Windows 10: Meltdown, spectre and old motherboard and CPU.

I am running FCU Win 10 Pro on a MSI P35 Neo F v1 motherboard with Core 2 Duo E8400 CPU. I have ran the MS controlsettings script which informs me I am protected from Spectre by Windows Update but not Meltdown without a BIOS/Microcode update.

As this is a 2008 motherboard I very much doubt a BIOS update will be forthcoming from MSI and the windows patch is not enabled due to hardware firmware update required. Is this the end for my machine which quite happily runs Windows 10 Pro and all my loaded programs or is there a known workaround to enable the windows meltdown patch without BIOS update?

:)

 

Meltdown and Spectre

Another good article with lots of further info:

https://www.bleepingcomputer.com/news/microsoft/how-to-check-and-update-windows-systems-for-the-meltdown-and-spectre-cpu-flaws/

 

Gaming performance on Windows 10 1709

No ,the issues cause by the ugly patch from CPU's Intel to meltdown and spectre.

 

It depends on what you do on your machine.

If you just play games it shouldn't really matter.

OTOH, if you do stuff that you want to keep secret (like banking) it could be an issue.

A possible option is to use a Live Linux CD/DVD/USB (or install a Linux distro including the appropriate patches) on your machine and do your banking using that.

 

Yes I do banking although my bank website has username and password also has dropdown mouse selectable memorable word characters which is pretty secure. Wont a Linux distro also be susceptible to Meltdown if the hardware patch isn't in place or do you mean just boot to linux and do banking and nothing else eg no other tabs open?

 

Well ... if there's no fix for your old computer, then you're screwed.

Oh wait! File a class-action lawsuit again Intel!

Oh wait! That's already being done!

Just wait for around five years and you get your settlement ... perhaps $10. Whoopee!

 

I don't think that old timer from Q1 2008 is effected.

Intel Core™2 Duo Processor E8400 (6M Cache, 3.00 GHz, 1333 MHz FSB) Product Specifications

See"Which Intel-based platforms are affected by or vulnerable to the issue?": Facts about Side-Channel Analysis and Intel Products

 

If you have an installed Linux Distro it will be vulnerable until the patches are released.

Presumably the current Live CD/DVD/USB images don't include the appropriate patches.

I'm not sure when each Linux Distro will release the new patched Live CD/DVD/USB versions.
You'd have to ask/check on the appropriate forums.
I've read that Ubuntu will be releasing it's patches on January 9 (I use Linux Mint so I'm going to have to ask/check on their forum)

However, you should be reasonably safe if you use a Live CD/DVD/USB:

• Only open the browser (usually Firefox)
• Type the address in the Address bar (don't use any search engines or open any tabs)

The Live CD/DVD/USB shouldn't leave any files on your HDD/SSD.

I haven't read of any known malware that is using these exploits.
There is "Proof Of Concept" code, so presumably hackers are going to be releasing malware soon.

It's possible that installed versions of Windows and Linux are safe to use as long as you:

• Run your AV in Windows
• Make sure that the browser caches are empty
• Type the address in the Address bar (don't use any search engines or open any tabs)

Firefox has released patches to try to block this exploit:
http://news.softpedia.com/news/mozil...s-519241.shtml

It seems that Chrome won't be patched for a couple of weeks:
https://www.express.co.uk/life-style...fix-version-64
Here is a link about precautions you can take in the meantime:
http://mashable.com/2018/01/04/googl...tion-meltdown/

 

As many users I'm also trying to wrap my head around this meltdown, there are a lot of general and vague articles maybe because the disclosure was not supposed before 01092018 (?).

I'm more than happy if someone will correct me if i'm wrong, and help me better understand.

What i understand on the Linux situation is that there are mitigation patches and the release process is not finished yet.

What mitigation can i have (in Linux):

Kernel patches (KPTI) to mitigate "Meltdown" and "Spectre": CVE-2017-5754 CVE-2017-5753 CVE-2017-5715 this works at OS level and does not remove the hardware bug. This should prevent the OS vulnerabilities.

Microcode drivers updates, this could eventually bypass the old motherboard issue:

From Debian:

This situation is a brilliant example to me of how free/open source software is so valuable, we wouldn't be at the mercy of xxx for our "old" hardware.

Kernel patches, When? Ubuntu:

Is January 9 patch Tuesday?

January 3, 2018 - KB4056892 does this patch the win 10 kernel for meltdown and spectre? I suppose yes(?).

Win 7 an 8.1 kernel patches should be released also.

 

Now I'm seeing that the patch has problems ... ranging from will-not-install to your-computer-is-now-a-brick.

KB4056892 bugs: Install fails, browser crashes, PC freezes, and more

 

To paraphrase an old joke:

Doctor, my passwords may be stolen if I downloaded malware that exploits the meltdown (or spectre) vulnerabilities.

Doctor: then don't do that.

 

Found this Download Linux* Processor Microcode Data File for my Core 2 Dua a microcode download for Linux is this what I need except for Windows?

 

Hey Banger,
I tried updating the micro code using that on my old E5700 (Gateway SX2801 in specs) and it wasn't applicable. I think those of us with old cpus/hardware are SOL, since it's very doubtful we'll be getting a BIOS update to go along with MS Updates, etc *Sad

 

That's what worries me.

 

Maybe it’s a well thought out plan to cleanse the world of the older systems
Makes good business sense