Go Back  Bike Forums > The Lounge > Foo
Reload this Page >

Arrrrg. Massive processor flaw leaves both PCs and Macs vulnerable

Foo Off-Topic chit chat with no general subject.

Arrrrg. Massive processor flaw leaves both PCs and Macs vulnerable

Reply

Old 01-03-18, 09:41 AM
  #1  
genec
genec
Thread Starter
 
genec's Avatar
 
Join Date: Sep 2004
Location: West Coast
Posts: 26,182

Bikes: custom built, sannino, beachbike, giant trance x2

Mentioned: 20 Post(s)
Tagged: 0 Thread(s)
Quoted: 5099 Post(s)
Arrrrg. Massive processor flaw leaves both PCs and Macs vulnerable

https://www.pcworld.com/article/3245...ts-pc-mac.html

Apparently AMD processors do not have this flaw.

Damn... remember when Macs used a Motorola processor and wasn't vulnerable to the flaws of PCs... like the old Pentium divide error...

This is what we get by NOT being "diversified."
genec is offline  
Reply With Quote
Old 01-03-18, 10:08 AM
  #2  
Juan Foote
LBKA (formerly punkncat)
 
Juan Foote's Avatar
 
Join Date: Jan 2010
Location: Jawja
Posts: 3,345

Bikes: Spec Roubaix SL4, GT Traffic 1.0

Mentioned: 5 Post(s)
Tagged: 0 Thread(s)
Quoted: 764 Post(s)
yes, this sucks
Juan Foote is offline  
Reply With Quote
Old 01-03-18, 10:36 AM
  #3  
bigbenaugust 
always rides with luggage
 
bigbenaugust's Avatar
 
Join Date: Feb 2005
Location: KIGX
Posts: 2,089

Bikes: 2007 Trek SU100, 2009 Fantom CX, Bakfiets

Mentioned: 2 Post(s)
Tagged: 0 Thread(s)
Quoted: 204 Post(s)
This is huge, and hugely bad. Good thing I have one AMD machine and one ARM machine in my stash.
__________________
--Ben
2006 Trek SU100, 2009 Motobecane Fantom CX, and a Bakfiets
Previously: 2000 Trek 4500 (2000-2003), 2003 Novara Randonee (2003-2006), 2003 Giant Rainier (2003-2008), 2005 Xootr Swift (2005-2007), 2007 Nashbar 1x9 (2007-2011), 2011 Windsor Shetland (2011-2014), 2008 Citizen Folder (2015), 2011 Motobecane Fantom Cross Uno (2012-2018)
Non-Bike hardware: MX Linux / BunsenLabs Linux / Raspbian / Mac OS 10.6 / Android 7
bigbenaugust is offline  
Reply With Quote
Old 01-03-18, 10:44 AM
  #4  
Shimagnolo
Senior Member
 
Shimagnolo's Avatar
 
Join Date: May 2008
Location: Zang's Spur, CO
Posts: 8,499
Mentioned: 6 Post(s)
Tagged: 0 Thread(s)
Quoted: 1268 Post(s)
It is a Local Privilege Escalation, meaning the exploit is only available to someone already logged into the machine.
Shimagnolo is online now  
Reply With Quote
Old 01-03-18, 10:46 AM
  #5  
bigbenaugust 
always rides with luggage
 
bigbenaugust's Avatar
 
Join Date: Feb 2005
Location: KIGX
Posts: 2,089

Bikes: 2007 Trek SU100, 2009 Fantom CX, Bakfiets

Mentioned: 2 Post(s)
Tagged: 0 Thread(s)
Quoted: 204 Post(s)
Yes, but the patches are going to cause a 20%ish performance hit on everything Intel made in the last several years.
__________________
--Ben
2006 Trek SU100, 2009 Motobecane Fantom CX, and a Bakfiets
Previously: 2000 Trek 4500 (2000-2003), 2003 Novara Randonee (2003-2006), 2003 Giant Rainier (2003-2008), 2005 Xootr Swift (2005-2007), 2007 Nashbar 1x9 (2007-2011), 2011 Windsor Shetland (2011-2014), 2008 Citizen Folder (2015), 2011 Motobecane Fantom Cross Uno (2012-2018)
Non-Bike hardware: MX Linux / BunsenLabs Linux / Raspbian / Mac OS 10.6 / Android 7
bigbenaugust is offline  
Reply With Quote
Old 01-03-18, 10:57 AM
  #6  
ptempel
Senior Member
 
Join Date: Feb 2005
Location: New Jersry the beautiful Garden State
Posts: 1,913

Bikes: 2007 Ridley Excalibur, 2003 Orbea Orca, 199? Cannondale Headshock MTB hardtail

Mentioned: 29 Post(s)
Tagged: 0 Thread(s)
Quoted: 514 Post(s)
My director just sent two links about this today:

https://www.theverge.com/2018/1/3/16...-windows-linux

Millions of computers using Intel chips prone to hacking and fix 'slows machines by 30 per cent'

First article says there might be 5% to 30% performance hit depending on the processor model. Anyone remember the math bug on the first pentium 5V processors? Oh well. FIX IT INTEL! ;-)
ptempel is offline  
Reply With Quote
Old 01-03-18, 10:57 AM
  #7  
windhchaser 
Senior Member
 
Join Date: Jun 2012
Location: baned from foo so for sure im not there .
Posts: 592

Bikes: Felt nine flow

Mentioned: 1 Post(s)
Tagged: 0 Thread(s)
Quoted: 628 Post(s)
wtf 20 percent???? thats crazy
__________________
And the moral of the story is,
A band with no talent can easily amuse
Idiots, with a stupid, puppet show
windhchaser is offline  
Reply With Quote
Old 01-03-18, 11:02 AM
  #8  
bigbenaugust 
always rides with luggage
 
bigbenaugust's Avatar
 
Join Date: Feb 2005
Location: KIGX
Posts: 2,089

Bikes: 2007 Trek SU100, 2009 Fantom CX, Bakfiets

Mentioned: 2 Post(s)
Tagged: 0 Thread(s)
Quoted: 204 Post(s)
I also have one Intel machine that is too old for this bug, I think.
__________________
--Ben
2006 Trek SU100, 2009 Motobecane Fantom CX, and a Bakfiets
Previously: 2000 Trek 4500 (2000-2003), 2003 Novara Randonee (2003-2006), 2003 Giant Rainier (2003-2008), 2005 Xootr Swift (2005-2007), 2007 Nashbar 1x9 (2007-2011), 2011 Windsor Shetland (2011-2014), 2008 Citizen Folder (2015), 2011 Motobecane Fantom Cross Uno (2012-2018)
Non-Bike hardware: MX Linux / BunsenLabs Linux / Raspbian / Mac OS 10.6 / Android 7
bigbenaugust is offline  
Reply With Quote
Old 01-03-18, 11:45 AM
  #9  
Juan Foote
LBKA (formerly punkncat)
 
Juan Foote's Avatar
 
Join Date: Jan 2010
Location: Jawja
Posts: 3,345

Bikes: Spec Roubaix SL4, GT Traffic 1.0

Mentioned: 5 Post(s)
Tagged: 0 Thread(s)
Quoted: 764 Post(s)
Originally Posted by Shimagnolo View Post
It is a Local Privilege Escalation, meaning the exploit is only available to someone already logged into the machine.
Reading indicated that it was a vulnerability accessible from Java and Cloud based apps from WAN.
Juan Foote is offline  
Reply With Quote
Old 01-03-18, 11:55 AM
  #10  
genec
genec
Thread Starter
 
genec's Avatar
 
Join Date: Sep 2004
Location: West Coast
Posts: 26,182

Bikes: custom built, sannino, beachbike, giant trance x2

Mentioned: 20 Post(s)
Tagged: 0 Thread(s)
Quoted: 5099 Post(s)
Originally Posted by bigbenaugust View Post
I also have one Intel machine that is too old for this bug, I think.
Oh, you're still running the Pentium, with it's own error?
Pentium FDIV: The processor bug that shook the world | TechRadar
genec is offline  
Reply With Quote
Old 01-03-18, 11:56 AM
  #11  
bigbenaugust 
always rides with luggage
 
bigbenaugust's Avatar
 
Join Date: Feb 2005
Location: KIGX
Posts: 2,089

Bikes: 2007 Trek SU100, 2009 Fantom CX, Bakfiets

Mentioned: 2 Post(s)
Tagged: 0 Thread(s)
Quoted: 204 Post(s)
11-year-old MacBookPro, stuck on 32-bit forever.
__________________
--Ben
2006 Trek SU100, 2009 Motobecane Fantom CX, and a Bakfiets
Previously: 2000 Trek 4500 (2000-2003), 2003 Novara Randonee (2003-2006), 2003 Giant Rainier (2003-2008), 2005 Xootr Swift (2005-2007), 2007 Nashbar 1x9 (2007-2011), 2011 Windsor Shetland (2011-2014), 2008 Citizen Folder (2015), 2011 Motobecane Fantom Cross Uno (2012-2018)
Non-Bike hardware: MX Linux / BunsenLabs Linux / Raspbian / Mac OS 10.6 / Android 7
bigbenaugust is offline  
Reply With Quote
Old 01-03-18, 12:02 PM
  #12  
himespau 
Senior Member
 
himespau's Avatar
 
Join Date: Jun 2008
Location: Louisville, KY
Posts: 10,815
Mentioned: 14 Post(s)
Tagged: 0 Thread(s)
Quoted: 1024 Post(s)
And to think I paid extra to go Intel rather than AMD on my home PC as well as all the ones I built for my lab. There goes that supposed performance advantage.
himespau is offline  
Reply With Quote
Old 01-03-18, 12:51 PM
  #13  
genec
genec
Thread Starter
 
genec's Avatar
 
Join Date: Sep 2004
Location: West Coast
Posts: 26,182

Bikes: custom built, sannino, beachbike, giant trance x2

Mentioned: 20 Post(s)
Tagged: 0 Thread(s)
Quoted: 5099 Post(s)
Originally Posted by himespau View Post
And to think I paid extra to go Intel rather than AMD on my home PC as well as all the ones I built for my lab. There goes that supposed performance advantage.
Same here. I used to run AMD, but I did my last build with an i5. D'oh.

AMD seemed to be falling behind for a bit... so it seemed like a good idea... at the time.
genec is offline  
Reply With Quote
Old 01-03-18, 01:29 PM
  #14  
windhchaser 
Senior Member
 
Join Date: Jun 2012
Location: baned from foo so for sure im not there .
Posts: 592

Bikes: Felt nine flow

Mentioned: 1 Post(s)
Tagged: 0 Thread(s)
Quoted: 628 Post(s)
is linux have the same issue?
__________________
And the moral of the story is,
A band with no talent can easily amuse
Idiots, with a stupid, puppet show
windhchaser is offline  
Reply With Quote
Old 01-03-18, 01:44 PM
  #15  
himespau 
Senior Member
 
himespau's Avatar
 
Join Date: Jun 2008
Location: Louisville, KY
Posts: 10,815
Mentioned: 14 Post(s)
Tagged: 0 Thread(s)
Quoted: 1024 Post(s)
Originally Posted by windhchaser View Post
is linux have the same issue?
If it is installed on a computer with an Intel processor, yes.
himespau is offline  
Reply With Quote
Old 01-03-18, 02:13 PM
  #16  
genec
genec
Thread Starter
 
genec's Avatar
 
Join Date: Sep 2004
Location: West Coast
Posts: 26,182

Bikes: custom built, sannino, beachbike, giant trance x2

Mentioned: 20 Post(s)
Tagged: 0 Thread(s)
Quoted: 5099 Post(s)
Yeah, it is the processor that has the flaw... software "fixes" for this are going to require flushing caches and then refilling them, as needed... thus adding steps that otherwise would not be needed... those extra code steps (for just about every damn operation) are what are going to slow the machines down.

Damn Intel...
genec is offline  
Reply With Quote
Old 01-03-18, 02:37 PM
  #17  
Siu Blue Wind
BACK2ME
 
Siu Blue Wind's Avatar
 
Join Date: Apr 2005
Posts: 12,594
Mentioned: 34 Post(s)
Tagged: 0 Thread(s)
Quoted: 1342 Post(s)
Hopefully the fix will fix it..Perhaps by the time Apple rolls the fix out, the speed won't be affected as much.
__________________
"Thousands of candles can be lighted from a single candle, and the life of the candle will not be shortened. Happiness never decreases by being shared." ~ Buddha

Originally Posted by making View Post
Please dont outsmart the censor. That is a very expensive censor and every time one of you guys outsmart it it makes someone at the home office feel bad. We dont wanna do that. So dont cleverly disguise bad words.
Siu Blue Wind is offline  
Reply With Quote
Old 01-03-18, 02:57 PM
  #18  
Shimagnolo
Senior Member
 
Shimagnolo's Avatar
 
Join Date: May 2008
Location: Zang's Spur, CO
Posts: 8,499
Mentioned: 6 Post(s)
Tagged: 0 Thread(s)
Quoted: 1268 Post(s)
Here is an in-depth article on the issue: https://arstechnica.com/gadgets/2018...erous-patches/
Shimagnolo is online now  
Reply With Quote
Old 01-03-18, 03:22 PM
  #19  
canklecat
Me duelen las nalgas
 
canklecat's Avatar
 
Join Date: Aug 2015
Location: Texas
Posts: 7,365

Bikes: Univega Via Carisma, Globe Carmel, Centurion Ironman Expert

Mentioned: 110 Post(s)
Tagged: 0 Thread(s)
Quoted: 2158 Post(s)
Welp, that's one way to make my AMD processors as fast as Intel.
canklecat is offline  
Reply With Quote
Old 01-03-18, 03:30 PM
  #20  
Marcus_Ti 
Only Slightly Bent
 
Marcus_Ti's Avatar
 
Join Date: Sep 2014
Location: Lincoln, Nebraska
Posts: 3,881

Bikes: Roadie: Seven Axiom Race Ti w/Chorus 11s. CX/Adventure: Carver Gravel Grinder w/ Di2

Mentioned: 23 Post(s)
Tagged: 0 Thread(s)
Quoted: 1461 Post(s)
Holy. Crap.

That takes skill and ingenuity to screw up so badly.
Marcus_Ti is online now  
Reply With Quote
Old 01-03-18, 05:12 PM
  #21  
DannoXYZ 
Senior Member
 
DannoXYZ's Avatar
 
Join Date: Jul 2005
Location: Saratoga, CA
Posts: 11,739
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 101 Post(s)
yeah, oversight... They had everything focused on inside...
DannoXYZ is offline  
Reply With Quote
Old 01-03-18, 06:21 PM
  #22  
Shimagnolo
Senior Member
 
Shimagnolo's Avatar
 
Join Date: May 2008
Location: Zang's Spur, CO
Posts: 8,499
Mentioned: 6 Post(s)
Tagged: 0 Thread(s)
Quoted: 1268 Post(s)
It gets more complicated.
Two different attacks have been announced, and only one is exclusive to Intel: https://meltdownattack.com/
Shimagnolo is online now  
Reply With Quote
Old 01-03-18, 06:46 PM
  #23  
Siu Blue Wind
BACK2ME
 
Siu Blue Wind's Avatar
 
Join Date: Apr 2005
Posts: 12,594
Mentioned: 34 Post(s)
Tagged: 0 Thread(s)
Quoted: 1342 Post(s)
Originally Posted by canklecat View Post
Welp, that's one way to make my AMD processors as fast as Intel.
__________________
"Thousands of candles can be lighted from a single candle, and the life of the candle will not be shortened. Happiness never decreases by being shared." ~ Buddha

Originally Posted by making View Post
Please dont outsmart the censor. That is a very expensive censor and every time one of you guys outsmart it it makes someone at the home office feel bad. We dont wanna do that. So dont cleverly disguise bad words.
Siu Blue Wind is offline  
Reply With Quote
Old 01-03-18, 09:35 PM
  #24  
Rollfast
What happened?
 
Rollfast's Avatar
 
Join Date: Jun 2007
Location: Around here somewhere
Posts: 6,612

Bikes: No. 7 now sitting in a box in the living room

Mentioned: 20 Post(s)
Tagged: 1 Thread(s)
Quoted: 1128 Post(s)
I have Pentium 4s. I win.
__________________
Mrs. Reagan also taught me to Just Say No To Shifting, and be kind to elderly single speeds.
Rollfast is offline  
Reply With Quote
Old 01-03-18, 09:40 PM
  #25  
Rollfast
What happened?
 
Rollfast's Avatar
 
Join Date: Jun 2007
Location: Around here somewhere
Posts: 6,612

Bikes: No. 7 now sitting in a box in the living room

Mentioned: 20 Post(s)
Tagged: 1 Thread(s)
Quoted: 1128 Post(s)
I can probably figure out things that work better than that. I don't like RPC? for instance. Beef up your firewall and router security while you are at it.


And don't allow other logins.
__________________
Mrs. Reagan also taught me to Just Say No To Shifting, and be kind to elderly single speeds.
Rollfast is offline  
Reply With Quote

Thread Tools
Search this Thread

Contact Us Archive Advertising Cookie Policy Privacy Statement Terms of Service