<div style="font-family:Calibri, Arial, Helvetica, sans-serif; font-size:12.0pt; line-height:1.3; color:#1F497D"><!-- ##### NINE BODY BEGIN ##### --><div>Spectre also affected AMD. Nobody is safe. <br></div><div><br></div><div id="signature-x" style="-webkit-user-select:none; font-family:Calibri, Arial, Helvetica, sans-serif; font-size:12.0pt; color:#1F497D" class = "signature_editor">Regards,<br><br>Jason<br></div><!-- ##### NINE BODY END ##### --></div><div class="quoted_output_body"><div id="quoted_header" class="quoted_header_editor" style="clear:both;"><hr style="border:none; height:1px; color:#E1E1E1; background-color:#E1E1E1;"/><div style="border:none; padding:3.0pt 0cm 0cm 0cm"><span style="font-size:11.0pt;font-family:Calibri, Arial, Helvetica, sans-serif"><b>From:</b> Stephen Partington <cryptworks@gmail.com><br><b>Sent:</b> Friday, January 5, 2018 11:40 AM<br><b>To:</b> Main PLUG discussion list<br><b>Subject:</b> Re: Major Intel Memory Vulnerability<br></span></div></div><br type='attribution'><div id="quoted_body" class="quoted_body_editor"><div dir="ltr"><div style="font-family:'trebuchet ms' , sans-serif">I still do not want my car to be the massively online thing that car makers seem to think is the bes thing ever. cause they have no clue what security is.</div><div style="font-family:'trebuchet ms' , sans-serif"><br /></div><div style="font-family:'trebuchet ms' , sans-serif">Leave my car dumb, gime a bluetooth interface to my phone and leave me be...</div><div style="font-family:'trebuchet ms' , sans-serif"><br /></div><div style="font-family:'trebuchet ms' , sans-serif"><br /></div><div style="font-family:'trebuchet ms' , sans-serif">And get off my lawn :-P</div></div><div><br /><div class="elided-text">On Fri, Jan 5, 2018 at 10:47 AM, der.hans <span dir="ltr"><<a href="mailto:PLUGd@lufthans.com">PLUGd@lufthans.com</a>></span> wrote:<br /><blockquote class="gmail_quote" style="margin:0 0 0 0.8ex;border-left:1px #ccc solid;padding-left:1ex">Am 05. Jan, 2018 schwätzte Stephen Partington so:<span class=""><br />
<br />
</span><blockquote class="gmail_quote" style="margin:0 0 0 0.8ex;border-left:1px #ccc solid;padding-left:1ex">
It is certainly a deciding factor in my desire to move to AMD on my CPU<br />
rollout.<br />
</blockquote>
<br />
Trying to imagine a car salesperson knowing which CPUs are in a particular<br />
model and utterfly failing.<br />
<br />
Luckily IoT generally has so many holes that we don't need to worry about<br />
meltdown and spectre for them...<br />
<br />
ciao,<br />
<br />
der.hans<br />
<br />
<blockquote class="gmail_quote" style="margin:0 0 0 0.8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
On Fri, Jan 5, 2018 at 9:39 AM, <<a href="mailto:techlists@phpcoderusa.com">techlists@phpcoderusa.com</a>> wrote:<br />
<br />
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 0.8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
<br />
I think they have a moral obligation to destroy all effected chips that<br />
are in the pipeline. Dell and others need to stop sales and not continue<br />
selling until the CPU is fixed.<br />
<br />
This is much bigger than we know. Almost every computer is effected. The<br />
intermittent fix is software. What keeps some smart and devious person<br />
from creating an app that replaced the patch with their own and then they<br />
can drain your bank account... crash your automated or self driving car....<br />
Yikes.<br />
<br />
The real solution is a new generation of chips that are not exploitable.<br />
That means replacing every computer and device that is effected.<br />
<br />
This should be a wake up call to all of us. We are way too dependent on<br />
computers.<br />
<br />
There will be major fireworks over this. I can see a lot of companies<br />
getting sued. And the only ones that win are the lawyers.<br />
<br />
This is going to be with us for years.<br />
<br />
I have 7 computers that can be or already are connected to the internet.<br />
A lot of it is old technology, however it's value is in testing. I am a<br />
software developer. As long as I keep them on a private net I am ok....<br />
Otherwise I will need to replace at least 2.<br />
<br />
This is a potential nightmare.... Patching hardware with software is a<br />
weak plan. All that need to happen is some wise person to figure out how<br />
to replace the patch with their own. Say good by to our economy if that<br />
happens.<br />
<br />
What a mess!!<br />
<br />
<br />
<br />
<br />
<br />
<br />
On 2018-01-03 18:12, Matthew Crews wrote:<br />
<br />
I would be more concerned IF the next gen CPU has this fixed. All's I know<br />
is that if Intel wants to fix the very next gen, they will need to scrap a<br />
lot of silicon that has already been finished.<br />
<br />
<br /></div></div>
Sent from ProtonMail <<a href="https://protonmail.com">https://protonmail.com</a>>, Swiss-based encrypted<div><div><br />
email.<br />
<br />
<br />
<br />
<br />
<br />
-------- Original Message --------<br />
On Jan 3, 2018, 15:35, Nathan O'Brennan wrote:<br />
<br />
<br />
I'm more curious to know which versions of Intel's upcoming chips have<br />
been fixed already. I would like to upgrade my current workstation in the<br />
next year and will stick with Intel despite any performance impact over AMD.<br />
<br />
<br />
<br />
On 2018-01-03 00:43, Aaron Jones wrote:<br />
<br />
<br />
I read the performance hit for Intel chips will be %35 or so after the<br />
fix.<br />
<br />
On Jan 2, 2018, at 7:49 PM, Eric Oyen <<a href="mailto:eric.oyen@icloud.com">eric.oyen@icloud.com</a>> wrote:<br />
<br />
so, does this mean that the UEFI might get patched first? OR, does the OS<br />
ecology have to do so first? Lastly, how much of a performance hit will<br />
this represent?<br />
<br />
-eric<br />
from the central offices of the Technomage Guild, the "oh look! yet<br />
another bug!" Dept.<br />
<br />
On Jan 2, 2018, at 3:39 PM, Matthew Crews wrote:<br />
<br />
<br />
<a href="https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/">https://www.theregister.co.uk/<wbr />2018/01/02/intel_cpu_design_fl<wbr />aw/</a><br />
<br />
In a nutshell, it is a major security flaw in Intel hardware dating back a<br />
decade that is requiring a complete kernel rewrite for every major OS<br />
(Linux, Windows, Mac, etc) in order to patch out. It cannot be patched out<br />
with a CPU microcode update. Major enough that code comments are redacted<br />
in the patches until an embargo period is expired. Also the reported fix<br />
will have a huge performance impact.<br />
<br />
Also crucial to note is that AMD chips are not affected by this.<br />
<br />
How the heck does something like this go unnoticed for so long?<br />
<br />
<br />
<br />
<br /></div></div>
Sent from ProtonMail <<a href="https://protonmail.com/">https://protonmail.com/</a>>, Swiss-based encrypted<span class=""><br />
email.<br />
<br />
<br />
------------------------------<wbr />---------------------<br />
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.or<wbr />g</a><br />
To subscribe, unsubscribe, or to change your mail settings:<br />
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mail<wbr />man/listinfo/plug-discuss</a><br />
<br />
<br />
<br />
------------------------------<wbr />---------------------<br />
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.or<wbr />g</a><br />
To subscribe, unsubscribe, or to change your mail settings:<br />
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mail<wbr />man/listinfo/plug-discuss</a><br />
<br />
<br />
------------------------------<wbr />---------------------<br />
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.or<wbr />g</a><br />
To subscribe, unsubscribe, or to change your mail settings:<br />
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mail<wbr />man/listinfo/plug-discuss</a><br />
<br />
</span></blockquote>
<br />
<br />
<br />
<br />
</blockquote>
<br />
-- <br /><span class="">
# <a href="https://www.LuftHans.com">https://www.LuftHans.com</a> <a href="https://www.PhxLinux.org">https://www.PhxLinux.org</a><br /></span>
# The Internet is the front line of the battle<br />
# to protect our freedom. -- Nathaniel Borenstein<br />------------------------------<wbr />---------------------<br />
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.<wbr />org</a><br />
To subscribe, unsubscribe, or to change your mail settings:<br />
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/<wbr />mailman/listinfo/plug-discuss</a><br /></blockquote></div><br /><br clear="all" /><div><br /></div>-- <br /><div>A mouse trap, placed on top of your alarm clock, will prevent you from rolling over and going back to sleep after you hit the snooze button.<br /><br />Stephen<br /><br /></div>
</div>
</div></div></div>