Everything is Fire

>Intel spectre bug
>AMD spectre bug

>INTEL MELTDOWN CPU BUG

ALL CPUS ARE IRREVOKABLY FUCKED
CPU is vulnerable like an open door on all intels made in the last decade and a half.
AMD also suffers an obscure but patchable bug that can do the same but with great difficulty and little-no performance impact on the fix.
The intel "meltdown" fix KILLS performance.

Linux mainline is already patching the shit outta this bug. Compiling it now.
Initial performance figures tell that I/O on shit like NVMe has it's arms cut off at a near 50% performance reduction.
Microsoft is going to push an update that will kill performance on nvidia GPUs as they utilize syscalls that are heavily influenced by the patches applied to the NT kernel.

>>>Vidya may be heavily affected.

If you choose not to patch then you can allow STUPID SHIT like inline assembly in web python or javascript to execute arbitrary code on your machine.
>Interact with the internet and get fucked faster than you can sneeze.

Shit is burning. Shit is burning. Shit is burning.

Other urls found in this thread:

twitter.com/misc0110/status/948706387491786752
bbc.co.uk/news/technology-42561169
twitter.com/nicoleperlroth/status/948678006859591682
computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/
translate.googleusercontent.com/translate_c?depth=1&hl=en&prev=search&rurl=translate.google.ca&sl=de&sp=nmt4&u=https://www.computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/&usg=ALkJrhiebgvDfjdFH--y63mL9OMMolwFdA
twitter.com/SFWRedditVideos

yeah I'm not reading that, fuck off to Sup Forums

Last night all audio on my computer was playing at 2% higher pitch that normal. Today it seems fine. Am I doomed?

>Last week Hiro added malicious ads to Sup Forums

tl;dr

Run intel?
You get a performance hit!
Pay 1/3 of your FPS, do not pass go.

Run nvidia with intel?
Sorry sweetie, we're cutting off 2/3 now.

>buying meme-tel
You actually spent more money just for a name, how does that feel?

>tfw my pirated win 10 can't even run updates
ohohoho

>right when I bought a new PC
>has an NVME SSD
KILL ME.

Dual E5-2680s were cheap.

It's bad on linux.
Just warning you guys that it's gonna be worse on windows, given how poor NT kernel drivers already perform.

Patching is not optional.

Enjoy having some javascript malware exploit this on your machine.
You are basically fucked if you do and fucked if you don't just in different ways.

sorry, im not computer illiterate
i know about everything on my pc

Can we stop making these threads now? It's already been tested with games and there is no effect at all.

does this mean I have to upgrade to windows 10 now

Uh, what happened?

>people use AMD
Why?
On every forum i read about problems like "wtf this game is so shit it cant even run properly" and they always end up having AMD shit

Doesn't stop malicious javascript running unless you have it fully disabled. Then good luck browsing most websites nowadays.
We already have even seen hiro add some shady javascript to Sup Forums only just recently as an example of a potential avenue of exploit.

This is linux performance on an AMD GPU.

We have No Idea what the NT kernel will look like.
Nvidia looks grim. Really fucking bad.


twitter.com/misc0110/status/948706387491786752

This is what it can do.
If this shit runs in one tab of your web browser it can do T H I S.
IN
REAL
TIME

Everything on this board always turns out to be nothing. This is nothing. You just want some excitement in your life. Play a game instead.

Amd poorfags need to fuck off back to Sup Forums nobody runs Linux apart from Sup Forums anyways

Fake News

These are possibly the biggest two hardware bugs in all of human history.

Hunker down, have some fun, but keep one eye on the news.

Don't forget ARM and Android devices. Don't know about iPhone

Does this means that potential viruses could be 10x worse? Or is this only webfacing things that we can block with noscript

>he thinks this is linux exclusive
You might want to take another look at the problem. This is a hardware level issue that runs across all platforms.

No I'm not going to waste my time on a non existent problem that Sup Forums and AMD pajeet shills are spewing

>nothing
It isn't the biggest thing ever but these are some critical vulnerabilities. Even the mainstream media has caught onto it now
bbc.co.uk/news/technology-42561169

Yeah, it will piss off companies like Amazon, and annoy system admins across the country that will need to do the updating, but It isn't going to slow down your games.

Remember Wanna Cry exploit that NSA niggers leaked and was used by amateurs? I bet that NSA/CIA already has one for this bug and simply chose to keep it to themselves.

Everything suffers from spectre.
It's almost impossible to use.

Only intel from about 1995 suffers from meltdown, the biggun, but that's basically every gaming machine ever and quite relevant here.

It can touch your system through any means of execution and can do anything once it's in.
I suggest noscripting up and avoiding as much of the web as you can stomach until you're patched.

The vidya itself is fine though.

>finally hit 1k crypto gains
>this happens
>all my passwords are on my PC
Come the fuck on

Welp, time to buy another 1080ti and put it in SLI.
That way I at least won't see a performance drop.

>Only intel from about 1995 suffers from meltdown, the biggun, but that's basically every gaming machine ever and quite relevant here.
Intel was pretty smart (and shady) to lump all 3 of the vulnerabilities disclosed into one press release so they could say all CPUs are affected. Now a lot of the press and people repeating it believe they are all equally affected and all will have the same consequences.

Not to mention the CEO dumped his stock in novmeber...
This is really filthy.

They've done enough damage control I think they'll actually survive.

See the Twitter thread here: twitter.com/nicoleperlroth/status/948678006859591682

Seems there are two issues. One, called Meltdown, only effects Intel and is bad, but the kernel page table changes everyone is making fixes it.

The other, dubbed Spectre, is apparently common to the way all processors handle speculative execution and is unfixable without new hardware.

Whoever discovered this stuff on Google’s team deserves some sort of computer security Nobel prize.

You guys do know that Hiroshimoot WILL be the first to jump on the opportunity to sell this exploit to any party willing to pay him enough to let them have personal access to every. single. computer. ever. that connects to this place, right? You're not safe here, except this time its for real.

Google probably found that out by trying new ways to spy on us, they probably already infected all of us.

Reposting some of Sup Forums's meltdown concerns.

>This is not "mostly a risk for virtual machining"

>this is I am going to write all 0s to your fucking BIOS while your shit is running and brick your motherboard because I can do anything I fucking want trivially at a level of access ABOVE ROOT

>DO YOU FUCKING UNDERSTAND

both exploits are reads not writes you dingus

It allows for execution of sideloads under this high privilege.
You can do anything you want.

REMEMBER THAT TIME WHEN WIFI PROTOCOL WAS BREACHED AND THE WORLD WAS GOING TO END? ...

no, it doesn't
it just allows READING of arbitrary memory on the host machine
read the actual articles linked in that Sup Forums thread, they have all you need to actually understand the vulns

>Comparing a software problem that get fixed with a patch to a hardware problem that must be fixed with new hardware
I know it's not Sup Forums but come on

>Believing Intel telling you that all of the CPUs are fucked

lmao

My windows 7 runs like shit now, like slow mo.

>it just allows READING of arbitrary memory on the host machine
Think one step further and you'll realize that if you can read anything in memory on a target machine, then you can do anything you want with that machine for any modern system.

>YOUR COMPUTER IS GOING TO EXPLODE AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>in reality you'll probably see like a 3% decrease in performance at worst. Performance you didn't even use because 99.9% of game bottlenecks are GPU based.

Why does Sup Forums even care? They don't play games or anything.

Remember that NSA exploit that got used not long after it leaked and brought down critical services and cost businesses billions of dollars because they were slow to update? Ignoring critical security exploits would be stupid.

So exploding vans are now possible?

>my CPU is idling at 90°C this morning

>Performance you didn't even use because 99.9% of game bottlenecks are GPU based.
Literally the opposite for me, but go ahead, lie to my face.

I have ryzen and nivida will this be problem?

>toaster garbageman with Intel Integrated shit

You don't count as a gamer. Don't even really qualify as a human, really.

It doesn't honestly effect gaming very much, it will be bad for virtualization and database shit, end users won't be very badly effected, all the "50% reduction in performance" metrics are coming from testing with databases.

Stop freaking out.

LMAO GUESS WHAT? I DON'T FUCKING CARE BECAUSE I DON'T HAVE A SERVER, I HAVE A GAYMEN PC AND THAT'S ALL I AND MOST OF THE NORMAL PEOPLE CARE ABOUT.

that wasnt even that fucking long. Fuck underaged.

>AMD fags prematurely shitting their pants with you, as usual
>Corporations will just go "Oh the servers got slower? Buy more identical ones" and Intel will sell a shitload

What a hit

I used to have an AthlonX4 with 3.8 GHz from like fucking 15 years ago, while I used a 1070 GTX. I upgraded it shortly afterwards to a Ryzen and know what happened? My performance only got 2-3 fps better.
The idea of the CPU or mainboard being IO bottlenecks was only true before 1999, when it took like 2 minutes to copy 1.44 mb from a floppy disc or when hardware accelerating GPU's werent a thing yet.

Nah, you cna download the insider preview of windows 10 with the patch right now, 0% performance change on anything

Don't fall for FUD, especially don't fall for AMD propaganda.

>Nvidia looks grim
fuck off

>but keep one eye on the news.

Ok user. Once I see this on the 6 o'clock news I'll know you were right

Source of this charts?

>Have to upgrade to FF shitty quantum
fuck
>not even a pc gamer but every pc and tech i have is fucked since 1993
Fuck

>hiroshima is implementing malware into the sit that i cant leave
FUCK

>Ass naked without the patch that will fuck everything over.
AAAAAAAAAAAAAAAA

So if either way I'm fucked. What am I supposed to do?

AMD is trying to take advantage of media misreporting, that's really it. The fucking Spectre exploit was literally first proven on a Ryzen and it is a more serious exploit than Meltdown in the first place, but the media is only reporting Meltdown for whatever reason.

As much as I think Intel are Jews (I mean I'm using an AMD CPU right now) they are not helping anything by lying to the public about being exempt from the coverage of this exploit, it is dangerous if anything.

computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/

english translated link:
translate.googleusercontent.com/translate_c?depth=1&hl=en&prev=search&rurl=translate.google.ca&sl=de&sp=nmt4&u=https://www.computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/&usg=ALkJrhiebgvDfjdFH--y63mL9OMMolwFdA

Chop your PC up with an axe and go live in the woods

>pass the control bro.png

>and it is a more serious exploit
>way the fuck harder to even execute compared to meltdown
nice scotsman

DirectX

>1 game

>It's harder to do
>that mean it's less destructive!

Exploding vans are unlikely, but almost invisible malware scraping all your login details is very possible and more notably virtual machines on the same host will be able to fuck with each other, which is all kinds of extremely fucking bad.

this exploit in no way allows for WRITING or EXECUTION of any sort. it allows for READING of information, jesus fucking christ people.
>goal post

specter bug is fixable by software, nothing to worry about.

Nice

Meltdown allows full access to Level 0.

compared to asshole wide meltdown that affects all Intel chips in the past 20 years, yeah

Its not that serious, you would have to have system access to use the exploit.

Its just a bunch of technological illiterate retards from Sup Forums and linux boards trying to justify their jobs by hyping something that happens all the time, exploits are found and patched routinely.

The patch to the theoretical exploit was already written and finished months ago.

No. It is not fixable not even by HW.

>this kills the AMD pajeet

just think, all those idiots who bought a Ryzen and wasted their money got themselves so excited for a day.

It's almost adorably pathetic.

thank you for letting everyone know you know absolutely nothing about what you are talking about and are just citing retarded Sup Forums and Sup Forums posters!
this.

Fucking AMD shills working overtime.

Fix only affects high syscall operations.

OSX was already patched months ago, Sup Forums runs on Macs, noticed any difference? Yeah, thought not.

It's far more difficult to mitigate than simply removing a feature like with Meltdown, it is more serious in that regard. Meltdown is officially impossible to execute after these patches are applied, Spectre is far more complicated with regards to mitigation and nobody really knows exactly how to prevent it yet, it is going to cause more harm than Meltdown ever could because it is not so trivial to solve.

>you need system access and you need to be able to run malicious code to do this theoretical exploit

This is what you idiots are getting worked up over? Jesus christ you're literally worse than boomers trying to use a computer.

What the fuck is going on

I'm scared

>Have to upgrade to FF shitty quantum
That was the breaking point for me to switch to Waterfox, and it's been a great experience so far other than an odd thing where a couple sites can't be reached due to apparently using an older form of data transfer that WF doesn't support due to security. Plus having tabs on bottom is a fucking BUILT IN OPTION, YOU HEAR THAT MOZILLA? STOP FUCKING WITH THAT SHIT.

Seriously, check out that shit or Pale Moon, heard good things about that as well.

Spectre is architectural and you're not getting the "way the fuck harder to execute"
you have to change everyones shit then

thanks bro, i'll check it out.

The fear is over cloud computing, this is pretty much the worst thing that could possibly happen to a cloud service, nothing is guaranteed to be totally sandboxed anymore.

If you didn't fall for the cloud meme, the only impact this will have is the performance penalties of the patch.

Intel's CPUs manufacture for the past 9 yrs have a massive security flaw in the them whose fix is gonna tank at least 1/5th of their performance.

t. Schlomo.
30 fucking percent

God damn that looks good.

> fix is gonna tank at least 1/5th of their performance.
no it isn't, you are retarded.

A question to the computer litterate crow, could this architecture flaw be exploited in a ring 0 exploit, and if so, are the exploits undetectable by antiviruses?

Has Microsoft already patched this for Windows 7?

if hackers had system access to your cloud you have way worse things to worry about than them being able to read two lines from your kernel lmao

the only thing that has been confirmed about this is that people had to bring their shit down to patch

>a ring 0 exploit
AFAIK the exploit allows ring 3 code to read ring 0 memory, and that might include passwords.
>antivirus
Antiviruses are a meme.

yup, that's the main issue

my pc is a pre-built that i bought at the end of 2009, am i fucked?

no, end users will not notice a thing.

Nothing is happening, benchmarks are normal as usual and if you are a sysadmin just uodate your shit. END