Jump to content

Razputin

Moderator
  • Content Count

    7360
  • Joined

  • Last visited

  • Days Won

    137

Reputation Activity

  1. Upvote
    Razputin got a reaction from ToasterToastin' in Meltdown and Spectre CPU Vulnerabilities   
    Ty for the outline fam, Ive been reading everything from minor inconvenience to your pc will literally explode
     
    Now I gotta learn what noscript is
  2. Upvote
    Razputin reacted to Arm the Homeless in Meltdown and Spectre CPU Vulnerabilities   
    With last year's biggest revelations being the entirety of Vault 7 and the Equifax breach, we're starting off this year with a two exploits (though divided into three vulnerabilities) ranging about 20 years of CPUs.
     
    Article Dump:
    Official Meltdown and Spectre Exploit Website Includes Q&A, CVEs, and academic papers Google Project Zero write up on Meltdown and Spectre Written by one of the researchers that found both exploits The Register - Kernel-memory-leaking Intel processor design flaw forces Linux, Windows redesign Ars Technica - What’s behind the Intel design flaw forcing numerous patches? Meltdown explanation in layman's terms Wired - A Critical Intel Flaw Breaks Basic Security for Most Computers Why Raspberry Pi isn't vulnerable to Spectre or Meltdown Includes layman's explanation of speculative execution Meltdown in Action: Dumping memory Meltdown demo - Spying on passwords Official responses from various companies Intel AMD ARM Microsoft Amazon Web Services Google Android Security Bulletin Linus Torvalds doesn't like Intel A valid complaint given that Intel thinks its ok that malicious actors can only read memory LLVM's work in progress Spectre patch for variant 2 Important information about Microsoft Meltdown CPU security fixes, antivirus vendors and you  
    Basic ways to exploit these vulnerabilities:
    With Spectre, an attacker can put malicious JS on a website, allowing them to read all browser memory including form data such as passwords, cookies, session tokens, and encryption keys. Similar approach can be used with Java in a sandbox. With Meltdown, an attacker can host software in some cloud environment to read memory form the host machine. Any data hosted on that server can then be read.  
    tl;dr:
    Two major CPU vulns just went public Exploitable CPUs allow attackers to read memory of processes currently Meltdown is exploitable on Intel CPUs while Spectre is exploitable on Intel, AMD, and ARM CPUs Meltdown is not yet verified to work on AMD or ARM CPUs Spectre is likely to affect all modern multithreading CPUs It is unclear if this exploit has ever been used publicly before now Patches have been put out for the Linux kernel, Windows, OSX, and Android but only for Meltdown so far LLVM have a work in progress patch for one of Spectre's two variants Expect lots of recompiling soon Patches are software to fix a hardware issue. This isn't going to be properly solved until a couple years down the line with a redesigned CPU generation. Performance hits are expected, and further performance hits are expected when the Spectre patches roll out Ballpark 5 to 30% performance decrease for Intel CPUs This primarily affects system calls, not computation, meaning that things like rendering or gaming shouldn't be affected in any substantial way. Expect the largest performance hits on VM software that use Hyper-V or docker containers Likely not an NSA or CIA backdoor because it would still affect their own hardware as much as anyone else As per usual, encrypt your data and use stuff like NoScript. As long as you keep up to date with software patches, the average user shouldn't be alarmed. BUT FUCKING UPDATE YOUR SHIT
  3. Upvote
    Razputin reacted to A 1970 Corvette in TIAM IV: Guydiana Jones and the Kingdom of the Crystal Cockmongler   
    Tan versions of characters gain +1000 likeability
  4. Upvote
    Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread   
    Happy new year all of you
     
    No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
     
    Even if this forum is dead I wish you all the best and I mean it
  5. Upvote
    Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread   
    Happy new year all of you
     
    No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
     
    Even if this forum is dead I wish you all the best and I mean it
  6. Upvote
    Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread   
    Happy new year all of you
     
    No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
     
    Even if this forum is dead I wish you all the best and I mean it
  7. Upvote
    Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread   
    Happy new year all of you
     
    No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
     
    Even if this forum is dead I wish you all the best and I mean it
  8. Upvote
    Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread   
    Happy new year all of you
     
    No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
     
    Even if this forum is dead I wish you all the best and I mean it
  9. Upvote
    Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread   
    Happy new year all of you
     
    No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
     
    Even if this forum is dead I wish you all the best and I mean it
  10. Upvote
    Razputin got a reaction from Idiot Cube in Official happy new year 2018 thread   
    Happy new year all of you
     
    No matter what you're doing witb your life, whether you're bettering the world squeezing moisture off leaves to feed starving African children or waking up to play videogames all day, just make sure you're happy to wake up every morning
     
    Even if this forum is dead I wish you all the best and I mean it
  11. Upvote
    Razputin got a reaction from ToasterToastin' in TIAM IV: Guydiana Jones and the Kingdom of the Crystal Cockmongler   
    Enforce the use of anime avatars
  12. Upvote
    Razputin got a reaction from Wulff in Net Neutrality guff   
  13. Upvote
    Razputin reacted to Medic in Net Neutrality guff   
    Wow, Cave, you really are a cunt.
  14. Upvote
    Razputin got a reaction from Mersopolis in TF2 general   
    That's actually kinda interesting; how did people get into tf2?
     
    For me it was mostly portal memes; saw the orange box on sale and it had portal so I bought it, finished portal and the hl2s before even touching tf2.  Then after getting into it a bit I found this video because a friend got me listening to Pendulum
     
     
    And then I got turbo hooked even though my pc couldn't really run tf2 and I mostly played it at that same friend's house
  15. Upvote
    Razputin got a reaction from John Caveson in TIAM: General Gaming edition   
    Yes exactly, unironically.
  16. Upvote
    Razputin reacted to Huff in Post ur Sunsets/Rises   
    im gonna delete the bookmoark youy fukcikng yeey
  17. Upvote
    Razputin reacted to Moby in TIAM: General Gaming edition   
    Apparently EA partned with Nexon to make a MMO.
     
    This sentence alone has microtransactions.
  18. Upvote
    Razputin got a reaction from TheOnlyGuyEver in TF2 always thinks I'm a new player when I start TF2   
    Sounds like someone is trying to tell you to git gud
  19. Upvote
    Razputin got a reaction from TheOnlyGuyEver in TF2 always thinks I'm a new player when I start TF2   
    Sounds like someone is trying to tell you to git gud
  20. Like
    Razputin reacted to hugthebed2 in TF2 general   
  21. Upvote
    Razputin got a reaction from FreshHalibut in Jungle Inferno Update Thread   
  22. Upvote
    Razputin got a reaction from FreshHalibut in Jungle Inferno Update Thread   
  23. Upvote
    Razputin got a reaction from Huff in The Daily SPUF - A blog for you! Posting submissions from subSPUFers daily!   
    Well all the people who read this also write for it so they'll probably be up to date
  24. Like
    Razputin got a reaction from d4m0 in Favorite Comp Format?   
    4v4 doesn't exist, utilduo is what you play to practice for 6s and highlander isn't competitive ( ͡° ͜ʖ ͡°)
  25. Upvote
    Razputin got a reaction from Raison d'être in Hello!   
    Welcome to subspuf! Just to let you know, we have a very strict no "anime" policy over here. Please discuss wholesome western animation only.
×