You are Here:
Linux Lite 6.6 FINAL Released - Support for 22 Languages Added - See Release Announcement Section



Meltdown & Spectre Information and Discussion

Author (Read 167747 times)

0 Members and 13 Guests are viewing this topic.

Re: Meltdown & Spectre Information and Discussion
« Reply #143 on: March 30, 2018, 05:33:29 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 188
    Posts
  • Reputation: 7
  • Linux Lite Member
    • View Profile

  • MEMORY: 4Gb

  • Kernel: 5.x
Hello Searchernow,

In your browsers do -
other images hosted on imgur display?
other png file type images ?

I'm not aware of what images might be hosted by imgur, either shown or blocked! What I did do just now was to try to open the imgur site, and both browsers block it, it is unsafe! Maybe there's the answer.

Not sure about other png images, how would I know?
SN.  I hope my reply has been useful - click Thank on the left.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #142 on: March 30, 2018, 07:59:58 AM »
 

bitsnpcs

  • Platinum Level Poster
  • **********
  • 3237
    Posts
  • Reputation: 305
    • View Profile
    • Try to Grow

  • Kernel: 4.x
Hello Searchernow,

In your browsers do -
other images hosted on imgur display?
other png file type images ?
 

Re: Meltdown & Spectre Information and Discussion
« Reply #141 on: March 30, 2018, 07:11:48 AM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 188
    Posts
  • Reputation: 7
  • Linux Lite Member
    • View Profile

  • MEMORY: 4Gb

  • Kernel: 5.x
Hi all,

thanks for your responses. I use FF (more strict blocking of tracking content etc.) and that's where I interact with this forum; and for others, e.g. non-https sites where I will not be logging in, I use Chromium (less strict blocking, though still blocks javascript by default).

I re-opened this page on Chromium, it said javascript was blocked, so I un-blocked for this page, but still no image. I allowed protected content, still no image.

All I can suggest is:
a) I have more secure browser environments which see reasons to block the content
or
b) I am missing something in the way I have things set up. Though I do normally use FF to read e.g. The Guardian and I'm used to blank spaces/content or ads blocked. That's the way I like it.

Another factor may be my use of plug-ins Privacy Badger, HTTPS Everywhere, and Disconnect.

Anyway, I am assuming Jerry's posted image is not vital for me, I can live without it. I'm curious of course!
SN.  I hope my reply has been useful - click Thank on the left.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #140 on: March 29, 2018, 06:22:33 PM »
 

bitsnpcs

  • Platinum Level Poster
  • **********
  • 3237
    Posts
  • Reputation: 305
    • View Profile
    • Try to Grow

  • Kernel: 4.x
Loading quickly for me on Firefox and Opera browsers.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #139 on: March 29, 2018, 06:17:08 PM »
 

Jocklad

  • Banned
  • Gold Level Poster
  • *******
  • 508
    Posts
  • Reputation: 67
  • Linux Lite Member
    • View Profile

  • MEMORY: 8Gb
Loading ok on Chrome
 

Re: Meltdown & Spectre Information and Discussion
« Reply #138 on: March 29, 2018, 06:01:38 PM »
 

firenice03

  • Rockin' the FREE World
  • Global Moderator
  • Platinum Level Poster
  • *****
  • 1848
    Posts
  • Reputation: 284
  • Linux Lite Member
    • View Profile

  • CPU: AMD E2//Atom X5//AMD Phenom II X2

  • MEMORY: 4Gb

  • VIDEO CARD: AMD Mullin Radeon R2//Intel//AMD/ATI RS880

  • Kernel: 5.x
Hi Jerry,
for me your post is blank. Maybe my firefox settings are detecting something considered insecure and blocking it.

It's an image, I can see... maybe slow loading or FF??



LL4.8 UEFI 64 bit ASUS E402W - AMD E2 (Quad) 1.5Ghz  - 4GB - AMD Mullins Radeon R2
LL5.8 UEFI 64 bit Test UEFI Kangaroo (Mobile Desktop) - Atom X5-Z8500 1.44Ghz - 2GB - Intel HD Graphics
LL4.8 64 bit HP 6005- AMD Phenom II X2 - 8GB - AMD/ATI RS880 (HD4200)
LL3.8 32 bit Dell Inspiron Mini - Atom N270 1.6Ghz - 1GB - Intel Mobile 945GSE Express  -- Shelved
BACK LL5.8 64 bit Dell Optiplex 160 (Thin) - Atom 230 1.6Ghz - 4GB-SiS 771/671 PCIE VGA - Print Server
Running Linux Lite since LL2.2
 

Re: Meltdown & Spectre Information and Discussion
« Reply #137 on: March 29, 2018, 05:46:02 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 188
    Posts
  • Reputation: 7
  • Linux Lite Member
    • View Profile

  • MEMORY: 4Gb

  • Kernel: 5.x
Hi Jerry,
for me your post is blank. Maybe my firefox settings are detecting something considered insecure and blocking it.
SN.  I hope my reply has been useful - click Thank on the left.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #136 on: March 28, 2018, 10:39:54 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 8775
    Posts
  • Reputation: 801
  • Linux Lite Member
    • View Profile
    • Linux Lite OS

  • CPU: Intel Core i9-10850K CPU @ 3.60GHz

  • MEMORY: 32Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 5.x
 

Re: Meltdown & Spectre Information and Discussion
« Reply #135 on: March 28, 2018, 12:33:08 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 188
    Posts
  • Reputation: 7
  • Linux Lite Member
    • View Profile

  • MEMORY: 4Gb

  • Kernel: 5.x
Trinidad - thanks for keeping us up-to-date!!  Much appreciated.
SN.  I hope my reply has been useful - click Thank on the left.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #134 on: March 27, 2018, 01:22:59 PM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1461
    Posts
  • Reputation: 212
  • Linux Lite Member
    • View Profile
    • dbts-analytics.com

  • CPU: i7 4 cores 8 threads

  • MEMORY: 16Gb

  • VIDEO CARD: Intel HD graphics

  • Kernel: 5.x
News

1) Well Intel has made stable microcode available now as far back as Sandy Bridge, however OEM's Dell and HP are still lagging behind in the implementations. Microsoft continues to be ahead of the curve on the whole issue though the latest updations have install issues as well due to the lagging OEM implementations. I have succeeded with a couple of W10 Dell Sandy Bridge boxes but it cannot be done without resorting to the CLI so everyday users are unlikely to install the mc mitigations.

2) New security studies from AMD are dismal for some of their CPU's. See the link below.

https://www.amdflaws.com/

3) Being a regular Debian user I am a bit spoiled when it comes to updates. Debian stable is slow and methodical about such things. But I also use both Ubuntu and LL where update schedules are far denser and hectic. I have to remind myself that so many of the current issues are linked to S/M and Intel. Ubuntu has been on top of the issues since they began and the devs have worked very hard to deal with the changes for their users. Updation was not always so intense with Linux in general, but it is good to remember that Linux is a community and as such more in touch with its own reality in more diverse ways than any corporate entity could ever hope to be. It is discouraging what corporate OEMs have done to everyday people, but it is wonderful to watch the Linux community respond.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #133 on: March 15, 2018, 09:02:52 AM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1461
    Posts
  • Reputation: 212
  • Linux Lite Member
    • View Profile
    • dbts-analytics.com

  • CPU: i7 4 cores 8 threads

  • MEMORY: 16Gb

  • VIDEO CARD: Intel HD graphics

  • Kernel: 5.x
The link below is one of the better explanations of the retpoline mitigation.

https://support.google.com/faqs/answer/7625886

This link is the "claimed" status of Intel's micocode updation which should be taken sceptically not optimistically.

https://newsroom.intel.com/wp-content/uploads/sites/11/2018/03/microcode-update-guidance.pdf

This is from my 5year old AMD A8 HP.

https://imgur.com/a/bWhLr

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #132 on: March 10, 2018, 05:13:17 AM »
 

newtusmaximus

  • Gold Level Poster
  • *******
  • 682
    Posts
  • Reputation: 67
  • Paypal Supporter.
    • View Profile

  • CPU: Intel Core duo 6300 1.86GHz

  • MEMORY: 4Gb

  • VIDEO CARD: Intel 82Q963/Q965

  • Kernel: 5.x
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown/TechFAQ

I doubt microcode updation will ever appear for anything older than Skylake, and though Intel is already facing over 30 litigations I expect class actions to branch out to include OEMs Dell, HP, Lenovo, and Asus. We've only just begun in Linux with retpoline and it's going to be an application by application case instance without microdode updation for older CPUs. Worse off MS is riddled with potential sleeper applications and the Spring update is probably going to kill off hordes of current Windows 10 users on machines older than Skylake who will find themselves unable to connect to their financial institutions.

TC

So what are we saying here please?  Are we saying, even with the patches from the recent Kernel update for LL, because of thepre skylake CPUs, our  older machines are still vulnerable  even when J's  test reports no vulnerabily.

I.e ALL older hardware is now "junk" if used "online".

Can not the anti virus / malware boys evolve their products to screen for "code" that  would exploit these vulnerabilities.?

Very confused as to what all this will mean for the average user.  Does it mean online shopping/ banking etc is potentially now a nono!! ??
2006 - HP DC7700p ultraslim Desktop Intel 6300 cpu  4GB Ram LL3.8 64bit.
2007 - Fujitsu Siemens V3405 Laptop  2 GB Ram LL3.6 32bit. Now 32bit Debian 9 + nonfree.
2006 - Fujitsu Siemens Si1520 Laptop Intel T720 cpu 3GB Ram   LL5.6 64 Bit
2014 - Fujitsu Siemens Lifebook E754 Intel i7 4712MQ 16GB Ram LL6.6
2003 - RETIRED Toshiba Satellite Pro A10 1 GB RAM LL2.8 32bit
 

Re: Meltdown & Spectre Information and Discussion
« Reply #131 on: March 09, 2018, 06:38:54 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 188
    Posts
  • Reputation: 7
  • Linux Lite Member
    • View Profile

  • MEMORY: 4Gb

  • Kernel: 5.x
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown/TechFAQ

I doubt microcode updation will ever appear for anything older than Skylake, and though Intel is already facing over 30 litigations I expect class actions to branch out to include OEMs Dell, HP, Lenovo, and Asus. We've only just begun in Linux with retpoline and it's going to be an application by application case instance without microdode updation for older CPUs. Worse off MS is riddled with potential sleeper applications and the Spring update is probably going to kill off hordes of current Windows 10 users on machines older than Skylake who will find themselves unable to connect to their financial institutions.

TC


Thanks for all this info, some of which I think (!) I understand, a bit.

I'm using 2 laptops. My i5 CPUs are pre-Skylake ... not sure about the meaning of microcode issues, but I think you're saying it may become a serious problem for those on pre-Skylake cpu computers. Soon?

I use an i5 laptop (1) (single partition) windows 7 ( to run windows-based cad) and so far this year I've not had to go online with it and I don't intend to.

But it does get some files transferred to it (on SD cards or usb) from my i5 linux Lite laptop (2) (dual-boot) which I use online - Firefix & Chromium. I'm not sure if a Windows bug can get onto LL (2) then over to the other laptop (1) running win7?

Longer term - should I be putting money in a piggy-bank for a new computer? Or could I fit new CPU?
SN.  I hope my reply has been useful - click Thank on the left.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #130 on: March 03, 2018, 04:16:51 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 8775
    Posts
  • Reputation: 801
  • Linux Lite Member
    • View Profile
    • Linux Lite OS

  • CPU: Intel Core i9-10850K CPU @ 3.60GHz

  • MEMORY: 32Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 5.x
Debian have their own fork based on their own kernels. Not applicable to LL here which uses Ubuntu kernels. I'd like to keep this LL focused so newbies don't start posting questions about how they are confused. Cheers :)
« Last Edit: March 14, 2018, 11:26:01 PM by Jerry »
 

Re: Meltdown & Spectre Information and Discussion
« Reply #129 on: March 03, 2018, 07:21:47 AM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1461
    Posts
  • Reputation: 212
  • Linux Lite Member
    • View Profile
    • dbts-analytics.com

  • CPU: i7 4 cores 8 threads

  • MEMORY: 16Gb

  • VIDEO CARD: Intel HD graphics

  • Kernel: 5.x
The spectre-meltdown-checker received an update today on my Debian machines. I'm going to look now if LL or Ubuntu versions were updated.

Okay checked LL and Ubuntu. LL/Ubuntu version is v0.33 Debian version is v0.35. The only differences in the script I could find is how variant 1 mitigation detection is handled in Debian. Ubuntu uses the original Red Hat patch and Debian does not. v0.33 is okay for LL/Ubuntu even though v0.35 is newer.

TC
« Last Edit: March 03, 2018, 08:20:54 AM by trinidad »
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

 

-->
X Close Ad

Linux Lite 6.6 FINAL Released - Support for 22 Languages Added - See Release Announcement Section