Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #190656 > unrolled thread
| Started by | Curt <curty@free.fr> |
|---|---|
| First post | 2018-01-04 18:30 +0100 |
| Last post | 2018-01-04 19:20 +0100 |
| Articles | 4 on this page of 24 — 13 participants |
Back to article view | Back to linux.debian.user
“Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Curt <curty@free.fr> - 2018-01-04 18:30 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 18:40 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Michael Fothergill <michael.fothergill@gmail.com> - 2018-01-04 18:50 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 19:00 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Tixy <tixy@yxit.co.uk> - 2018-01-04 19:20 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 19:30 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Michael Fothergill <michael.fothergill@gmail.com> - 2018-01-04 19:40 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Nicholas Geovanis <nickgeovanis@gmail.com> - 2018-01-04 20:00 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Jack Dangler <tdldev@gmail.com> - 2018-01-05 13:50 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws <tomas@tuxteam.de> - 2018-01-05 14:00 +0100
Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws "Thomas Schmitt" <scdbackup@gmx.net> - 2018-01-05 14:50 +0100
Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws <tomas@tuxteam.de> - 2018-01-05 15:40 +0100
Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws "Thomas Schmitt" <scdbackup@gmx.net> - 2018-01-05 16:50 +0100
Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws <tomas@tuxteam.de> - 2018-01-05 17:10 +0100
[OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws Stefan Monnier <monnier@iro.umontreal.ca> - 2018-01-05 19:10 +0100
Re: [OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws SDA <marathon.durandal@gmail.com> - 2018-01-08 02:40 +0100
Re: [OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws Curt <curty@free.fr> - 2018-01-08 11:30 +0100
Re: [OFFTOPIC] Re: "Meltdown" and "Spectre": Every modern processor has unfixable security flaws Tom Furie <tom@furie.org.uk> - 2018-01-08 13:10 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Nicholas Geovanis <nickgeovanis@gmail.com> - 2018-01-05 17:40 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws <tomas@tuxteam.de> - 2018-01-05 17:50 +0100
[OFFTOPIC] Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws Stefan Monnier <monnier@iro.umontreal.ca> - 2018-01-05 19:10 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws francis picabia <fpicabia@gmail.com> - 2018-01-04 19:10 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws bw <bwtnguy@yahoo.com> - 2018-01-04 19:20 +0100
Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws The Wanderer <wanderer@fastmail.fm> - 2018-01-04 19:20 +0100
Page 2 of 2 — ← Prev page 1 [2]
| From | Stefan Monnier <monnier@iro.umontreal.ca> |
|---|---|
| Date | 2018-01-05 19:10 +0100 |
| Subject | [OFFTOPIC] Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws |
| Message-ID | <v4EBk-7a0-9@gated-at.bofh.it> |
| In reply to | #190687 |
> Is it correct to call branch prediction the same as speculative execution?
Not really: they're closely related yet different.
Stefan
[toc] | [prev] | [next] | [standalone]
| From | francis picabia <fpicabia@gmail.com> |
|---|---|
| Date | 2018-01-04 19:10 +0100 |
| Subject | Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws |
| Message-ID | <v4i7M-Fs-5@gated-at.bofh.it> |
| In reply to | #190656 |
[Multipart message — attachments visible in raw view] — view raw
On Thu, Jan 4, 2018 at 1:22 PM, Curt <curty@free.fr> wrote: > https://arstechnica.com/gadgets/2018/01/meltdown-and-spectre-every-modern- > processor-has-unfixable-security-fladdws/U > > > TL;DR > > Windows, Linux, and macOS have all received security patches that > significantly alter how the operating systems handle virtual memory in > order to protect against a hitherto undisclosed flaw. > AKA CVE-2017-5754 Debian does not have this released as a kernel update yet in any release at this time. https://security-tracker.debian.org/tracker/CVE-2017-5754
[toc] | [prev] | [next] | [standalone]
| From | bw <bwtnguy@yahoo.com> |
|---|---|
| Date | 2018-01-04 19:20 +0100 |
| Subject | Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws |
| Message-ID | <v4ihs-Jn-11@gated-at.bofh.it> |
| In reply to | #190660 |
On Thu, 4 Jan 2018, francis picabia wrote: > On Thu, Jan 4, 2018 at 1:22 PM, Curt <curty@free.fr> wrote: > > > https://arstechnica.com/gadgets/2018/01/meltdown-and-spectre-every-modern- > > processor-has-unfixable-security-fladdws/U > > Debian does not have this released as a kernel update yet in any release at > this time. > It says right there in the link: every-modern-processor-has-unfixable-security-fladdws So they must be right. What are security-fladdws, is tht a typo?
[toc] | [prev] | [next] | [standalone]
| From | The Wanderer <wanderer@fastmail.fm> |
|---|---|
| Date | 2018-01-04 19:20 +0100 |
| Subject | Re: “Meltdown” and “Spectre”: Every modern processor has unfixable security flaws |
| Message-ID | <v4ihs-Jn-15@gated-at.bofh.it> |
| In reply to | #190660 |
[Multipart message — attachments visible in raw view] — view raw
On 2018-01-04 at 13:06, francis picabia wrote: > On Thu, Jan 4, 2018 at 1:22 PM, Curt <curty@free.fr> wrote: > >> https://arstechnica.com/gadgets/2018/01/meltdown-and-spectre-every-modern- >> processor-has-unfixable-security-fladdws/U >> >> >> TL;DR >> >> Windows, Linux, and macOS have all received security patches that >> significantly alter how the operating systems handle virtual memory in >> order to protect against a hitherto undisclosed flaw. > > AKA > CVE-2017-5754 That's the CVE for just one of the vulnerabilities: Meltdown. Spectre has two separate CVEs: CVE-2017-5753 and CVE-2017-5715 > Debian does not have this released as a kernel update yet in any release at > this time. > > https://security-tracker.debian.org/tracker/CVE-2017-5754 https://security-tracker.debian.org/tracker/CVE-2017-5753 https://security-tracker.debian.org/tracker/CVE-2017-5715 Same. If I recall what I read earlier correctly, kernel 4.15 contains the Meltdown mitigation, but no system-wide fix for Spectre is expected to be possible. -- The Wanderer The reasonable man adapts himself to the world; the unreasonable one persists in trying to adapt the world to himself. Therefore all progress depends on the unreasonable man. -- George Bernard Shaw
[toc] | [prev] | [standalone]
Page 2 of 2 — ← Prev page 1 [2]
Back to top | Article view | linux.debian.user
csiph-web