Meltdown & Spectre Intel CPUs

[Gigamaxx]

Asus released an update for my Z170i Pro Gaming motherboard. It's an update for Chipset (Management Engine Interface) and an MEUpdate tool use to update it I suppose but its for Windows. Should I bother installing Windows and run these updates? Does this updates carry over to macOS when I switch back or it stays on Windows only?

I just read a thread on another site where a user updated windows and now has kernel panic in OSX maybe hold off a bit if you don't need windows right now. What Ive read is that Sierra and El Capitan are fine if you update the Safari version, High Sierra 13.2 addressed the Meltdown bug and I'm sure the Spectre will be addressed shortly.

 

[ycancino]

About speculative execution vulnerabilities in ARM-based and Intel CPUs
https://support.apple.com/en-us/HT208394

But... I think this it's only the beginning. We will have to be tunned to see what else may appear.

 

[Jamesbond007]

View attachment 303792

https://support.apple.com/en-us/HT208331
https://support.apple.com/en-us/HT208394

Apparently Apple has updated its security advisory and now it said only High Sierra is patched with the Meltdown ( CVE-2017-5754 ) fixes in 10.13.2. The December El Capitan and Sierra security updates apparently do not contain the Meltdown fixes.

So at this point we are still waiting for Apple to release security updates to fix the Meltdown vulnerability on El Capitan and Sierra.

 

[Gigamaxx]

https://support.apple.com/en-us/HT208331
https://support.apple.com/en-us/HT208394

Apparently Apple has updated its security advisory and now it said only High Sierra is patched with the Meltdown ( CVE-2017-5754 ) fixes in 10.13.2. The December El Capitan and Sierra security updates apparently do not contain the Meltdown fixes.

So at this point we are still waiting for Apple to release security updates to fix the Meltdown vulnerability on El Capitan and Sierra.

I read they released or are going to release a new Safari update to take care of the Meltdown issue for eel Capitan and Sierra.

 

[Jamesbond007]

I read they released or are going to release a new Safari update to take care of the Meltdown issue for eel Capitan and Sierra.

https://support.apple.com/en-us/HT208403

The Safari 11.0.2 updates released for El Capitan 10.11.6 and Sierra 10.12.6 contain mitigations for the Spectre vulnerabilities (CVE-2017-5753 and CVE-2017-5715), not Meltdown.

 

[Gigamaxx]

https://support.apple.com/en-us/HT208403

The Safari 11.0.2 updates released for El Capitan 10.11.6 and Sierra 10.12.6 contain mitigations for the Spectre vulnerabilities (CVE-2017-5753 and CVE-2017-5715), not Meltdown.

The specter bug is the harder one to fix so thats good.

 

[rahzah]

Are the hackintoshes more vulnerable to these security issues or are both worlds equally „dangered“? Are we maybe even in favor because we can install updates the motherboard manufacturers may provide?

 

[Jamesbond007]

https://support.apple.com/en-us/HT208465

Apple has just released Security Updates 2018-001 for both El Capitan 10.11.6 and Sierra 10.12.6 which contain mitigations for Meltdown. So now in addition to High Sierra both El Capitan and Sierra should be protected from Meltdown.

 

[gamingaccess]

Has anybody measured performance between 10.13.1 and 10.13.2?

Anybody feeling day to day performance issues after applying the patch?

 

[macBart]

Does anybody know some realworld examples/dangers of Spectre and Meltdown ?
Would the hacker have to attack my PC personaly or would it be a global attack program ?

Let's say I don't really care about it, then posibly (and all the owners of older systems even have no choise):

-When I do a payment there is more money of my account... ?
(Isn't the bank assured against this kind of theft ?)
-All my purchases on any fruity "store" can be stolen/lost or copied... ?
-Someone could steal all my accounts and make averybody mad at me because for what I dind't post myself... ?

I'm just curious of why the FEAR must be spread amongst everybody.
There were always robbers and there wil allways be....
Or maybe i't a convenient way to have everybody buy new hardware to be "safe", so everybodies money was stolen legally ?
It would be a good commercial: New in store now, our latest blahblah, garanteed Spectre and Meltdown proof !
Just my 2 cents.
Don't believe me because I don't know what I am saying, I'm only speculating (no pun intended)!