions.

    Would be nice if somebody tests on older CPUs see if it gets enabled and how it works, and would also be nice to know why it's not working on Skylake and above.
     
  4. Joe C

    Joe C MDL Guru

    Jan 12, 2012
    3,507
    2,082
    120
    #426 Joe C, Mar 6, 2019
    Last edited: Mar 7, 2019
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. digiquandry

    digiquandry MDL Member

    Sep 13, 2015
    142
    136
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. Michaela Joy

    Michaela Joy MDL Crazy Lady

    Jul 26, 2012
    4,068
    4,649
    150
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. toyo

    toyo MDL Senior Member

    Aug 14, 2009
    472
    313
    10
    There's no hoax. These are hardware issues that are widely acknowledged by the tech community. This is on par with calling climate change a hoax. Just because there are no exploits in the wild yet based on these vulnerabilities it doesn't mean they don't exist.
     
  8. digiquandry

    digiquandry MDL Member

    Sep 13, 2015
    142
    136
    10
    #430 digiquandry, Mar 11, 2019
    Last edited: Mar 11, 2019
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. toyo

    toyo MDL Senior Member

    Aug 14, 2009
    472
    313
    10
    No offense, but that's really not a reasonable response. These forums are known for having a more... structured approach and being technology friendly. That would include embracing what is considered fact after numerous papers on the subject exist and there's a consensus on the issue, instead of being conspiratorial for the sake of conspiracy itself.

    My answer is not meant to say that you HAVE to patch. My answer is meant to say that these vulnerabilities exist, so it's impossible to claim them as a hoax without real proof. Numerous independent coders worked on patching these holes and their findings have already been corroborated.

    Feel free to claim all that was for some nefarious, ambiguous purpose that nobody knows. Can't wait for the NSA and CIA obligatory connections.
     
  10. digiquandry

    digiquandry MDL Member

    Sep 13, 2015
    142
    136
    10
    Well you know, had you gone over to the RSA show a few days ago--at the Moscone Center on Howard Street...right there in San Francisco (the $25 burgers were worth it)--you might have learned something. NSA was there, FBI was there, Malwarebytes was there, Comodo was there. I figure each booth cost well over 6 figures. Hmmmm? There's a lot of money to be made by creating a problem and then offering everyone a solution to it. You just keep on quoting your "tech community" and using big words...I think you'll fit right in.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. nodnar

    nodnar MDL Expert

    Oct 15, 2011
    1,345
    1,074
    60
    well, i guess those San Francisco $25 burgers can be consigned to the bin.
    it is all about risk. perceived risk, i mean.,that is. not actual risk.
    as any designer knows, and intel knows it too, once a fundamental design flaw
    has crept in, it can never be improved.never. and that is what we have in this
    meltdown and spectre malware.so;what happened in two decades? did fort knox
    get hacked? your bitcoin wallet? ohnooh, too much trouble for the crooks.
    [crooks hate work, or they would get a decent job] so we can all afford
    to stick our heads in the sand, intel included.intel goes on developing
    cpus, calling them fancy names.[ how about sewerbridge, intel?]
    [it never fails to baffle me, if a`scientist`shoots a design full of holes.
    what are they trying to achieve, i wonder? i suppose that you have to look
    at where the money goes, like those San Francisco $25 burgers.]
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. Joe C

    Joe C MDL Guru

    Jan 12, 2012
    3,507
    2,082
    120
    I could never see spending $25. on a burger unless it was made with psilocybin mushroom's so I could actually enjoy it
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. digiquandry

    digiquandry MDL Member

    Sep 13, 2015
    142
    136
    10
    #435 digiquandry, Mar 12, 2019
    Last edited: Mar 12, 2019
    well, without fries and lemonade it was actually $17. :aglerks: Expensive, yes. (Everything there is.) But not an everyday thing. I was merely making a point. A lot of people live in their own little reality bubbles and don't see the world for what it really is. The point is: nobody seems to be asking themselves who permitted the Spectre/MD exploits to be engineered....who requested that they be engineered...and the interconnectivity between the two. Mind you...this is a planet-wide firmware exploit that has been in existence secretly for decades...the magnitude of it is mind-blowing. The earth of the future....a disturbing scene ....whole continents of parrots. Actually, it's the earth of today.

    Everybody is basically saying, "Oh, let's patch this," and then getting back to "Game of Thrones" or whatever other distraction consumes their mental energies on a daily basis. That's all I really have to say about it...to each his own.

    And I'm no one special...but that burger was. :D

    Edit: if anyone's interested in learning how to completely stop being spied on by their computer, please chime in. I'm willing to teach a few things (provided there is sufficient interest).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,664
    1,368
    150
    classical MS scamming their users.
     
  15. Michaela Joy

    Michaela Joy MDL Crazy Lady

    Jul 26, 2012
    4,068
    4,649
    150
    To me, this seems like something that can be mitigated (at least partially) by good BIOS coding practices.

    i.e. Cleaning buffers and monitoring for completion of tasks so that proper hardware housekeeping can be done.

    This statement implies that the current Meltdown patch is useless, and may make matters worse.

    So why install it in the first place.

    Thoughts?...
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. -=ismail=-

    -=ismail=- MDL Member

    Jul 25, 2013
    154
    553
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...