Arcadia Posted January 4, 2018 Share Posted January 4, 2018 (edited) This is separate from the Intel chip bug (Meltdown). From Reuters https://www.reuters.com/article/us-cyber-intel/security-flaws-put-virtually-all-phones-computers-at-risk-idUSKBN1ES1BO “FRANKFURT/SAN FRANCISCO (Reuters) - Security researchers on Wednesday disclosed a set of security flaws that they said could let hackers steal sensitive information from nearly every modern computing device containing chips from Intel Corp, Advanced Micro Devices Inc and ARM Holdings. ... Researchers with Alphabet Inc’s Google Project Zero, in conjunction with academic and industry researchers from several countries, discovered two flaws. The first, called Meltdown, affects Intel chips and lets hackers bypass the hardware barrier between applications run by users and the computer’s memory, potentially letting hackers read a computer’s memory and steal passwords. The second, called Spectre, affects chips from Intel, AMD and ARM and lets hackers potentially trick otherwise error-free applications into giving up secret information. ... Google on its blog said Intel and others planned to disclose the issues on Jan. 9. Google said it informed the affected companies about the “Spectre†flaw on June 1, 2017 and reported the “Meltdown†flaw after the first flaw but before July 28, 2017. ... ARM spokesman Phil Hughes said that patches had already been shared with the companies’ partners, which include many smartphone manufacturers. “This method only works if a certain type of malicious code is already running on a device and could at worst result in small pieces of data being accessed from privileged memory,†Hughes said in an email. AMD chips are also affected by at least one variant of a set of security flaws but that it can be patched with a software update. The company said it believes there “is near zero risk to AMD products at this time.†Google said in a blog post that Android phones running the latest security updates are protected, as are its own Nexus and Pixel phones with the latest security updates. Gmail users do not need to take any additional action to protect themselves, but users of its Chromebooks, Chrome web browser and many of its Google Cloud services will need to install updates.†Edited January 5, 2018 by Arcadia in CA 2 Quote Link to comment Share on other sites More sharing options...
Alessandra Posted January 4, 2018 Share Posted January 4, 2018 (edited) I 'liked,' but I mean don't like, lol. Edited for grammar Edited January 4, 2018 by Alessandra 1 Quote Link to comment Share on other sites More sharing options...
Catwoman Posted January 4, 2018 Share Posted January 4, 2018 I 'liked,' but you I mean don't like, lol. Same here! Thanks for posting this, Arcadia! 1 Quote Link to comment Share on other sites More sharing options...
Arcadia Posted January 5, 2018 Author Share Posted January 5, 2018 From CNN Money http://money.cnn.com/2018/01/04/technology/business/apple-macs-ios-spectre-meltdown/index.html “Apple has confirmed all its Mac systems and iOS devices are affected by two recently disclosed processor flaws called Spectre and Meltdown. In an announcement on Thursday, Apple (AAPL) said it has released mitigations to defend against Meltdown in iOS 11.2, macOS 10.13.2, and tvOS 11.2. It will release mitigations in Safari to defend against the Spectre bug "in the coming days," the release said. "There are no known exploits impacting customers at this time," Apple said, echoing what other companies and security researchers have said. Apple Watch isn't impacted by the Meltdown flaw.†Quote Link to comment Share on other sites More sharing options...
Sandwalker Posted January 5, 2018 Share Posted January 5, 2018 Linux had the security patches completed for these back in August, per ds. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.