IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Nvivia and AMD shares up and up, Ouch,,,,,Intel chips have a security flaw
jcarter
post Jan 3 2018, 03:48 PM
Post #1


Jane


Group: Members
Posts: 5,671
Joined: 26-March 02
From: Cape Cod, MA NE USA
Member No.: 979
My Mac(s): 3 Macs, two 27 inchers running Yosemite 10.10.5, and one 24 inch 10.6.8.



Our Macs have Intel chips.
Is this bug going to effect us, I sure hope not.
But this news Im reading says that Apple and other guys who use the Intel ones, will give us security patches.
I dont understand how these computers we have would be vulnerable to hacking, but you people here will explain it to me.
Go to the top of the page
 
+Quote Post
kimmer
post Jan 3 2018, 08:34 PM
Post #2


Snowball


Group: Admin
Posts: 8,296
Joined: 2-April 02
Member No.: 995



QUOTE(jcarter @ Jan 3 2018, 01:48 PM) *
Our Macs have Intel chips.
Is this bug going to effect us, I sure hope not.
But this news Im reading says that Apple and other guys who use the Intel ones, will give us security patches.
I dont understand how these computers we have would be vulnerable to hacking, but you people here will explain it to me.


What bug? Please provide a link, or links, to the article(s) you are reading.

Also, what does this bug have to do with "Nvivia and AMD shares up and up"?


--------------------
My Macs: iMac 27-inch, Mid 2011, 2.7 GHz Intel Core i5, 20 GB 1333 MHz DDR3, 10.12.6; rMBPro; default browser: Safari; default email: browser for gmail
Go to the top of the page
 
+Quote Post
krissel
post Jan 4 2018, 01:41 AM
Post #3


TS nightowl


Group: Admin
Posts: 14,574
Joined: 17-August 00
From: NJ, USA
Member No.: 16
My Mac(s): MBP 13 2.7/10.12.6; MBA 11 1.3/10.12.3; MBP 17 2.5/10.8.2/10.68; MBP 15 2.5/10.6.8; 2 MacMinis 2.8/10.12.6;... oh heck, a lot of Apple stuff



There are two flaws in virtually all processor chips. One can be corrected by software, the other is more entrenched but is harder to exploit.

Here is a rundown:

https://nyti.ms/2EOX03d

(I hope this link works. I have a digital subscription so I'm not sure if this is going to be open to the general public.)


--------------------


A Techsurvivors founder
Go to the top of the page
 
+Quote Post
jcarter
post Jan 4 2018, 08:39 AM
Post #4


Jane


Group: Members
Posts: 5,671
Joined: 26-March 02
From: Cape Cod, MA NE USA
Member No.: 979
My Mac(s): 3 Macs, two 27 inchers running Yosemite 10.10.5, and one 24 inch 10.6.8.



Thank you for that link, (one of our kids has the subscription, so Ive got 10 issues a month to read.)

This is interesting, as I would not have known it, until I peeked at my stock holdings and saw NVDA was cranking up, and why.
The links pop up on that investment site, but too many to list. So the one Kris put up, is perfect.

Big storm coming at us along the E coast, no school anywhere here, grandkids are happy.
Forgot to say, this is surface wind on the screen capture, but looking up to higher altitudes, OMG is that wind cranking. We already have a couple power outages on Cape Cod.
Attached File(s)
Attached File  on_its_way.jpg ( 105.26K ) Number of downloads: 5
 
Go to the top of the page
 
+Quote Post
gunug
post Jan 4 2018, 09:47 AM
Post #5


TS πάλινδρóμος


Group: Members
Posts: 6,586
Joined: 19-August 01
From: Lawrence, Kansas
Member No.: 659
My Mac(s): MacPro Quad-Core Intel Xeon, Macbook Pro Mid-2011, eMAC's, G4-800MHz, G3, Aluminum Powerbook G4, Powerbook 5300



I'm hoping my son and daughter-in-law are hunkered down in Maryland. I don't want to call him in case he's in the car! That vector map
of the storm looks pretty crazy!


--------------------
If there really is no beer in heaven then maybe at least the
computers will work all of the time!
Go to the top of the page
 
+Quote Post
jcarter
post Jan 4 2018, 10:07 AM
Post #6


Jane


Group: Members
Posts: 5,671
Joined: 26-March 02
From: Cape Cod, MA NE USA
Member No.: 979
My Mac(s): 3 Macs, two 27 inchers running Yosemite 10.10.5, and one 24 inch 10.6.8.



Storm is moving very fast, and its probably getting better in Maryland now. Tho the wind is still bad there.
Can you check the elec outage maps for his area? Cape Cod has a lot of outages now, but our village is still OK.
Go to the top of the page
 
+Quote Post
Xairbusdriver
post Jan 4 2018, 11:07 AM
Post #7


Patience is for humans!


Group: Admin
Posts: 24,105
Joined: 16-November 00
From: Memphis, TN area
Member No.: 234
My Mac(s): 27" iMac (mid-2011), 10.12.6, Headless Mac mini, 10.11.6 running 24/7 to feed PWS



Site I read yesterday says it involves all X86 cpu's, OS is not relevant. Nor is the weather. rolleyes.gif Apparently it's not new, just not yet discovered by hackers.
QUOTE("ARs Commentor of unknown reliability/credibility")
What is weird is that some websites have reported that Microsoft has already been working since November in order to fix this issue, but they still don't have a patch. And nothing to communicate. Same for Apple. Only the Linux community managed to come up with a patch at this point.
From the horses mouth:Intel Security Findings


--------------------
I DREAM OF A SOCIETY
where a chicken can cross the road
without having its motives questioned.

Signals, holiday 2014
Go to the top of the page
 
+Quote Post
krissel
post Jan 5 2018, 01:31 AM
Post #8


TS nightowl


Group: Admin
Posts: 14,574
Joined: 17-August 00
From: NJ, USA
Member No.: 16
My Mac(s): MBP 13 2.7/10.12.6; MBA 11 1.3/10.12.3; MBP 17 2.5/10.8.2/10.68; MBP 15 2.5/10.6.8; 2 MacMinis 2.8/10.12.6;... oh heck, a lot of Apple stuff



Apple's note on the issue:

https://support.apple.com/en-us/HT208394

Below is the update Apple put out in December which might address the software end of things. One of the kernel explanations mentions speculative execution which is the at the core of one of the problems.

https://support.apple.com/en-us/HT208331


Weather-wise, we got about 6-7" of snow today (not bad) but the cold and wind we are expecting over the next few days will be brutal. UGH. snowglobe.gif


--------------------


A Techsurvivors founder
Go to the top of the page
 
+Quote Post
Xairbusdriver
post Jan 5 2018, 08:32 AM
Post #9


Patience is for humans!


Group: Admin
Posts: 24,105
Joined: 16-November 00
From: Memphis, TN area
Member No.: 234
My Mac(s): 27" iMac (mid-2011), 10.12.6, Headless Mac mini, 10.11.6 running 24/7 to feed PWS



What’s amazing to me is that Intel, MS, Google, Apple, etal have been working together for months. Of course, the cynic in me attributes that to everyone trying to avoid costly litigation... yes.gif


--------------------
I DREAM OF A SOCIETY
where a chicken can cross the road
without having its motives questioned.

Signals, holiday 2014
Go to the top of the page
 
+Quote Post
gunug
post Jan 5 2018, 10:04 AM
Post #10


TS πάλινδρóμος


Group: Members
Posts: 6,586
Joined: 19-August 01
From: Lawrence, Kansas
Member No.: 659
My Mac(s): MacPro Quad-Core Intel Xeon, Macbook Pro Mid-2011, eMAC's, G4-800MHz, G3, Aluminum Powerbook G4, Powerbook 5300



Apparently some ARM and AMD chips also are effected:

QUOTE
Speculative execution is a performance-enhancing technique virtually all modern CPUs include to one degree or another. One way to increase CPU performance is to allow the core to perform calculations it may need in the future. The different between speculative execution and “execution” is that the CPU performs these calculations before it knows whether it’ll actually be able to use the results.

Here’s how Google’s Project Zero summarizes the problem: “We have discovered that CPU data cache timing can be abused to efficiently leak information out of mis-speculated execution, leading to (at worst) arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts.”

Meltdown is Variant 3 in ARM, AMD, and Google parlance. Spectre accounts for Variant 1 and Variant 2.

https://www.extremetech.com/computing/26143...tm_medium=title
wallbash.gif


--------------------
If there really is no beer in heaven then maybe at least the
computers will work all of the time!
Go to the top of the page
 
+Quote Post
Xairbusdriver
post Jan 5 2018, 03:15 PM
Post #11


Patience is for humans!


Group: Admin
Posts: 24,105
Joined: 16-November 00
From: Memphis, TN area
Member No.: 234
My Mac(s): 27" iMac (mid-2011), 10.12.6, Headless Mac mini, 10.11.6 running 24/7 to feed PWS



QUOTE
Apparently some ARM and AMD chips also are effected
Yep, that's why their stock rose earlier this week.


--------------------
I DREAM OF A SOCIETY
where a chicken can cross the road
without having its motives questioned.

Signals, holiday 2014
Go to the top of the page
 
+Quote Post
Xairbusdriver
post Jan 5 2018, 09:16 PM
Post #12


Patience is for humans!


Group: Admin
Posts: 24,105
Joined: 16-November 00
From: Memphis, TN area
Member No.: 234
My Mac(s): 27" iMac (mid-2011), 10.12.6, Headless Mac mini, 10.11.6 running 24/7 to feed PWS



Make sure you have good back ups, I suspect there will be multiple Security updates coming this year. That could easily bring the the need to downgrades when the updates don't get tested sufficiently... wallbash.gif rolleyes.gif


--------------------
I DREAM OF A SOCIETY
where a chicken can cross the road
without having its motives questioned.

Signals, holiday 2014
Go to the top of the page
 
+Quote Post
Xairbusdriver
post Jan 12 2018, 09:43 AM
Post #13


Patience is for humans!


Group: Admin
Posts: 24,105
Joined: 16-November 00
From: Memphis, TN area
Member No.: 234
My Mac(s): 27" iMac (mid-2011), 10.12.6, Headless Mac mini, 10.11.6 running 24/7 to feed PWS



QUOTE
iOS 11.2.2
Released January 8, 2018
Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Description: iOS 11.2.2 includes security improvements to Safari and WebKit to mitigate the effects of Spectre (CVE-2017-5753 and CVE-2017-5715).
Note that this update only "mitigates the effects of Spectre [emphasis added]".

Another sources remarks, once again, pointing out the problems of allowing javascript to run on your hardware. "...The two Spectre vulnerabilities can be triggered via Javascript running in a web browser..." rolleyes.gif


--------------------
I DREAM OF A SOCIETY
where a chicken can cross the road
without having its motives questioned.

Signals, holiday 2014
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:

 



RSS Lo-Fi Version Time is now: 22nd May 2018 - 02:14 PM