-
Content Count
7360 -
Joined
-
Last visited
-
Days Won
137
Reputation Activity
-
Razputin got a reaction from ToasterToastin' in Meltdown and Spectre CPU Vulnerabilities
Ty for the outline fam, Ive been reading everything from minor inconvenience to your pc will literally explode
Now I gotta learn what noscript is
-
Razputin reacted to Arm the Homeless in Meltdown and Spectre CPU Vulnerabilities
With last year's biggest revelations being the entirety of Vault 7 and the Equifax breach, we're starting off this year with a two exploits (though divided into three vulnerabilities) ranging about 20 years of CPUs.
Article Dump:
Official Meltdown and Spectre Exploit Website Includes Q&A, CVEs, and academic papers Google Project Zero write up on Meltdown and Spectre Written by one of the researchers that found both exploits The Register - Kernel-memory-leaking Intel processor design flaw forces Linux, Windows redesign Ars Technica - What’s behind the Intel design flaw forcing numerous patches? Meltdown explanation in layman's terms Wired - A Critical Intel Flaw Breaks Basic Security for Most Computers Why Raspberry Pi isn't vulnerable to Spectre or Meltdown Includes layman's explanation of speculative execution Meltdown in Action: Dumping memory Meltdown demo - Spying on passwords Official responses from various companies Intel AMD ARM Microsoft Amazon Web Services Google Android Security Bulletin Linus Torvalds doesn't like Intel A valid complaint given that Intel thinks its ok that malicious actors can only read memory LLVM's work in progress Spectre patch for variant 2 Important information about Microsoft Meltdown CPU security fixes, antivirus vendors and you
Basic ways to exploit these vulnerabilities:
With Spectre, an attacker can put malicious JS on a website, allowing them to read all browser memory including form data such as passwords, cookies, session tokens, and encryption keys. Similar approach can be used with Java in a sandbox. With Meltdown, an attacker can host software in some cloud environment to read memory form the host machine. Any data hosted on that server can then be read.
tl;dr:
Two major CPU vulns just went public Exploitable CPUs allow attackers to read memory of processes currently Meltdown is exploitable on Intel CPUs while Spectre is exploitable on Intel, AMD, and ARM CPUs Meltdown is not yet verified to work on AMD or ARM CPUs Spectre is likely to affect all modern multithreading CPUs It is unclear if this exploit has ever been used publicly before now Patches have been put out for the Linux kernel, Windows, OSX, and Android but only for Meltdown so far LLVM have a work in progress patch for one of Spectre's two variants Expect lots of recompiling soon Patches are software to fix a hardware issue. This isn't going to be properly solved until a couple years down the line with a redesigned CPU generation. Performance hits are expected, and further performance hits are expected when the Spectre patches roll out Ballpark 5 to 30% performance decrease for Intel CPUs This primarily affects system calls, not computation, meaning that things like rendering or gaming shouldn't be affected in any substantial way. Expect the largest performance hits on VM software that use Hyper-V or docker containers Likely not an NSA or CIA backdoor because it would still affect their own hardware as much as anyone else As per usual, encrypt your data and use stuff like NoScript. As long as you keep up to date with software patches, the average user shouldn't be alarmed. BUT FUCKING UPDATE YOUR SHIT -
Razputin reacted to A 1970 Corvette in TIAM IV: Guydiana Jones and the Kingdom of the Crystal Cockmongler
Tan versions of characters gain +1000 likeability
-
Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread
Happy new year all of you
No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
Even if this forum is dead I wish you all the best and I mean it
-
Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread
Happy new year all of you
No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
Even if this forum is dead I wish you all the best and I mean it
-
Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread
Happy new year all of you
No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
Even if this forum is dead I wish you all the best and I mean it
-
Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread
Happy new year all of you
No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
Even if this forum is dead I wish you all the best and I mean it
-
Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread
Happy new year all of you
No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
Even if this forum is dead I wish you all the best and I mean it
-
Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread
Happy new year all of you
No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
Even if this forum is dead I wish you all the best and I mean it
-
Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread
Happy new year all of you
No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
Even if this forum is dead I wish you all the best and I mean it
-
Razputin got a reaction from ToasterToastin' in TIAM IV: Guydiana Jones and the Kingdom of the Crystal Cockmongler
Enforce the use of anime avatars
-
-
-
Razputin got a reaction from Mersopolis in TF2 general
That's actually kinda interesting; how did people get into tf2?
For me it was mostly portal memes; saw the orange box on sale and it had portal so I bought it, finished portal and the hl2s before even touching tf2. Then after getting into it a bit I found this video because a friend got me listening to Pendulum
And then I got turbo hooked even though my pc couldn't really run tf2 and I mostly played it at that same friend's house
-
Razputin got a reaction from John Caveson in TIAM: General Gaming edition
Yes exactly, unironically.
-
-
Razputin reacted to Moby in TIAM: General Gaming edition
Apparently EA partned with Nexon to make a MMO.
This sentence alone has microtransactions.
-
Razputin got a reaction from TheOnlyGuyEver in TF2 always thinks I'm a new player when I start TF2
Sounds like someone is trying to tell you to git gud
-
Razputin got a reaction from TheOnlyGuyEver in TF2 always thinks I'm a new player when I start TF2
Sounds like someone is trying to tell you to git gud
-
-
-
-
Razputin got a reaction from Huff in The Daily SPUF - A blog for you! Posting submissions from subSPUFers daily!
Well all the people who read this also write for it so they'll probably be up to date
-
Razputin got a reaction from d4m0 in Favorite Comp Format?
4v4 doesn't exist, utilduo is what you play to practice for 6s and highlander isn't competitive ( ͡° ͜ʖ ͡°)
-
Razputin got a reaction from Raison d'être in Hello!
Welcome to subspuf! Just to let you know, we have a very strict no "anime" policy over here. Please discuss wholesome western animation only.