{"id":980,"date":"2018-01-11T12:20:53","date_gmt":"2018-01-11T17:20:53","guid":{"rendered":"http:\/\/tech2.mountdesales.net\/?p=980"},"modified":"2018-01-11T12:20:53","modified_gmt":"2018-01-11T17:20:53","slug":"spectre-meltdown-vulnerabilities-in-the-news","status":"publish","type":"post","link":"https:\/\/tech.mountdesales.net\/?p=980","title":{"rendered":"Spectre, Meltdown, Vulnerabilities in the news"},"content":{"rendered":"

\"\"<\/a><\/p>\n

You may have seen a lot of scary news stories about some vulnerabilities recently disclosed that affect just about every computing device imaginable [depending on where you get your news].<\/p>\n

Here is a short non-technical common-sense rundown of what this is all about.<\/p>\n

What is Spectre and Meltdown?<\/h4>\n

Basically they are newly-disclosed ways for a crafty hacker to access supposedly secret info on your device.<\/p>\n

As CNET.com<\/a> puts it:<\/p>\n

….. the issue doesn’t result from a badly written computer code. Instead, the problem comes down to the way the chips are intentionally designed.<\/p>\n

Processors are supposed to make the secret information easier to access as they gear up to run the next process on a computer. As the programming quip goes, this is a feature, not a bug.<\/p>\n

Why are they called Spectre and Meltdown?<\/h4>\n

Because people like to come up with cool names for these things. It’s more interesting to call it “Spectre” than “Security Bulletin #598267”.<\/p>\n

Am I in danger?<\/h4>\n

Immediately, no. It’s not like someone could just randomly swipe information from your device by driving by your house. A hacker would need to be fairly technically minded AND install some code on your machine.<\/p>\n

Of course, now that “everyone” knows about it, somebody somewhere is going to try to use this information.<\/p>\n

As Meraki.com<\/a> put it:<\/p>\n

These vulnerabilities could allow an unprivileged attacker with direct access to a computing device, in specific circumstances, to read privileged memory belonging to other processes or memory allocated to the operating system kernel.<\/p>\n

Notice the phrases “COULD allow”,\u00a0 “with direct access to a computing device” and “in specific circumstances”. That means it would take a concerted effort to compromise your machine.<\/p>\n

Should I panic?<\/h4>\n

Absolutely not….. not about THIS, anyway. If you would LIKE to panic about something else, be our guest.<\/p>\n

What should I do?<\/h4>\n

Two primary things you can do, BOTH of which you should already be doing:<\/p>\n

1) UPDATE YOUR SYSTEM and SOFTWAR<\/strong>E. If you’ve been ignoring those system update, then get it updated NOW. OK, if you MUST get some work done, start the updates as you finish for the day, and let them run all night.<\/p>\n

Yes, it could take that long, depending on how long you’ve been putting them off!<\/p>\n

Especially on WIndows, MDS TEch recommends checking for updates again<\/p>\n

2) USE COMMON SENSE ONLINE<\/strong>. Don’t just click anything you come across – double-eyeball it to make sure it’s actually legit. If an email comes in from someone you trust, but the contents don’t match the person – triple-check it before clicking on anything.<\/p>\n

Will the updates slow down my machine?<\/h4>\n

Technically, yes. The big question is “will you notice a difference”? Intel has stated<\/a> that most users – doing average computing stuff – won’t notice a difference.<\/p>\n

MDS Tech’s take on this is that you MIGHT notice your machine slows down a bit – if your machine is more than 3 years old.<\/p>\n

MIGHT.<\/strong><\/p><\/blockquote>\n

Will the updates break my computer?<\/h4>\n

There have been a few instances where the updates that were hurredly rushed out caused some machines with certain AMD processes to quit working., or SOME software quit working. We’ve seen some articles stating that it depends on the exact processor, what antivirus you are using, and presumably what phase the moon is in when you apply the update.<\/p>\n

Stated another way, there doesn’t seem to be an EXACT set of causes of the problem.<\/p>\n

Where else can I learn more?<\/h4>\n
    \n
  1. Meraki.com<\/a><\/li>\n
  2. Security Week –> Apple updates<\/a><\/li>\n
  3. cnet.com<\/a><\/li>\n
  4. theGuardian.com<\/a><\/li>\n
  5. arstechnica.com<\/a> – if you you’d like some deeply technical info about the various companies’ responses.<\/li>\n<\/ol>\n

    Why do people try to break into machines anyway?<\/h4>\n

    Sonicwall has an interesting article on the Hacker’s motivation.<\/a><\/p>\n

     <\/p>\n

     <\/p>\n","protected":false},"excerpt":{"rendered":"

    You may have seen a lot of scary news stories about some vulnerabilities recently disclosed that affect just about every computing device imaginable [depending on where you get your news]. Here is a short non-technical common-sense rundown of what this is all about. What is Spectre and Meltdown? Basically they are newly-disclosed ways for a … Continue reading Spectre, Meltdown, Vulnerabilities in the news<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[27,30,28],"tags":[361,362,359,363,360,357,356,358,92],"class_list":["post-980","post","type-post","status-publish","format-standard","hentry","category-faculty-staff","category-more","category-student-devices","tag-amd","tag-chip","tag-hacker","tag-how-to-fix","tag-intel","tag-meltdown","tag-spectre","tag-vulnerabilities","tag-what-to-do"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p42ogX-fO","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1805,"url":"https:\/\/tech.mountdesales.net\/?p=1805","url_meta":{"origin":980,"position":0},"title":"Log out of ALL of your Google stuff at the same time","author":"Tom Rule","date":"02\/13\/2023","format":false,"excerpt":"Sometimes you have logged into your Google account on multiple machines and devices - AND you told all those browsers to save your login. Why is this a problem? Because that means your younger sibling can easily get into your stuff - just by opening up a browser window. Here\u2026","rel":"","context":"In "Google"","block_context":{"text":"Google","link":"https:\/\/tech.mountdesales.net\/?cat=38"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2023\/02\/image.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2023\/02\/image.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2023\/02\/image.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2023\/02\/image.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":1534,"url":"https:\/\/tech.mountdesales.net\/?p=1534","url_meta":{"origin":980,"position":1},"title":"Parental Controls on your Home Network","author":"Tom Rule","date":"09\/01\/2021","format":false,"excerpt":"An article for Parents who are trying to maintain some safety on their home network. Note that this is for information only - please do not think of this as an \"official endorsement\". MDS Tech does think it's a pretty interesting idea, and worth a look. http:\/\/bark.us Bark is able\u2026","rel":"","context":"In "Make Tech Easier"","block_context":{"text":"Make Tech Easier","link":"https:\/\/tech.mountdesales.net\/?cat=111"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2021\/09\/image-1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2021\/09\/image-1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2021\/09\/image-1.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2021\/09\/image-1.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/tech.mountdesales.net\/wp-content\/uploads\/2021\/09\/image-1.png?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":598,"url":"https:\/\/tech.mountdesales.net\/?p=598","url_meta":{"origin":980,"position":2},"title":"Kindle App – how to use","author":"Tom Rule","date":"09\/11\/2015","format":false,"excerpt":"Here is some info from the web on using the Kindle app. \u00a0 \u00a0 To download titles your device must be connected to a wireless or data network, but you do not need to connect your device to a wireless or data network to view titles that you have already\u2026","rel":"","context":"In "Apps"","block_context":{"text":"Apps","link":"https:\/\/tech.mountdesales.net\/?cat=145"},"img":{"alt_text":"amazon-kindle-app","src":"https:\/\/i0.wp.com\/tech2.mountdesales.net\/wp-content\/uploads\/2015\/09\/amazon-kindle-app-300x300.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":610,"url":"https:\/\/tech.mountdesales.net\/?p=610","url_meta":{"origin":980,"position":3},"title":"Find my iPad – how to use","author":"Tom Rule","date":"09\/16\/2015","format":false,"excerpt":"If you have lost or misplaced your iPad, here's how to use \"Find my iPad\" to figure out where it is. This only works if you have correctly setup your AppleID on your iPad Turned Find my iPad ON in Settings-->iCloud Followed these instructions on some settings AND it is\u2026","rel":"","context":"In "Essentials"","block_context":{"text":"Essentials","link":"https:\/\/tech.mountdesales.net\/?cat=105"},"img":{"alt_text":"ICLOUD LOGIN","src":"https:\/\/i0.wp.com\/tech2.mountdesales.net\/wp-content\/uploads\/2015\/09\/ICLOUD-LOGIN-142x150.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":991,"url":"https:\/\/tech.mountdesales.net\/?p=991","url_meta":{"origin":980,"position":4},"title":"Airserver – setup and using","author":"Tom Rule","date":"12\/19\/2017","format":false,"excerpt":"To start Airserver on your Windows PC, click on the Caret icon on the bottom right area of your toolbar. \u00a0 Then click on the Airserver icon: You should be able to start Airserver if it isn't running and set some options. Options to note: Let Airserver startup automatically when\u2026","rel":"","context":"In "Faculty"","block_context":{"text":"Faculty","link":"https:\/\/tech.mountdesales.net\/?cat=10"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/tech2.mountdesales.net\/wp-content\/uploads\/2018\/01\/Eillen-1.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":42,"url":"https:\/\/tech.mountdesales.net\/?p=42","url_meta":{"origin":980,"position":5},"title":"When you have a guest on campus and they need wireless access","author":"tech","date":"10\/31\/2013","format":false,"excerpt":"The details will vary depending on what device you use, but here is the overview: Set your device to join the network MDS-public In the Login screen that appears, click \"Create Account\" Fill in the information, and then you'll be allowed on the network. It's a temporary account that will\u2026","rel":"","context":"In "Faculty\/Staff"","block_context":{"text":"Faculty\/Staff","link":"https:\/\/tech.mountdesales.net\/?cat=27"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=\/wp\/v2\/posts\/980","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=980"}],"version-history":[{"count":0,"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=\/wp\/v2\/posts\/980\/revisions"}],"wp:attachment":[{"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=980"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=980"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tech.mountdesales.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=980"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}