Ranljivost v Intel procesorjih

I've confirmed this on my systems as well for Meltdown.

Ryzen 1700:
Speculation control settings for CVE-2017-5754 [rogue data cache load]

Hardware requires kernel VA shadowing: False

Both Intel's installed:
Speculation control settings for CVE-2017-5754 [rogue data cache load]

Hardware requires kernel VA shadowing: True
Windows OS support for kernel VA shadow is present: True
Windows OS support for kernel VA shadow is enabled: True
Windows OS support for PCID optimization is enabled: False

D3m je 6. jan 2018 ob 07:50 izjavil:

@vostok1 Evo k si lih ti. Če češ ti prodam matično + APU za 130 eur + Cooler Master TX3 hladilnik ti dam gratis.

D3m je 6. jan 2018 ob 11:06 izjavil:

Ki se bo zgodil čez kako leto.

FireSnake je 5. jan 2018 ob 21:13 izjavil:

D3m je 5. jan 2018 ob 15:15 izjavil:

https://forums.anandtech.com/threads/ma...

I've confirmed this on my systems as well for Meltdown.

Ryzen 1700:
Speculation control settings for CVE-2017-5754 [rogue data cache load]

Hardware requires kernel VA shadowing: False

Both Intel's installed:
Speculation control settings for CVE-2017-5754 [rogue data cache load]

Hardware requires kernel VA shadowing: True
Windows OS support for kernel VA shadow is present: True
Windows OS support for kernel VA shadow is enabled: True
Windows OS support for PCID optimization is enabled: False

Ryzen nima problemov.

Lp.

Tole je pa zelo dobra novica za AMD.

Je pa zanimivo, kako Intelaši vseskozi špukajo po AMDju. Zakaj, če problemov ni (oziroma so ti softversko rešljivi, BREZ penalov za hitrost)?


Zadeva še ni končana. Gamerji na udaru

vostok_1 je 5. jan 2018 ob 18:03 izjavil:

pa že ta ME mi je šel na kurac.

In an email to The Register, Dino Dai Zovi, cofounder and CTO of security biz Capsule8, said the vulnerability isn't quite subject to remote execution "since the crafted certificate that exploits the vulnerability needs to be written to NVRAM, the attacker must already have privileged access to the host or physical access. It would let an attacker bypass secure/trusted boot, which is performed by the TPM".

An AMD spokesperson told The Register that an attacker would first have to gain access to the motherboard and then modify SPI-Flash before the issue could be exploited. But given those conditions, the attacker would have access to the information protected by the TPM, such as cryptographic keys.

AMD's spokesperson said the chipmaker plans to address the vulnerability for a limited number of firmware versions. BIOS updates from OEMs are supposed to be made available later this month.

neboben je 7. jan 2018 ob 10:47 izjavil:

NVIDIA: od jutri naprej bo možno dobit popravke R390 branch
http://nvidia.custhelp.com/app/answers/...

D3m je 7. jan 2018 ob 11:19 izjavil:

Nisem vedel, da moraš pri Spectre in Meltdown prepisati NVRAM, da ga exploitaš.

“I think somebody inside of Intel needs to really take a long hard look at their CPU’s, and actually admit that they have issues instead of writing PR blurbs that say that everything works as designed,” Torvalds wrote. “.. and that really means that all these mitigation patches should be written with ‘not all CPU’s are crap’ in mind.”

“Or is Intel basically saying ‘we are committed to selling you shit forever and ever, and never fixing anything’?” he added. “Because if that’s the case, maybe we should start looking towards the ARM64 people more.”

“Please talk to management,” Torvalds concluded. “Because I really see exactly two possibibilities:—Intel never intends to fix anything OR—these workarounds should have a way to disable them. Which of the two is it?”

scipascapa je 6. jan 2018 ob 07:26 izjavil:

Ne razumem točno dobro te ranljivosti, od kje in kako je prišla? Lahko nekdo razloži v 2-3 stavkih? Hvala :)

Meltdown je posledica nelinearnega izvajanja ukazov, ki ga Intelovi procesorji uporabljajo za pohitritev delovanja. Poenostavljeno povedano procesor začne izvajati nekatere ukaze, še preden je jasno, ali bo njihovo izvajanje sploh potrebno glede na programsko kodo (out of order execution). Če se izkaže, da niso bili potrebni (ker je pogoj v kodi, ki vodi do njih, neizpolnjen), se rezultati zavržejo. Ideja, ki je načeloma koristna, pa povzroči spremembe v registrih in predpomnilniku, ki so merljive. Zato lahko s pametno kodo uporabniški programi dostopijo do podatkov v pomnilniku, ki je rezerviran za jedro, kamor po dizajnu ne bi smeli.

Spectre deluje nekoliko drugače, in sicer izkorišča špekulativno izvajanje ukazov (speculative execution). Spectre programov omogoča vpogled v dele pomnilnika, ki pripadajo drugim programom, torej dostop do poljubnega kosa pomnilnika. Oboje je slabo in odpira prostor za napade.

filip007 je 15. jan 2018 ob 20:20 izjavil:

So kakšna orodja za preverjanje, sem slučajno najdel tega.
https://www.ashampoo.com/uk/gbp/pin/130...