You are Here:
Linux Lite 4.6 Final has been released. See the Release Announcements section for more information.



Meltdown & Spectre Information and Discussion

Author (Read 40069 times)

0 Members and 5 Guests are viewing this topic.

Re: Meltdown & Spectre Information and Discussion
« Reply #90 on: January 22, 2018, 05:24:19 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 170
    Posts
  • Country: 00
  • Reputation: 7
  • Linux Lite Member

  • Linux Lite: 4.4 64bit

  • MEMORY: 4Gb
I'm checking for updates twice a day.  Just now  4.4.0-112 #135.

I ran tool v.0.32 with same result as others above - variant 2 vulnerable.

on another mitigation -

My main browser is FF 57, and I have it blocking insecure sites (this setup from before the Intel catastrophe!) - but some of these sites I want to view (articles etc., but I don't send and login or other info - not intentionally!) and these I view on Chromium, also customized to be reasonably secure, but a bit more permisssive.

Anyway, for those who don't already know there is a trial mitigation tool from the Chromium project which seeks to isolate sites you are accessing from each other. This will hopefully close a route for a rogue page to infect other open pages.

details here   https://www.chromium.org/Home/chromium-security/site-isolation#TOC-1-Isolating-All-Sites

go to the tool here    chrome://flags/#enable-site-per-process   and scroll down to Strict Site Isolation and enable.  (do this in Chromium!).

SN.
 


 

m654321

  • Gold Level Poster
  • *******
  • 857
    Posts
  • Country: gb
  • Reputation: 82
  • Linux Lite Member, 'Advocate' & Donator

  • Linux Lite: 3.8 64bit

  • CPU: Intel Core T7100@1.8GHz (2cores) on a Dell Latitude D630

  • MEMORY: 4Gb

  • VIDEO CARD: Intel GM965/GL960 Integrated Graphics Controller
I'm sure like me, a few on the LL forum are stuck as to how to run the Spectre/Meltdown checker.

I went to https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated

then downloaded the script:

Code: [Select]
wget https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated.git
What do I do next ... ?
Linux-user since 2014. 64bit OS installed in Legacy mode on MBR (msdos/ext4) formatted SSDs (except the pi which uses a micro SDHC card):
2017 - Raspberry pi 3B (4cores) ~ Arm710@1.2GHz - LibreElec, used for upgrading our Samsung TV (excellent for the task)  
2012 - Lenovo G580 2689 (2cores; 4threads] ~ i3-3110M - LL3.8/Win8.1 dual-boot (LL working smoothly)
2011 - Samsung NP-N145 Plus (1core; 2threads) ~ Intel Atom N455@1.66GHz - Manjaro (tried LL3 series but lagged)
2008 - Asus X71Q (2cores) ~ Intel T3200@2.0GHz - LL4.4/Win8.1 dual-boot (LL working beautifully)
2007 - Dell Latitude D630 (2cores) ~ Intel T7100@1.8GHz - LL3.8/Win8.1 dual-boot (LL really zippy!) - my daily driver  :-)
 

 

UltraCookie

  • Forum Regular
  • ***
  • 144
    Posts
  • Country: de
  • Reputation: 24
  • Linux Flavoured Chocolate Cookie

  • Linux Lite: 4.4 64bit

  • CPU: Intel i5-4210M Dual Core 2,60 GHz

  • MEMORY: 4Gb

  • VIDEO CARD: Intel HD 4600
Extract the folder -> open it -> double click on sm-start.
Linux Lite 4.2 on Lenovo Edge 540 <3
 

 

m654321

  • Gold Level Poster
  • *******
  • 857
    Posts
  • Country: gb
  • Reputation: 82
  • Linux Lite Member, 'Advocate' & Donator

  • Linux Lite: 3.8 64bit

  • CPU: Intel Core T7100@1.8GHz (2cores) on a Dell Latitude D630

  • MEMORY: 4Gb

  • VIDEO CARD: Intel GM965/GL960 Integrated Graphics Controller
Extract the folder -> open it -> double click on sm-start.

I don't have a folder to extract from  :o
When I used the wget command  in post #2, an HTML file is downloaded, named Spectre-Meltdown-Checker-Automated.git ...

 :(
Linux-user since 2014. 64bit OS installed in Legacy mode on MBR (msdos/ext4) formatted SSDs (except the pi which uses a micro SDHC card):
2017 - Raspberry pi 3B (4cores) ~ Arm710@1.2GHz - LibreElec, used for upgrading our Samsung TV (excellent for the task)  
2012 - Lenovo G580 2689 (2cores; 4threads] ~ i3-3110M - LL3.8/Win8.1 dual-boot (LL working smoothly)
2011 - Samsung NP-N145 Plus (1core; 2threads) ~ Intel Atom N455@1.66GHz - Manjaro (tried LL3 series but lagged)
2008 - Asus X71Q (2cores) ~ Intel T3200@2.0GHz - LL4.4/Win8.1 dual-boot (LL working beautifully)
2007 - Dell Latitude D630 (2cores) ~ Intel T7100@1.8GHz - LL3.8/Win8.1 dual-boot (LL really zippy!) - my daily driver  :-)
 

 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 7014
    Posts
  • Country: nz
  • Reputation: 651
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 960
I'm sure like me, a few on the LL forum are stuck as to how to run the Spectre/Meltdown checker.

I went to https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated

then downloaded the script:

Code: [Select]
wget https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated.git
What do I do next ... ?


I don't know why you are using the wget command, that instruction isn't there. https://github.com/linuxlite/Spectre-Meltdown-Checker-Automated shows the exact instructions under Instructions. Click on the green 'Clone or download' button, Download zip.
Last Edit: January 23, 2018, 10:01:33 AM by Jerry
 

 

m654321

  • Gold Level Poster
  • *******
  • 857
    Posts
  • Country: gb
  • Reputation: 82
  • Linux Lite Member, 'Advocate' & Donator

  • Linux Lite: 3.8 64bit

  • CPU: Intel Core T7100@1.8GHz (2cores) on a Dell Latitude D630

  • MEMORY: 4Gb

  • VIDEO CARD: Intel GM965/GL960 Integrated Graphics Controller
@Jerry
Many thanks - got it sorted, worked fine in LL3.6
I guess though, that the spectre-meltdown checker wont work in some other distros, where sudo is not a recognised command, e.g. PCLinuxOS.
Linux-user since 2014. 64bit OS installed in Legacy mode on MBR (msdos/ext4) formatted SSDs (except the pi which uses a micro SDHC card):
2017 - Raspberry pi 3B (4cores) ~ Arm710@1.2GHz - LibreElec, used for upgrading our Samsung TV (excellent for the task)  
2012 - Lenovo G580 2689 (2cores; 4threads] ~ i3-3110M - LL3.8/Win8.1 dual-boot (LL working smoothly)
2011 - Samsung NP-N145 Plus (1core; 2threads) ~ Intel Atom N455@1.66GHz - Manjaro (tried LL3 series but lagged)
2008 - Asus X71Q (2cores) ~ Intel T3200@2.0GHz - LL4.4/Win8.1 dual-boot (LL working beautifully)
2007 - Dell Latitude D630 (2cores) ~ Intel T7100@1.8GHz - LL3.8/Win8.1 dual-boot (LL really zippy!) - my daily driver  :-)
 

 

trinidad

  • Gold Level Poster
  • *******
  • 988
    Posts
  • Country: us
  • Reputation: 178
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.4 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
@m654321 Below is the list of updated kernels for PClinuxOS and even though this a LL forum and I don't use PClinuxOS maybe just create a directory in your home directory to hold the shell script and run the commands in a root terminal without the sudo added in to the last.

http://www.pclinuxos.com/forum/index.php/topic,144844.msg1237197.html#msg1237197
We also need to ask these things all in the same thread and not spread this out all over the place.

TC

All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #97 on: January 23, 2018, 06:03:50 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 7014
    Posts
  • Country: nz
  • Reputation: 651
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 960
Topics merged and title of this thread renamed.
Please keep all posts on this topic in this thread. Cheers :)
 

Re: Meltdown & Spectre Information and Discussion
« Reply #98 on: January 23, 2018, 08:08:26 PM »
 

Moltke

  • I come here a lot
  • *****
  • 489
    Posts
  • Country: ve
  • Reputation: 68
  • Linux Lite Member

  • Linux Lite: 3.8 64bit

  • CPU: amd athlon 64 x2

  • MEMORY: 4Gb

  • VIDEO CARD: amd radeon hd 6750
Here's a nice article I just found while surfing the web https://insights.ubuntu.com/2018/01/17/spectre-mitigation-updates-available-for-testing-in-ubuntu-proposed

It says:
Quote
You are invited to test and provide feedback for the following updated Linux kernels.  We have also rebased all derivative kernels such as the public cloud kernels (Amazon, Google, Microsoft, etc) and the Hardware Enablement (HWE) kernels.

It provides links for the proposed kernels for Ubuntu 14.04, 16.04, 17.04, 17.10.
Without each others help there ain't no hope for us :)
 

Re: Meltdown & Spectre Information and Discussion
« Reply #99 on: January 29, 2018, 06:47:51 AM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 7014
    Posts
  • Country: nz
  • Reputation: 651
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 960
For advanced users. Do not try this on your actual machine unless you have god powers -https://www.sentinelone.com/blog/sentinelone-releases-free-linux-tool-detect-meltdown-vulnerability-exploitations/ Play with in an up to date LL VM.
Last Edit: January 29, 2018, 07:01:12 AM by Jerry
 

Re: Meltdown & Spectre Information and Discussion
« Reply #100 on: January 31, 2018, 10:41:34 AM »
 

trinidad

  • Gold Level Poster
  • *******
  • 988
    Posts
  • Country: us
  • Reputation: 178
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.4 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
I will try this out sometime this week Jerry. Thanks.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #101 on: January 31, 2018, 06:49:09 PM »
 

Moltke

  • I come here a lot
  • *****
  • 489
    Posts
  • Country: ve
  • Reputation: 68
  • Linux Lite Member

  • Linux Lite: 3.8 64bit

  • CPU: amd athlon 64 x2

  • MEMORY: 4Gb

  • VIDEO CARD: amd radeon hd 6750
Here's another nice article I just found on the web, it describes another way to check on meltdown-spectre http://kroah.com/log/blog/2018/01/19/meltdown-status-2/

:)
Without each others help there ain't no hope for us :)
 

Re: Meltdown & Spectre Information and Discussion
« Reply #102 on: February 06, 2018, 01:02:02 PM »
 

trinidad

  • Gold Level Poster
  • *******
  • 988
    Posts
  • Country: us
  • Reputation: 178
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.4 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
Bad news is that now more than 200 different forms of malware have turned up in the "wild" modified to attempt to exploit the Spectre vulnerability, which indicates the probability that some sophisticated sleeper applications may evolve to pose a huge threat to Microsoft Windows.

Good news is that this week I will be posting several different alternative ways to monitor for the vulnerabilities besides the already available spectre-meltdown-checker. Debian has now backported the spectre-meltdown-checker for stretch.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #103 on: February 06, 2018, 06:23:28 PM »
 

TheDead

  • Gold Level Poster
  • *******
  • 573
    Posts
  • Country: ca
  • Reputation: 52
  • Linux Lite Worshipper
    • My OpenDesktop Projects

  • Linux Lite: 3.8 32bit

  • CPU: HAL9000

  • MEMORY: 1Gb

  • VIDEO CARD: Oculus Rift v.5
"Once its weaponized to run evil things, we're doomed, DOOMED! Dooooooomed! ;) - Tim the Enchanter!

We'll need Coconut computers!
- TheDead (TheUxNo0b)

If my blabbering was helpful, please click my [Thank] link.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #104 on: February 07, 2018, 06:26:01 AM »
 

ian_r_h

  • Merchandise Supporter
  • Forum Regular
  • *****
  • 103
    Posts
  • Country: gb
  • Reputation: 10
  • Linux Lite Member

  • Linux Lite: 3.6 64bit
Hmmm... off to live in a cave in the middle of a forest (next to a river with plenty of fish)...  ;)

Will launch my secret nuclear weapons at Intel first...
Don't worry about artificial intelligence.  Worry about natural stupidity.  :)
 


 


Linux Lite 4.6 Final has been released. See the Release Announcements section for more information.