Trixology

General Category => General Computing/Macintosh => Topic started by: xairbusdriver on January 04, 2018, 11:16:58 PM

Title: Intel x86 chips have kernal memory leaks
Post by: xairbusdriver on January 04, 2018, 11:16:58 PM
You've probably heard by now. MS, Linix, Apple all 'cooperating with Intel to find a fix/patch... since November? [rolleyes2]
Intel's response (https://newsroom.intel.com/news/intel-responds-to-security-research-findings/)
Ars technica story and interesting comments (https://arstechnica.com/gadgets/2018/01/whats-behind-the-intel-design-flaw-forcing-numerous-patches/)
Title: Thanks for the ArsTechnica link (Re: Intel x86 chips have kernal memory leaks)
Post by: elagache on January 05, 2018, 12:01:34 AM
Dear X-Air and WeatherCat concerned Netizens,

You've probably heard by now. MS, Linix, Apple all 'cooperating with Intel to find a fix/patch... since November? [rolleyes2]
Ars technica story and interesting comments (https://arstechnica.com/gadgets/2018/01/whats-behind-the-intel-design-flaw-forcing-numerous-patches/)

Thanks for posting ArsTechnica link.  It was a little heady, but there was enough there to understand what the problem is.  Sadly, it looks like Intel really goofed badly for these researchers to be able get their hands on kernel data.  The suggested patches look really clumsy and inefficient.  I'm sure Intel will try to escape, but this looks to me like a monster of a class-action lawsuit in the making.

Oh well,
. . . . . . Edouard
Title: Re: Intel x86 chips have kernal memory leaks
Post by: xairbusdriver on January 06, 2018, 02:12:29 AM
I may have to until next year to work on my "uptime" record. I think this may be the year of multiple Security updates with the requisite Restarts! OTOH, my mini is stil running 11.6 and Aplle may not bother trying to update that OS version to counter the Intel problems... [banghead] [rolleyes2]
Title: Re: Intel x86 chips have kernal memory leaks
Post by: xairbusdriver on January 12, 2018, 02:45:15 PM
Quote
iOS 11.2.2

Released January 8, 2018
Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Description: iOS 11.2.2 includes security improvements to Safari and WebKit to mitigate the effects of Spectre (CVE-2017-5753 and CVE-2017-5715).
https://support.apple.com/en-us/HT208401 (https://support.apple.com/en-us/HT208401)
Note that this update only "mitigates the effects of Spectre [emphasis added]".

Another sources remarks (https://nakedsecurity.sophos.com/2018/01/09/apple-issues-spectre-fix-with-ios-11-2-2-update/), once again, pointing out the problems of allowing javascript to run on your hardware. "...The two Spectre vulnerabilities can be triggered via Javascript running in a web browser..." [rolleyes2]