Intel Processors- Mac and Win

[Meads]

Originally Posted by guitardom

The fix was pretty well ready to go for both OSX and Windows when it was announced.

It's allegedly already been fixed in OSX 10.13.2.

[guitardom]

Originally Posted by Meads

It's allegedly already been fixed in OSX 10.13.2.

Posted about that already in this thread. It was partially fixed in 10.13.2 The rest of the fix is supposed to be in 10.13.3

[Meads]

Originally Posted by guitardom

Posted about that already in this thread. It was partially fixed in 10.13.2 The rest of the fix is supposed to be in 10.13.3

Sorry, missed that. Thanks for the info.

[YYR123]

Here is more about Apple coming clean....

https://www.macrumors.com/2018/01/04...ability-fixes/

[Drew Mazurek]

Can someone tell me this......

Of course this is a bad thing, but doesn't someone need to know your specific IP address, OS, processor type etc to do anything? What about firewalls? And this has been like this for decades, why hasn't it been a problem up til now? Surely the really smart hackers already knew this?

Just trying to counter all the "sky is falling" type talk that inevitably spirals around announcements like this.

Please only respond if you are a computer scientist and have specific knowledge about it.

[JoelG]

It's a REALLY big deal for "cloud" providers as all it would theoretically take is for one hacker to create a VM on one of the servers and they'd have access to the memory of other users servers.

It is also bad if you click on a bad link with malicious code..

Joel

[gnjlee]

Originally Posted by Drew Mazurek

Can someone tell me this......

Of course this is a bad thing, but doesn't someone need to know your specific IP address, OS, processor type etc to do anything? What about firewalls? And this has been like this for decades, why hasn't it been a problem up til now? Surely the really smart hackers already knew this?

Just trying to counter all the "sky is falling" type talk that inevitably spirals around announcements like this.

Please only respond if you are a computer scientist and have specific knowledge about it.

I have creds. At this point, all you need is someone to execute malicious code at user level permissions. This could be in the form of a drive by attack from a web ad or even a phishing attempt in your email. The goal is to establish a command and control channel for a bad player to connect to your machine and use the vulnerability to escalate permissions and anything on your system is fair game. This is a major security issue for industry. It might not be for you if you have nothing of value on your computer and don't use your system to do banking or pay bills etc... Still if you make money with your PT rig, you probably don't want to do any surfing or emailing on your system if you can avoid it.

This vulnerability will probably be weaponized shortly.

[YYR123]

Originally Posted by Drew Mazurek

Please only respond if you are a computer scientist and have specific knowledge about it.

What?

Next audiophile question I ask will be prefaced with

“Only respond if you have had / worked on no less than 3 gold records”


Honestly I bet these are the back doors that the NSA had Intel intentionally put in.......

Now that low level hackers know about it, they decide “let’s patch it”

I got my Computer Science degree from a mail order place out of North India, “Seemed Legit?” 🤠

[gnjlee]

Originally Posted by YYR123

What?

Next audiophile question I ask will be prefaced with

“Only respond if you have had / worked on no less than 3 gold records”


Honestly I bet these are the back doors that the NSA had Intel intentionally put in.......

Now that low level hackers know about it, they decide “let’s patch it”

I got my Computer Science degree from a mail order place out of North India, “Seemed Legit?” 🤠

Nice hahaha.

[TOM@METRO]

Originally Posted by YYR123

Honestly I bet these are the back doors that the NSA had Intel intentionally put in.......

Those impish NSA kids and their shenanigans.

I did install the latest Microsoft patch, and have seen no noticeable negatives.