A Complete Look At Spectre V1/V2/V4 & Meltdown

[phoronix]

Phoronix: A Complete Look At Spectre V1/V2/V4 & Meltdown

Canonical's Engineering Tech Lead, Gavin Guo, has passed along a big slide deck on a presentation he is preparing about the Spectre and Meltdown CPU vulnerabilities...

http://www.phoronix.com/scan.php?page=news_item&px=Complete-Look-Spectre-Meltdown

[oooverclocker]

Thank you Gavin and Michael! This is very interesting and understandable information is hard to find.

Edit: But what surprises me a lot is to put the slides behind the login of a "social"-or probably more asocial network when you like to read them offline in a reasonable quality. I would consider much different behavior of someone who is working in an open source environment.

[n00b]

But what surprises me a lot is to put the slides behind the login of a "social"-or probably more asocial network when you like to read them offline in a reasonable quality.

Maybe it's because there is a YouTube video in one of the slides.

[Adarion]

Thank you Gavin and Michael! This is very interesting and understandable information is hard to find.

Edit: But what surprises me a lot is to put the slides behind the login of a "social"-or probably more asocial network when you like to read them offline in a reasonable quality. I would consider much different behavior of someone who is working in an open source environment.

Yes, slideshare sucks, they try to force you to have an account if you want to read the pdf offline (log in via ... something).

[kripteks]

For people read 77 page

I have this:

# grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spec_store_bypass:Vulnerable
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline, IBPB, IBRS_FW

I am vulnerable ?

[numacross]

For people read 77 page

I have this:

# grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spec_store_bypass:Vulnerable
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline, IBPB, IBRS_FW

I am vulnerable ?

You need new microcode for full mitigation of v4. Others are good.

[mulenmar]

Putting scientific findings behind a paywall should be illegal, including computer science. >_>

[starshipeleven]

Putting scientific findings behind a paywall should be illegal, including computer science. >_>

I'm ok with it as long as it has affordable pricing. Someone has to pay for the research and/or the peer review.

For example you can find all sorts of insane bs on arxiv (not peer reviewed), and I'd rather not have to spend my time checking for bs when I'm looking for scientific info.

[kripteks]

You need new microcode for full mitigation of v4. Others are good.

I have already 20180425 microcode, my cpu Coffee Lake gen 8
dmesg: microcode updated early to revision 0x84, date = 2018-01-21
using kernel 4.18-rc1

What i can ?
Flash motherboard is necessary ?

[gavinguo]

I'm sorry I didn't notice that to read the slide needs to log in to the slideshare.com.

This is the slide pdf for people to download:

http://kernel.ubuntu.com/~gavinguo/spectre_v2/spectrev1v2v4-meltdownv3-gavin-guo.pdf

This is the page with the topic on 2018 Linux Conference, the slide can also be downloaded here:

https://lc32018.sched.com/event/ER9k/understanding-spectre-v2-and-how-the-vulnerability-impact-the-cloud-security-gavin-guo-canonical

This is the youtube video for people can understand Chinese:

主題分享：深入 Spectre V2 - VM 如何攻擊 Host？- (Gavin Guo)

https://www.youtube.com/watch?v=zYRI60uAwYc

We have a facebook club to discuss and share about the kernel materials, please join us:

Taiwan Linux Kernel Hackers

https://www.facebook.com/groups/twlinuxkernelhackers/