You are Here:
2023 - The Year of the Linux Lite Desktop



Meltdown & Spectre Information and Discussion

Author (Read 115775 times)

0 Members and 2 Guests are viewing this topic.

Re: Meltdown & Spectre Information and Discussion
« Reply #98 on: January 23, 2018, 06:03:50 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 8612
    Posts
  • Reputation: 795
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 6.2 64bit

  • CPU: Intel Core i9-10850K CPU @ 3.60GHz

  • MEMORY: 32Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 5.x
Topics merged and title of this thread renamed.
Please keep all posts on this topic in this thread. Cheers :)
 

 

trinidad

  • Platinum Level Poster
  • **********
  • 1414
    Posts
  • Reputation: 211
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 6.2 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
@m654321 Below is the list of updated kernels for PClinuxOS and even though this a LL forum and I don't use PClinuxOS maybe just create a directory in your home directory to hold the shell script and run the commands in a root terminal without the sudo added in to the last.

http://www.pclinuxos.com/forum/index.php/topic,144844.msg1237197.html#msg1237197
We also need to ask these things all in the same thread and not spread this out all over the place.

TC

All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

 

m654321

  • Gold Level Poster
  • *******
  • 891
    Posts
  • Reputation: 86
  • Linux Lite Member, 'Advocate' & Donator

  • Linux Lite: 4.6 64bit

  • CPU: Intel Pentium [email protected] (2cores) on an Asus X71Q

  • MEMORY: 4Gb

  • VIDEO CARD: Intel GM45 Express Chipset

  • Kernel: 4.x
@Jerry
Many thanks - got it sorted, worked fine in LL3.6
I guess though, that the spectre-meltdown checker wont work in some other distros, where sudo is not a recognised command, e.g. PCLinuxOS.
64bit OS (32-bit on Samsung netbook) installed in Legacy mode on MBR-formatted SSDs (except pi which uses a micro SDHC card):
2017 - Raspberry pi 3B (4cores) ~ [email protected] - LibreElec, used for upgrading our Samsung TV (excellent for the task)  
2012 - Lenovo G580 2689 (2cores; 4threads] ~ [email protected] - LL3.8/Win8.1 dual-boot (LL working smoothly)
2011 - Samsung NP-N145 Plus (1core; 2threads) ~ Intel Atom [email protected] - LL 3.8 32-bit (64-bit too 'laggy')
2008 - Asus X71Q (2cores) ~ Intel [email protected] - LL4.6/Win8.1 dual-boot, LL works fine with kernel 4.15
2007 - Dell Latitude D630 (2cores) ~ Intel [email protected] - LL4.6, works well with kernel 4.4; 4.15 doesn't work
 

 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 8612
    Posts
  • Reputation: 795
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 6.2 64bit

  • CPU: Intel Core i9-10850K CPU @ 3.60GHz

  • MEMORY: 32Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 5.x
I'm sure like me, a few on the LL forum are stuck as to how to run the Spectre/Meltdown checker.

I went to https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated

then downloaded the script:

Code: [Select]
wget https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated.git
What do I do next ... ?


I don't know why you are using the wget command, that instruction isn't there. https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated shows the exact instructions under Instructions. Click on the green 'Clone or download' button, Download zip.
« Last Edit: January 23, 2018, 10:01:33 AM by Jerry »
 

 

m654321

  • Gold Level Poster
  • *******
  • 891
    Posts
  • Reputation: 86
  • Linux Lite Member, 'Advocate' & Donator

  • Linux Lite: 4.6 64bit

  • CPU: Intel Pentium [email protected] (2cores) on an Asus X71Q

  • MEMORY: 4Gb

  • VIDEO CARD: Intel GM45 Express Chipset

  • Kernel: 4.x
Extract the folder -> open it -> double click on sm-start.

I don't have a folder to extract from  :o
When I used the wget command  in post #2, an HTML file is downloaded, named Spectre-Meltdown-Checker-Automated.git ...

 :(
64bit OS (32-bit on Samsung netbook) installed in Legacy mode on MBR-formatted SSDs (except pi which uses a micro SDHC card):
2017 - Raspberry pi 3B (4cores) ~ [email protected] - LibreElec, used for upgrading our Samsung TV (excellent for the task)  
2012 - Lenovo G580 2689 (2cores; 4threads] ~ [email protected] - LL3.8/Win8.1 dual-boot (LL working smoothly)
2011 - Samsung NP-N145 Plus (1core; 2threads) ~ Intel Atom [email protected] - LL 3.8 32-bit (64-bit too 'laggy')
2008 - Asus X71Q (2cores) ~ Intel [email protected] - LL4.6/Win8.1 dual-boot, LL works fine with kernel 4.15
2007 - Dell Latitude D630 (2cores) ~ Intel [email protected] - LL4.6, works well with kernel 4.4; 4.15 doesn't work
 

 

UltraCookie

  • Forum Regular
  • ***
  • 159
    Posts
  • Reputation: 24
  • Linux Flavoured Chocolate Cookie

  • Linux Lite: 5.0 64bit

  • CPU: Intel i5-4210M Dual Core 2,60 GHz

  • MEMORY: 4Gb

  • VIDEO CARD: Intel HD 4600

  • Kernel: 5.x
Extract the folder -> open it -> double click on sm-start.
Linux Lite 5.0 on Lenovo Edge 540 <3
 

 

m654321

  • Gold Level Poster
  • *******
  • 891
    Posts
  • Reputation: 86
  • Linux Lite Member, 'Advocate' & Donator

  • Linux Lite: 4.6 64bit

  • CPU: Intel Pentium [email protected] (2cores) on an Asus X71Q

  • MEMORY: 4Gb

  • VIDEO CARD: Intel GM45 Express Chipset

  • Kernel: 4.x
I'm sure like me, a few on the LL forum are stuck as to how to run the Spectre/Meltdown checker.

I went to https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated

then downloaded the script:

Code: [Select]
wget https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated.git
What do I do next ... ?
64bit OS (32-bit on Samsung netbook) installed in Legacy mode on MBR-formatted SSDs (except pi which uses a micro SDHC card):
2017 - Raspberry pi 3B (4cores) ~ [email protected] - LibreElec, used for upgrading our Samsung TV (excellent for the task)  
2012 - Lenovo G580 2689 (2cores; 4threads] ~ [email protected] - LL3.8/Win8.1 dual-boot (LL working smoothly)
2011 - Samsung NP-N145 Plus (1core; 2threads) ~ Intel Atom [email protected] - LL 3.8 32-bit (64-bit too 'laggy')
2008 - Asus X71Q (2cores) ~ Intel [email protected] - LL4.6/Win8.1 dual-boot, LL works fine with kernel 4.15
2007 - Dell Latitude D630 (2cores) ~ Intel [email protected] - LL4.6, works well with kernel 4.4; 4.15 doesn't work
 

Re: Meltdown & Spectre Information and Discussion
« Reply #91 on: January 22, 2018, 05:24:19 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 188
    Posts
  • Reputation: 7
  • Linux Lite Member

  • Linux Lite: 4.6 64bit

  • MEMORY: 4Gb

  • Kernel: 5.x
I'm checking for updates twice a day.  Just now  4.4.0-112 #135.

I ran tool v.0.32 with same result as others above - variant 2 vulnerable.

on another mitigation -

My main browser is FF 57, and I have it blocking insecure sites (this setup from before the Intel catastrophe!) - but some of these sites I want to view (articles etc., but I don't send and login or other info - not intentionally!) and these I view on Chromium, also customized to be reasonably secure, but a bit more permisssive.

Anyway, for those who don't already know there is a trial mitigation tool from the Chromium project which seeks to isolate sites you are accessing from each other. This will hopefully close a route for a rogue page to infect other open pages.

details here   https://www.chromium.org/Home/chromium-security/site-isolation#TOC-1-Isolating-All-Sites

go to the tool here    chrome://flags/#enable-site-per-process   and scroll down to Strict Site Isolation and enable.  (do this in Chromium!).

SN.  I hope my reply has been useful - click Thank on the left.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #90 on: January 22, 2018, 04:50:58 PM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1414
    Posts
  • Reputation: 211
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 6.2 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
v2 Spectre vulnerabilities may never be fully identified or patched. These creatures evolve into thousand armed spiders,
Ubuntu has made a lot of progress no thanks to Intel or AMD though. Stick with your LL. The waters are much dirtier elsewhere.

https://usn.ubuntu.com/usn/xenial/

TC

All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #89 on: January 22, 2018, 02:37:23 PM »
 

Vera

  • PayPal Supporter
  • Forum Regular
  • *****
  • 140
    Posts
  • Reputation: 16
  • Enjoying Linux Lite.

  • Linux Lite: 3.4 64bit

  • CPU: Intel Quad Core 1.6GHz

  • MEMORY: 8Gb

  • VIDEO CARD: AMD Radeon
I updated my Toshiba laptop just now, rebooted and ran the checker. Got the same results as @Ottawagrant , so the #2 is not mitigated for me yet either. Haven't checked my main machine yet, just the Toshiba laptop.
Using Linux Lite for everything now. I put it on my desktop and my laptop. Woohoo!
 

Re: Meltdown & Spectre Information and Discussion
« Reply #88 on: January 22, 2018, 01:13:02 PM »
 

Ottawagrant

  • Forum Regular
  • ***
  • 182
    Posts
  • Reputation: 28
  • Linux Lite Member

  • Linux Lite: 4.2 64bit

  • CPU: Intel Duo Core 2 E8400 @ 3.00GHz

  • MEMORY: 12Gb

  • VIDEO CARD: Mesa DRI Intel Q45/Q43
Read last Friday that Ubuntu was releasing a new kernel today. They did. 4.4.0-112 #135. I wanted to test it on an Intel computer. So I used my HP compaq 7900 SFF. I'll test a few other computers but for the HP it still shows Variant #2 as vulnerable. Variant #1 & 3, not. Time to boot up another computer.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #87 on: January 20, 2018, 11:41:10 AM »
 

firenice03

  • Rockin' the FREE World
  • Global Moderator
  • Platinum Level Poster
  • *****
  • 1834
    Posts
  • Reputation: 281
  • Linux Lite Member

  • Linux Lite: 5.8 64bit

  • CPU: AMD E2//Atom X5//AMD Phenom II X2

  • MEMORY: 4Gb

  • VIDEO CARD: AMD Mullin Radeon R2//Intel//AMD/ATI RS880

  • Kernel: 5.x
The other day had a couple vulnerability updated aand for kicks tried again this morn... All Good :)
4.4.0-111 on the 32bit mini..


 



 
LL4.8 UEFI 64 bit ASUS E402W - AMD E2 (Quad) 1.5Ghz  - 4GB - AMD Mullins Radeon R2
LL5.8 UEFI 64 bit Test UEFI Kangaroo (Mobile Desktop) - Atom X5-Z8500 1.44Ghz - 2GB - Intel HD Graphics
LL4.8 64 bit HP 6005- AMD Phenom II X2 - 8GB - AMD/ATI RS880 (HD4200)
LL3.8 32 bit Dell Inspiron Mini - Atom N270 1.6Ghz - 1GB - Intel Mobile 945GSE Express  -- Shelved
BACK LL5.8 64 bit Dell Optiplex 160 (Thin) - Atom 230 1.6Ghz - 4GB-SiS 771/671 PCIE VGA - Print Server
Running Linux Lite since LL2.2
 

Re: Meltdown & Spectre Information and Discussion
« Reply #86 on: January 20, 2018, 11:20:08 AM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1414
    Posts
  • Reputation: 211
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 6.2 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
During this past week I have had two Sandy Bridge firmware updates go completely haywire, one massive slowdown, the other blue screen, then cook the board. (Intel has adjusted the firmware but with disclaimers) If you are on Windows 10 do not update the firmware on your Sandy Bridge CPU, and do not use the recommended MS patches for Meltdown if on Windows 7 or 8. There are charcteristics of this CPU that make the Intel update and MS patch together basically crippling in some cases. Several OEMs including DELL are highly unlikely to ever patch this CPU for the MS kernel. However If you dual boot Ubuntu with Windows 10, the KPTI adjustments in Ubuntu work fine, with little impact on performance, but there are several differences in the MS kernel functions in CPU space and some ugly MS and Intel tweaks to this CPU running Windows.

The officai MS response: "If you are using a pre-2016 Intel CPU with Windows 10, there is nothing much you can do except consider upgrading to a newer processor or, you could possibly just live with the performance impact of the Meltdown and Spectre patches."

Probably the ultimate cause of the slowdowns: "With Sandy Bridge, Intel has tied the speed of every bus (USB, SATA, PCI, PCI-E, CPU cores, Uncore, memory etc.) to a single internal clock generator issuing the basic 100 MHz Base Clock (BClk). With CPUs being multiplier locked, the only way to overclock is to increase the BClk, which can be raised by only 57% without other hardware components failing."

Another issue that is certain to become a security issue: "Sandy and Ivy Bridge processors with vPro capability have security features that can remotely disable a PC or erase information from hard drives. This can be useful in the case of a lost or stolen PC. The commands can be received through 3G signals, Ethernet, or Internet connections. AES encryption acceleration will be available, which can be useful for video conferencing and VoIP applications."

Leave your Windows 10 unpatched on Sandy Bridge, but go ahead and update your Ubuntu if you dual boot.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #85 on: January 20, 2018, 12:00:20 AM »
 

bfb

  • Banned
  • Occasional Poster
  • **
  • 93
    Posts
  • Reputation: 5
  • Linux Lite Member

  • Linux Lite: 3.4 64bit

  • CPU: i5

  • MEMORY: 8Gb

  • VIDEO CARD: Nvidia GeForce GTX 970
Thank you. I have done all that,  but I still get this.
I wonder if there is a problem with kernels from the Lite tweaks 'Instal kernel' option?

 

Re: Meltdown & Spectre Information and Discussion
« Reply #84 on: January 19, 2018, 04:52:51 PM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1414
    Posts
  • Reputation: 211
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 6.2 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
@bfb  Run -  sudo apt-get update first in the terminal, then exit and update normally via lite updates.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

 

-->
X Close Ad

2023 - The Year of the Linux Lite Desktop