Intel is Melting Down Over Spectre

It turns out that PC processors have a bug. A bug called Meltdown, which allows hackers to get control of your PC and access all sorts of information. Intel, and others are melting down over this particular problem because it’s not an easy fix. You can patch it, but it will probably slow your computer down. We go into the story of what it is, how it was discovered, and how companies are melting down reacting to it. See below for the show notes and articles.

Melting Down Show Notes

The Lowdown:

• The exploit can work through javascript on a web browser
• Worst case they can get kernel memory (including root passwords)
• The worst case can be mitigated, but with a potentially severe hit to performance.
• Affects all Intel CPUs for the last 15 years, and at least the next one
• CERT says the fix is to get a new CPU
• Spectre is the Vector, Meltdown is the specific attack
• The code can be OS independent, which is terrifying.

How it works:

• Out of order execution
  • Caches
  • Memory bottleneck
• Speculative execution
• Page Tables are the worst part of the kernel attack
• Mitigating Meltdown will slow down programs that use the kernel a lot
  • Databases are examples of applications that are going to be heavily affected

How it came out:

• Intel was told by Google Project Zero
• Intel figured out who was affected
• Intel coordinated with Apple, Microsoft the Linux foundation and others to find solutions, post patches and make the announcement
• The Linux foundation started pushing out patches at the end of the year, mysteriously.
• Before long the people had put all the pieces together
• The Register broke the story arguing the story had already effectively broke, they were just formalizing it.

How to Keep A Secret From The Internet Russell Brandom, The Verge

There’s A Bad Bug Going Around Tom Warren, The Verge

Arstechnica Explains Meltdown Peter Bright, Arstechinca

Computerphile Explains Meltdown and Spectre Dr. Steve Bagley, Computerphile

Computerphile Explains How A CPU Works Dr. Steve Bagley, Computerphile

Photo by Uroš Jovičić on Unsplash