Google: Vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel

Published by

Click here to post a comment for Google: Vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel on our message forum
#5507091
data/avatar/default/avatar15.webp
This press release is a bit unclear. Dwagner summed up all the press releases pretty concise in another forum:
* "Meltdown" clearly affects only Intel CPUs, and allows writing trivial (as in "2-hours coding excercise") exploits where user space code can read arbitrary kernel space data. Expect exploits coming in quickly from every script kid and part time criminal on the Internet. There is good reason why Amazon and MicroSoft haste to force-patch-and-reboot all their "cloud" systems. * The performance-lowering KPTI work-around addresses "Meltdown", only * Performance penalty of KPTI largely depends on the number of context switches per second, the more, the worse. * "Spectre" theoretically affects any CPU that implements speculative execution, but exploits are hard to write, artificial examples have been demonstrated as carefully crafted binaries and JavaScript code, they require that the attacker has some interface to the vicitim that allows him to make the victim execute selected instruction sequences with input parameters controlled by the attacker (that is a given for JavaScript code in browsers and guest code in VMs
Much more easy to understand in my opinion. Kind regards B.
#5507158
data/avatar/default/avatar08.webp
Great that android "has" a patch already. Even greater if people could actually get it for their devices.
#5507164
data/avatar/default/avatar01.webp
And how will they push this security update on older phones? If you have LG google cant just push some patch without LG saying OK? or im mistaking?
#5507268
data/avatar/default/avatar29.webp
So AMD is effected or not ? the 1950x TR4 and such ?
#5507272
data/avatar/default/avatar09.webp
Feels good that I just got my act together during the weekend and installed LineageOS on my devices that stopped getting updates more than one year ago.
#5507276
data/avatar/default/avatar23.webp
X7007:

So AMD is effected or not ? the 1950x TR4 and such ?
Not by meltdown for sure.
#5507281
https://forums.guru3d.com/data/avatars/m/196/196284.jpg
Xserces:

And how will they push this security update on older phones? If you have LG google cant just push some patch without LG saying OK? or im mistaking?
Pixel and supported Nexus devices will get the update directly from Google. Devices from LG, Samsung, HTC, Huawei, Xiaomi, etc will have to wait for manufacturers to release updates. For those in the US using devices from those manufacturers, there will also be a wait to see if carriers approve the security updates.
#5507299
data/avatar/default/avatar35.webp
Alessio1989:

Not by meltdown for sure.
it will be ok to update without losing performance ? AMD 1950x
#5507302
data/avatar/default/avatar40.webp
X7007:

it will be ok to update without losing performance ? AMD 1950x
Performance losing for typical user is quite unnoticeable in most scenarios.. The big issue is for Amazon, Microsoft Azure and companies like those, where even a +1% overhead on their entire ecosystem means tons money lost.