Linked Questions
17 questions linked to/from Meltdown and Spectre Attacks
4
votes
3
answers
2k
views
A POWER7 processor on IBM i is currently vulnerable to Meltdowm or Spectre [duplicate]
All the updates on available linux systems have already been made.
But I also have an IBM i (AS400) server, I have not heard in the news. But obviously it is more lucrative for news channels to ...
- 143
2
votes
1
answer
708
views
Meltdown and Spectre regarding Firewalls and Sandboxing [duplicate]
I don't deeply understand Meltdown and Spectre -- all I know is that they are basically keylogging-like vulnerabilities within the CPU, which bypass any application layer stuff; correct me if I'm ...
- 29
4
votes
2
answers
396
views
What is the expected performance impact/loss of meltdown/spectre patches? [duplicate]
The patches related to the mitigation of meltdown and spectre attacks, have they caused significant and noticeable slow down of execution in systems they have been applied to?
- 275
2
votes
2
answers
358
views
Should I wait until Spectre and Meltdown is fixed in hardware? [duplicate]
I have a Laptop that needs replacing due to age.
I will be using this laptop for desktop use, including Office Apps, Development, Running VMs & Web Browsing. I will be using separation using ...
1
vote
2
answers
225
views
What to do against Spectre-1, Sprectre-2 and Meltdown on Linux and Windows in 01/2018? [duplicate]
How to handle Spectre-1, Spectre-2 and Meltdown for now, in 01/2018?
It can almost never be wrong to do the following
Stay up to date with your browser and OS e.g. Linux kernel update
Update anti-...
- 45
-3
votes
1
answer
204
views
Are PCs really vulnerable to Spectre type attacks due to virtual user space addressing? [duplicate]
Are Windows OS user programs vulnerable to Spectre and the other recent Intel flaws? Wouldn't the virtual memory assignment in Windows prevent such attacks, or their usefulness? Sorry if I miss ...
- 107
4
votes
0
answers
165
views
What is known about the latest vulnerability related to Linux Page Table Isolation patches? [duplicate]
Recently, on Hacker News front page, there was a post mentioning a new vulnerability that seems to affect Intel processors. The post is mostly speculation and there is no PoC or an exploit that I'm ...
- 6,594
53
votes
3
answers
16k
views
Is it true that meltdown and spectre were intended as debug tools?
I heard from a guy that's involved in low-level (assembler, C for drivers and OSes) programming, that meltdown and spectre weren't actually vulnerabilities discovered only so recently, but they were ...
- 663
48
votes
1
answer
9k
views
How to mitigate Meltdown in Docker images?
On https://meltdownattack.com/ it is suggested that (in some cases?) scenarios with Docker containers are also vulnerable.
I'm a developer using Docker for two different purposes:
Images used for ...
- 859
48
votes
3
answers
16k
views
Are new Intel CPUs vulnerable to Meltdown/Spectre?
Has Intel released any information about new processors?
According to their advisory a number of processors are susceptible, but it says nothing about when new processors will be fixed. Also Meltdown ...
- 637
26
votes
1
answer
9k
views
Meltdown and Virtual Machines
This question originated from a discussion about VMs not being vulnerable to Meltdown.
Can Meltdown "break out" of a virtual machine, so to speak?
What is meant by this is: Can a program (with any ...
- 1,024
5
votes
1
answer
545
views
Why were Meltdown and Spectre disclosed at the same time?
Both the Meltdown and Spectre vulnerabilities were publicly disclosed on January 3, 2018. (6 days ahead of the originally planned January 9).
Since their public reveal, there has been some confusion ...
- 1,535
2
votes
1
answer
1k
views
how did the meltdown attack break KASLR in 128 steps for a target machine with 8GB RAM with 40bit randomization on a 64bit machine?
In the meltdown official paper released the authors broke the KASLR with 128 steps at worse. Unable to understand how did they come down to that number
Paper for reference
- 123
2
votes
1
answer
1k
views
Privacy implications of Intel CPU backdoors [closed]
I didn't follow all the episodes about backdoors in Intel CPUs
What can intelligence or law enforcement agencies potentially do on a computer equipped with a vulnerable Intel CPU (connected to the ...
- 21
2
votes
1
answer
640
views
What is NetSpectre?
A new attack was revealed in a document titled NetSpectre: Read Arbitrary Memory over Network (PDF warning). I've seen a few non-technical writeups about the fact that it's a pretty slow attack:
The ...
- 147