We appear to be getting conflicting comments here, Microsoft call the issue a bug (https://answers.microsoft.com/en-us/windows/forum/windows\_10-security/meltdown-and-spectre-vulnerabilities-intel-chip/ead3f25e-6c55-4359-9cd9-5be87cbe7b4f?messageId=28cccf1a-5240-4489-8989-a6b733b12fb9) Intel say it's not ( *FAQ* - https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html) Where do we go?
Meltdown and Spectre vulnerabilities Intel (and AMD) Chip Bug
A lot of noise on the internet, after Intel confirm that chips have a bug:
https://newsroom.intel.com/news/intel-responds-to-security-research-findings/
This post is to bring some light on this.
1- Intel says is not only their chips affected
2- PCID (Process-Context Identifiers), a chip feature, has a bug that allow apps (malware) to read data
3- Process-context identifiers (PCIDs) are a facility by which a logical processor may cache information for multiple linear-address spaces. The processor may retain cached information when software switches to a different linear address space with a different PCID.
4- Macintosh and Linux OS are also affected.
Rumors:
1- If you have Haswell (4th-gen) or newer, PCID (Process-Context Identifiers) is enabled.
2- After apply the patch, performance is going to be slower on newer CPU. Around 5 to 10%.
2- Still if you have older CPU, performance will be affected worse than newer CPUs.
3- To be affected you must have a OS 64 bits. {Correction: 32bits has vulnerability, MS still working on this)
Just as I'm writing this, Linus Torvalds and his team are working on this too:
https://lkml.org/lkml/2018/1/2/703
https://www.postgresql.org/message-id/20180102222354.qikjmf7dvnjgbkxe%40alap3.anarazel.de
Can we get a word from Microsoft?
For windows, What patch is going to address this? (Update: Patch links and KB are listed on postings)
Is that is going to be on the Montly Rollup and/or Security only patches? (Update: See the links posted)
If performance is going to suffer, can we be able to uninstall such patch? (Update: Microsoft published a document about it, See the links posted)
Please, any info will be appreciated.
Windows for home | Previous Windows versions | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
77 answers
Sort by: Oldest
-
Anonymous
2018-01-05T00:49:59+00:00 -
Anonymous
2018-01-05T15:59:28+00:00 Valdemar, reading this document:
Mentions:
Customers should take the following actions to help protect against the vulnerabilities:
- Apply the Windows operating system update. For details on how to enable this update, see Microsoft Knowledge Base Article 4072699.
- Make necessary configuration changes to enable protection.
- Apply an applicable firmware update from the OEM device manufacturer.
Important Customers who only install the Windows update will not receive the benefit of all known protections
So, that means that even after patching we still not safe?
Or windows defender will do the registry changes?
What about the rest of us that we have a different AV?
I am still waiting for Dell to release firmware.
-
Anonymous
2018-01-05T19:29:03+00:00 To summarize:
1- Make sure your Antivirus is certified for the Jan 2018 updates. Update your AV.
2- Verify the reg keys listed on the MS document are set. (seems like on server OS has to be done manually)
3- Install the MS updates.
4- Install your hardware updates (when are available)
Seems right?