• Meltdown and Spectre


    Is there anything in particular that we can and/or should be doing about the Meltdown and Spectre vulnerabilities?

  • You just have to keep the kernel updated

  • https://docs.ovh.com/fr/dedicated/meltdown-spectre-kernel-update-per-operating-system/
    Patches for Spectre haven’t been released yet. At least not for Arch.

  • @therenaissance apparently the only thing one could do is update kernel and other packages. Arch update things quickly so I think this should not take much time. I’m reading some articles about it and they are all a bit scary, most computers in the world are vulnerable. It seems that top people are working fast to solve these issues, some are saying that it could take several weeks to solve or even more time. But these are just a few bugs, there are other thousands of other bugs with vulnerabilities everywhere, I can speculate that no one using a phone or a computer is actually safe or have privacy, if one wishes privacy just buy a private island and don’t use any electronic device.

  • so apart from the kernel updates, a BIOS/UEFI update is also necessary.

    0_1515743757454_meldown.jpg

    I know that linux is loading the microcode while booting but i am not sure if this replaces the necessity of a BIOS/UEFI update. So maybe this is only for windows users.

  • if found this script and checked my system.

    https://github.com/speed47/spectre-meltdown-checker

    0_1515745815036_2018-01-12 09_29_44-Bildschirmfoto vom 2018-01-12 09-28-27.png - Windows-Fotoanzeige.jpg

  • The microcode is sufficient, there was an update for it yesterday, so on the Linux front they’re doing the best they can to protect us, untill the real patch is found. In the meantime keep up with your updates, that’s the best advice for now and don’t let fear take over completely.
    Be safe, but like after terrorist attacks, don’t let this bug stop you from using your digital life.

  • I too was wondering if the BIOS must be updated to mitigate Meltdown. My Gigabyte Z97-HD3 has not released an update, but my Lenovo laptop did on 1/4, just before the patches came out. The update says “urgent” for Windows OS. From what I could find, MS was recommending updating the BIOS before installing patches. I’m only running Linux, loathe flashing my BIOS, and would rather not if I don’t have to. https://support.lenovo.com/us/en/downloads/ds037206 . I’m finding a lot of sources (probably unreliable) that state you should update BIOS with Linux.

spectre3 meltdown2 Posts 10Views 1626
Bloom Email Optin Plugin

Looks like your connection to Antergos Community Forum was lost, please wait while we try to reconnect.