You are Here:
Download Linux Lite 5.2 today - See Release Announcements



Meltdown & Spectre Information and Discussion

Author (Read 71217 times)

0 Members and 8 Guests are viewing this topic.

Re: Meltdown & Spectre Information and Discussion
« Reply #75 on: January 18, 2018, 12:02:30 PM »
 

Ottawagrant

  • Forum Regular
  • ***
  • 182
    Posts
  • Country: ca
  • Reputation: 28
  • Linux Lite Member

  • Linux Lite: 4.2 64bit

  • CPU: Intel Duo Core 2 E8400 @ 3.00GHz

  • MEMORY: 12Gb

  • VIDEO CARD: Mesa DRI Intel Q45/Q43

Acer Aspire One netbook D255E
Intel Atom n455 1.66GHz processor
Manufactured 02/2011
Linux Lite 3.6 32-bit
Fresh install on kernel 4.4.0-93 #116
Variant #1 - no
             #2 - yes
             #3 - yes


updated kernel to 4.4.0-111 #134

Variant #1 - no
             #2 - yes
             #3 - yes
A different article that I read seems to suggest that it is the Intel Atom 32-bit only that is OK. It's suggested that any chip that is x86_64 is vulnerable. I installed LL on the netbook with Windows 7 starter, so no loss there. But if anyone wants to try it on a netbook/laptop/desktop without installing LL, just boot into a live environment via USB, download Jerry's zip file, extract, & then double-click the 'sm-start'. No password required. It'll be an older kernel, but it'll give you an idea for your device.
 


Re: Meltdown & Spectre Information and Discussion
« Reply #76 on: January 18, 2018, 12:18:46 PM »
 

newtusmaximus

  • Gold Level Poster
  • *******
  • 666
    Posts
  • Country: gb
  • Reputation: 67
  • Paypal Supporter.

  • Linux Lite: 3.8 64bit

  • CPU: Intel Core duo 6300 1.86GHz

  • MEMORY: 4Gb

  • VIDEO CARD: Intel 82Q963/Q965

  • Kernel: 5.x
2006 - HP DC7700p ultraslim Desktop Intel 6300 cpu  4GB Ram LL3.8 64bit.
2007 - Fujitsu Siemens V3405 Laptop  2 GB Ram LL3.6 32bit. Now 32bit Debian 9 + nonfree.
2006 - Fujitsu Siemens Si1520 Laptop Intel T720 cpu 3GB Ram LL4.8 64bit  LL5.0 64 Bit
2003 - RETIRED Toshiba Satellite Pro A10 1 GB RAM LL2.8 32bit
 

Re: Meltdown & Spectre Information and Discussion
« Reply #77 on: January 18, 2018, 12:50:03 PM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1188
    Posts
  • Country: us
  • Reputation: 190
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 5.0 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
v1 Spectre is partially mitigated against timing attacks, by Firefox 57 and ESR

https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/

TC
Last Edit: January 18, 2018, 12:52:42 PM by trinidad
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #78 on: January 18, 2018, 03:07:40 PM »
 

Middleman.

  • New to Forums
  • *
  • 1
    Posts
  • Country: gb
  • Reputation: 0
  • Linux Lite Member

  • Linux Lite: 3.6 64bit

  • CPU: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz 2533.00MHz Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz 1199.00MHz Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz 1866.00MHz Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz 933.00MHz

  • MEMORY: 4Gb
hello im new to the party.
i have downloaded and installed the latest microcode from the lite repo.is this enough to mitigate.?
my browser is google chrome.

thank you.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #79 on: January 18, 2018, 07:06:53 PM »
 

Mart

  • Occasional Poster
  • **
  • 63
    Posts
  • Country: gb
  • Reputation: 14
  • Linux Lite Member

  • Linux Lite: 3.8 64bit

  • CPU: Celeron(R) Dual-Core CPU T3000 @ 1.80GHz

  • MEMORY: 3Gb

  • Kernel: 5.x
Thanks Jerry for the Automated Spectre/Meltdown Checker.

http://news.softpedia.com/news/linux-lite-developer-creates-automated-spectre-meltdown-checker-for-linux-oses-519431.shtml

Ran the script and my results were the same.

"Spectre Variant 1"  Status: Not Vulnerable

"Spectre Variant 2"  Status: Vulnerable

"Meltdown aka Variant 3"  Status: Not Vulnerable

(Results with latest Intel microcode update and updated Linux kernel 4.4.0-111)

In respect to "Spectre Variant 2"  the following article - Ubuntu Preparing Kernel Updates With IBRS/IBPB For Spectre Mitigation - may be reassuring.

https://www.phoronix.com/scan.php?page=news_item&px=Ubuntu-Preps-Spectre-Kernels
Last Edit: January 18, 2018, 08:16:08 PM by Jerry
Still running 3.8 and lovin' it  (running 5.0 as a triple boot)
 

 

Mart

  • Occasional Poster
  • **
  • 63
    Posts
  • Country: gb
  • Reputation: 14
  • Linux Lite Member

  • Linux Lite: 3.8 64bit

  • CPU: Celeron(R) Dual-Core CPU T3000 @ 1.80GHz

  • MEMORY: 3Gb

  • Kernel: 5.x
Thanks Jerry for the Automated Spectre/Meltdown Checker.

http://news.softpedia.com/news/linux-lite-developer-creates-automated-spectre-meltdown-checker-for-linux-oses-519431.shtml

Ran the script and my results were the same.

"Spectre Variant 1"  Status: Not Vulnerable

"Spectre Variant 2"  Status: Vulnerable

"Meltdown aka Variant 3"  Status: Not Vulnerable

(Results with latest Intel microcode update and updated Linux kernel 4.4.0-111)

In respect to "Spectre Variant 2"  the following article - Ubuntu Preparing Kernel Updates With IBRS/IBPB For Spectre Mitigation - may be reassuring.

https://www.phoronix.com/scan.php?page=news_item&px=Ubuntu-Preps-Spectre-Kernels
Still running 3.8 and lovin' it  (running 5.0 as a triple boot)
 

Re: Meltdown & Spectre Information and Discussion
« Reply #81 on: January 19, 2018, 04:20:12 AM »
 

bfb

  • Banned
  • Occasional Poster
  • **
  • 93
    Posts
  • Country: 00
  • Reputation: 5
  • Linux Lite Member

  • Linux Lite: 3.4 64bit

  • CPU: i5

  • MEMORY: 8Gb

  • VIDEO CARD: Nvidia GeForce GTX 970
Remove kernel 4.10 and then update kernel 4.4. You must be running on 4.4 to delete 4.10. If you are running 4.4 now try updating. I think LL will only update the running kernel, though not sure. In any case 4.4 in LL will update to -111.

TC
I took your advice, for which I am grateful, but the 4.4 from the Lite Tweaks  doesn't update to -111 for some reason.
1)Does this mean that all the kernels from there are vulnerable? Remember I had 4.10 running before and that was vulnerable 2)how can I install the -111 version if 4.4 doesn't update to it automatically?
 

 

Ottawagrant

  • Forum Regular
  • ***
  • 182
    Posts
  • Country: ca
  • Reputation: 28
  • Linux Lite Member

  • Linux Lite: 4.2 64bit

  • CPU: Intel Duo Core 2 E8400 @ 3.00GHz

  • MEMORY: 12Gb

  • VIDEO CARD: Mesa DRI Intel Q45/Q43
Does anyone read this article the same way I do. (and it doesn't surprise me if I'm wrong) That the kernel update coming on Monday the 22nd is for computers with Intel processors only. Nothing done with AMD at this time.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #83 on: January 19, 2018, 04:52:51 PM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1188
    Posts
  • Country: us
  • Reputation: 190
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 5.0 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
@bfb  Run -  sudo apt-get update first in the terminal, then exit and update normally via lite updates.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #84 on: January 20, 2018, 12:00:20 AM »
 

bfb

  • Banned
  • Occasional Poster
  • **
  • 93
    Posts
  • Country: 00
  • Reputation: 5
  • Linux Lite Member

  • Linux Lite: 3.4 64bit

  • CPU: i5

  • MEMORY: 8Gb

  • VIDEO CARD: Nvidia GeForce GTX 970
Thank you. I have done all that,  but I still get this.
I wonder if there is a problem with kernels from the Lite tweaks 'Instal kernel' option?

 

Re: Meltdown & Spectre Information and Discussion
« Reply #85 on: January 20, 2018, 11:20:08 AM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1188
    Posts
  • Country: us
  • Reputation: 190
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 5.0 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
During this past week I have had two Sandy Bridge firmware updates go completely haywire, one massive slowdown, the other blue screen, then cook the board. (Intel has adjusted the firmware but with disclaimers) If you are on Windows 10 do not update the firmware on your Sandy Bridge CPU, and do not use the recommended MS patches for Meltdown if on Windows 7 or 8. There are charcteristics of this CPU that make the Intel update and MS patch together basically crippling in some cases. Several OEMs including DELL are highly unlikely to ever patch this CPU for the MS kernel. However If you dual boot Ubuntu with Windows 10, the KPTI adjustments in Ubuntu work fine, with little impact on performance, but there are several differences in the MS kernel functions in CPU space and some ugly MS and Intel tweaks to this CPU running Windows.

The officai MS response: "If you are using a pre-2016 Intel CPU with Windows 10, there is nothing much you can do except consider upgrading to a newer processor or, you could possibly just live with the performance impact of the Meltdown and Spectre patches."

Probably the ultimate cause of the slowdowns: "With Sandy Bridge, Intel has tied the speed of every bus (USB, SATA, PCI, PCI-E, CPU cores, Uncore, memory etc.) to a single internal clock generator issuing the basic 100 MHz Base Clock (BClk). With CPUs being multiplier locked, the only way to overclock is to increase the BClk, which can be raised by only 57% without other hardware components failing."

Another issue that is certain to become a security issue: "Sandy and Ivy Bridge processors with vPro capability have security features that can remotely disable a PC or erase information from hard drives. This can be useful in the case of a lost or stolen PC. The commands can be received through 3G signals, Ethernet, or Internet connections. AES encryption acceleration will be available, which can be useful for video conferencing and VoIP applications."

Leave your Windows 10 unpatched on Sandy Bridge, but go ahead and update your Ubuntu if you dual boot.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #86 on: January 20, 2018, 11:41:10 AM »
 

firenice03

  • Rockin' the FREE World
  • Global Moderator
  • Platinum Level Poster
  • *****
  • 1462
    Posts
  • Country: us
  • Reputation: 258
  • Linux Lite Member

  • Linux Lite: 4.8 64bit

  • CPU: AMD E2//Atom X5//AMD Phenom II X2

  • MEMORY: 4Gb

  • VIDEO CARD: AMD Mullin Radeon R2//Intel//AMD/ATI RS880

  • Kernel: 5.x
The other day had a couple vulnerability updated aand for kicks tried again this morn... All Good :)
4.4.0-111 on the 32bit mini..


 



 
LL 4.8 UEFI 64 bit ASUS E402W - AMD E2 (Quad) 1.5Ghz  - 4GB - AMD Mullins Radeon R2
LL 4.8 UEFI 64 bit Test UEFI Kangaroo (Mobile Desktop) - Atom X5-Z8500 1.44Ghz - 2GB - Intel HD Graphics
LL 4.6 64 bit HP 6005- AMD Phenom II X2 - 8GB - AMD/ATI RS880 (HD4200)
LL 3.8 32 bit Dell Inspiron Mini - Atom N270 1.6Ghz - 1GB - Intel Mobile 945GSE Express
RETIRED LL 2.8 64 bit Dell Optiplex 160 (Thin) - Atom 230 1.6Ghz - 4GB-SiS 771/671 PCIE VGA
Running Linux Lite since LL2.2
 

Re: Meltdown & Spectre Information and Discussion
« Reply #87 on: January 22, 2018, 01:13:02 PM »
 

Ottawagrant

  • Forum Regular
  • ***
  • 182
    Posts
  • Country: ca
  • Reputation: 28
  • Linux Lite Member

  • Linux Lite: 4.2 64bit

  • CPU: Intel Duo Core 2 E8400 @ 3.00GHz

  • MEMORY: 12Gb

  • VIDEO CARD: Mesa DRI Intel Q45/Q43
Read last Friday that Ubuntu was releasing a new kernel today. They did. 4.4.0-112 #135. I wanted to test it on an Intel computer. So I used my HP compaq 7900 SFF. I'll test a few other computers but for the HP it still shows Variant #2 as vulnerable. Variant #1 & 3, not. Time to boot up another computer.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #88 on: January 22, 2018, 02:37:23 PM »
 

Vera

  • PayPal Supporter
  • Forum Regular
  • *****
  • 140
    Posts
  • Country: 00
  • Reputation: 16
  • Enjoying Linux Lite.

  • Linux Lite: 3.4 64bit

  • CPU: Intel Quad Core 1.6GHz

  • MEMORY: 8Gb

  • VIDEO CARD: AMD Radeon
I updated my Toshiba laptop just now, rebooted and ran the checker. Got the same results as @Ottawagrant , so the #2 is not mitigated for me yet either. Haven't checked my main machine yet, just the Toshiba laptop.
Using Linux Lite for everything now. I put it on my desktop and my laptop. Woohoo!
 

Re: Meltdown & Spectre Information and Discussion
« Reply #89 on: January 22, 2018, 04:50:58 PM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1188
    Posts
  • Country: us
  • Reputation: 190
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 5.0 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
v2 Spectre vulnerabilities may never be fully identified or patched. These creatures evolve into thousand armed spiders,
Ubuntu has made a lot of progress no thanks to Intel or AMD though. Stick with your LL. The waters are much dirtier elsewhere.

https://usn.ubuntu.com/usn/xenial/

TC

All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 


 


Download Linux Lite 5.2 today - See Release Announcements