Discussion:
[NF] Meltdown and Spectre CPU Flaw Information
Ken Dibble
2018-01-04 17:27:18 UTC
Permalink
Hi folks,

Ask Woody has a very thorough report on this, with links to more information.

We all need to be fully informed about this; it is going to affect everybody.

https://www.askwoody.com/

Ken Dibble
www.stic-cil.org


_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-04 17:45:43 UTC
Permalink
Nah! - nothing to worry about here - just an old government backdoor
into - er - everything.
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/fe2dc23c-7906-fbf2-be1e-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
José Enrique Llopis
2018-01-05 19:49:54 UTC
Permalink
A very interesting and realistic report on this subject


https://researchcenter.paloaltonetworks.com/2018/01/threat-brief-meltdown-sp
ectre-vulnerabilities/?utm_source=Adobe+Campaign+-+ACS&utm_medium=email&utm_
campaign=20180105.NL.unit42.PANW_subs.threat.global.xx.xx&deliveryName=DM170
8



Jose Enrique Llopis



-----Mensaje original-----
De: ProFox [mailto:profox-***@leafe.com] En nombre de AndyHC
Enviado el: jueves, 04 de enero de 2018 18:46
Para: ***@leafe.com
Asunto: Re: [NF] Meltdown and Spectre CPU Flaw Information

Nah! - nothing to worry about here - just an old government backdoor
into - er - everything.
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@LENOVO1
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ted Roche
2018-01-04 18:17:20 UTC
Permalink
Also, kudos to Microsoft for shipping their patches a week early, and
spontaneously rebooting idle Windows workstations while people were
freaking out over the new exploits. Good job!
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4u-JC7-0fbXRvRX4gyMCgz+UaV53jU7eA9VEx5Uh-***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ken Dibble
2018-01-04 18:35:13 UTC
Permalink
I just can't wait to see what it's going to do to my highly
virtualized network--if I ever decide to let it through. Probably a
smaller version of what it's already started to do to some commercial
cloud systems.

Windows Automatic Updates: Just Say No. (TM)
Post by Ted Roche
Also, kudos to Microsoft for shipping their patches a week early, and
spontaneously rebooting idle Windows workstations while people were
freaking out over the new exploits. Good job!
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Richard Kaye
2018-01-04 18:58:49 UTC
Permalink
The exploit allows VMs to go into the memory space of other VMs. Very bad. Unless you don't have any sensitive info that needs to stay that way.

--

rk

-----Original Message-----
From: ProfoxTech [mailto:profoxtech-***@leafe.com] On Behalf Of Ken Dibble
Sent: Thursday, January 04, 2018 1:35 PM
To: ***@leafe.com
Subject: Re: [NF] Meltdown and Spectre CPU Flaw Information

I just can't wait to see what it's going to do to my highly
virtualized network--if I ever decide to let it through. Probably a
smaller version of what it's already started to do to some commercial
cloud systems.

Windows Automatic Updates: Just Say No. (TM)
Post by Ted Roche
Also, kudos to Microsoft for shipping their patches a week early, and
spontaneously rebooting idle Windows workstations while people were
freaking out over the new exploits. Good job!
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@MWHPR10MB1774.namprd10.prod.outlook.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ken Dibble
2018-01-04 19:46:20 UTC
Permalink
Virtually everything we do here involves HIPAA-sensitive information,
but we have very robust perimeter defenses. I'm much more concerned
about a potential 30%+ performance loss in systems that are
constantly used by nearly a hundred people every day.
Post by Richard Kaye
The exploit allows VMs to go into the memory space of other VMs.
Very bad. Unless you don't have any sensitive info that needs to
stay that way.
--
rk
-----Original Message-----
Sent: Thursday, January 04, 2018 1:35 PM
Subject: Re: [NF] Meltdown and Spectre CPU Flaw Information
I just can't wait to see what it's going to do to my highly
virtualized network--if I ever decide to let it through. Probably a
smaller version of what it's already started to do to some commercial
cloud systems.
Windows Automatic Updates: Just Say No. (TM)
Post by Ted Roche
Also, kudos to Microsoft for shipping their patches a week early, and
spontaneously rebooting idle Windows workstations while people were
freaking out over the new exploits. Good job!
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Richard Kaye
2018-01-04 20:11:59 UTC
Permalink
If you are a HIPAA shop then I'm sure your IT team is paying proper attention to this.

--

rk

-----Original Message-----
From: ProfoxTech [mailto:profoxtech-***@leafe.com] On Behalf Of Ken Dibble
Sent: Thursday, January 04, 2018 2:46 PM
To: ***@leafe.com
Subject: RE: [NF] Meltdown and Spectre CPU Flaw Information

Virtually everything we do here involves HIPAA-sensitive information,
but we have very robust perimeter defenses. I'm much more concerned
about a potential 30%+ performance loss in systems that are
constantly used by nearly a hundred people every day.
Post by Richard Kaye
The exploit allows VMs to go into the memory space of other VMs.
Very bad. Unless you don't have any sensitive info that needs to
stay that way.
--
rk
-----Original Message-----
Sent: Thursday, January 04, 2018 1:35 PM
Subject: Re: [NF] Meltdown and Spectre CPU Flaw Information
I just can't wait to see what it's going to do to my highly
virtualized network--if I ever decide to let it through. Probably a
smaller version of what it's already started to do to some commercial
cloud systems.
Windows Automatic Updates: Just Say No. (TM)
Post by Ted Roche
Also, kudos to Microsoft for shipping their patches a week early, and
spontaneously rebooting idle Windows workstations while people were
freaking out over the new exploits. Good job!
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@MWHPR10MB1774.namprd10.prod.outlook.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ken Dibble
2018-01-05 14:21:12 UTC
Permalink
Post by Richard Kaye
If you are a HIPAA shop then I'm sure your IT team is paying proper attention to this.
Hah! I AM the IT team. (I have a couple of part-time assistants who
do help desk and maintenance, but I'm the CIO/SysAdmin/DBA/Systems
Analyst/Code Monkey/chief cook and bottle washer.

We have an internal "cloud"; we don't use any form of commercial
cloud storage for documents, or for any sensitive data (unless you
count email as such; and sensitive data sent by email is
password-encrypted in zip file attachments using 7-Zip). We do not
host public-facing websites or email servers.

I have a consultant that I use for extremely technical purposes. I've
requested their opinion on the issues.

I have a lot of stuff to research on my own, though, as I don't
accept anybody's opinion without evaluating it for myself to the best
of my ability.

My primary concern is what happens to the performance of VMWare when
they issue a patch for this, and what happens to the performance of
various vintages of MS Server that have been virtualized after I
apply patches to them.

Ken


_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Alan Bourke
2018-01-05 08:28:06 UTC
Permalink
These exploits are nasty but if they've been in Intel chips ever since they started implementing out-of-order execution in 1995 then surely if there was a serious real-world threat we would have seen it long ago?
--
Alan Bourke
alanpbourke (at) fastmail (dot) fm
Post by Ken Dibble
Virtually everything we do here involves HIPAA-sensitive information,
but we have very robust perimeter defenses. I'm much more concerned
about a potential 30%+ performance loss in systems that are
constantly used by nearly a hundred people every day.
Post by Richard Kaye
The exploit allows VMs to go into the memory space of other VMs.
Very bad. Unless you don't have any sensitive info that needs to
stay that way.
--
rk
-----Original Message-----
Sent: Thursday, January 04, 2018 1:35 PM
Subject: Re: [NF] Meltdown and Spectre CPU Flaw Information
I just can't wait to see what it's going to do to my highly
virtualized network--if I ever decide to let it through. Probably a
smaller version of what it's already started to do to some commercial
cloud systems.
Windows Automatic Updates: Just Say No. (TM)
Post by Ted Roche
Also, kudos to Microsoft for shipping their patches a week early, and
spontaneously rebooting idle Windows workstations while people were
freaking out over the new exploits. Good job!
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to affect
everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@webmail.messagingengine.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-05 09:28:07 UTC
Permalink
Post by Alan Bourke
These exploits are nasty but if they've been in Intel chips ever since they started implementing out-of-order execution in 1995 then surely if there was a serious real-world threat we would have seen it long ago?
Unless it's been very carefully done by state-level actors!


--- StripMime Report -- processed MIME parts ---
multipart/alternative
text/plain (text body -- kept)
text/html
---

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/8a512143-0659-2383-a0d7-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Alan Bourke
2018-01-05 13:57:04 UTC
Permalink
I think it's more of a side effect of the principle of out of order execution, not everything is a conspiracy.
--
Alan Bourke
alanpbourke (at) fastmail (dot) fm
Post by AndyHC
Post by Alan Bourke
These exploits are nasty but if they've been in Intel chips ever since they started implementing out-of-order execution in 1995 then surely if there was a serious real-world threat we would have seen it long ago?
Unless it's been very carefully done by state-level actors!
--- StripMime Report -- processed MIME parts ---
multipart/alternative
text/plain (text body -- kept)
text/html
---
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@webmail.messagingengine.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-05 17:04:49 UTC
Permalink
Post by Alan Bourke
I think it's more of a side effect of the principle of out of order execution, not everything is a conspiracy.
That's been going on for a very long time - IBM were doing instruction
pre-fetch in the 70's or early 80's


--- StripMime Report -- processed MIME parts ---
multipart/alternative
text/plain (text body -- kept)
text/html
---

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/54ed184e-138a-1b2b-633b-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Dave Crozier
2018-01-05 17:25:03 UTC
Permalink
Andy,
Memories from the past indeed!

We had similar when I moved from Singer to ICL on their 7502 Front End Processor (FEP).

I got involved in some coding in the dreaded PLAN programming language (Uuugh!) on their 1904s range of machines before the 2900 Microcode range was launched.

Dave




---------------------------------------------------------------
This communication and the information it contains is intended for the person or organisation to whom it is addressed. Its contents are confidential and may be protected in law. If you have received this e-mail in error you must not copy, distribute or take any action in reliance on it. Unauthorised use, copying or disclosure of any of it may be unlawful. If you have received this message in error, please notify us immediately by telephone or email.

Flexipol Packaging Ltd. has taken every reasonable precaution to minimise the risk of virus transmission through email and therefore any files sent via e-mail will have been checked for known viruses. However, you are advised to run your own virus check before opening any
attachments received as Flexipol Packaging Ltd will not in any event accept any liability whatsoever once an e-mail and/or any attachment is received.

It is the responsibility of the recipient to ensure that they have adequate virus protection.

Flexipol Packaging Ltd.
Unit 14 Bentwood Road
Carrs
Industrial Estate
Haslingden
Rossendale
Lancashire
BB4 5HH

Tel:01706-222792
Fax: 01706-224683
www.Flexipol.co.uk
---------------------------------------------------------------

Terms & Conditions:

Notwithstanding delivery and the passing of risk in the goods, the property in the goods shall not pass to the buyer until the seller
Flexipol Packaging Ltd. ("The Company") has received in cash or cleared funds payment in full of the price of the goods and all other goods agreed to be sold by the seller to the buyer for which payment is then due. Until such time as the property in the goods passes to the buyer, the buyer shall hold the goods as the seller's fiduciary agent and bailee and keep the goods separate from those of the buyer and third parties and properly stored protected and insured and identified as the seller's property but shall be entitled to resell or use the goods in the ordinary course of its business. Until such time as the property in the goods passes to the buyer the seller shall be entitled at any time

-----Original Message-----
From: ProFox [mailto:profox-***@leafe.com] On Behalf Of AndyHC
Sent: 05 January 2018 17:05
To: ***@leafe.com
Subject: Re: [NF] Meltdown and Spectre CPU Flaw Information
Post by Alan Bourke
I think it's more of a side effect of the principle of out of order execution, not everything is a conspiracy.
That's been going on for a very long time - IBM were doing instruction pre-fetch in the 70's or early 80's


--- StripMime Report -- processed MIME parts ---
multipart/alternative
text/plain (text body -- kept)
text/html
---

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/54ed184e-138a-1b2b-633b-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@EX2010-A-FPL.FPL.LOCAL
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ed Leafe
2018-01-05 15:00:02 UTC
Permalink
Post by Alan Bourke
These exploits are nasty but if they've been in Intel chips ever since they started implementing out-of-order execution in 1995 then surely if there was a serious real-world threat we would have seen it long ago?
The flaws were only discovered recently, so there hasn’t been enough time for exploits to become widespread. You can bet now that the track vectors are well known, they will be exploited more often.

Here’s an excellent explanation of the problem, and how the exploits work:

https://twitter.com/gsuberland/status/948907452786933762

It’s a long thread, but then again, it’s a complex issue.


-- Ed Leafe






_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/E9D1BAF7-DB07-4E6A-B4BC-***@leafe.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stup
Ed Leafe
2018-01-05 20:20:36 UTC
Permalink
Post by Ed Leafe
https://twitter.com/gsuberland/status/948907452786933762
It’s a long thread, but then again, it’s a complex issue.
And, of course, the required xkcd take on things:

https://xkcd.com/1938/


-- Ed Leafe






_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/F302B639-769D-4A40-B46F-***@leafe.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to
Ted Roche
2018-01-05 21:28:47 UTC
Permalink
Post by Ed Leafe
https://xkcd.com/1938/
And that's pretty much all you need to know!

Happy Friday, folks!
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4shYib17o5NVsGbhc5Yi4iQGDUXSG9UXQrTG-tj_-***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-06 09:38:58 UTC
Permalink
Post by Ed Leafe
https://xkcd.com/1938/
-- Ed Leafe
<snip>

Well ... if you *need* to believe that software can patch hardware
design faults....
and you also believe that these clever patches have either (a) been
written in 48 hours  or (b) been written well in advance *and* that's
not sinister....
- - - - -now I know I've got a Sinclair Scientific calculator and a
abacus around here somewhere.....

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/7a3dcfdf-930f-638f-5c5e-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages f
Laurie Alvey
2018-01-06 10:13:23 UTC
Permalink
This is similar to the old "What came first, viruses or antivirus software?"

Laurie
Post by Ed Leafe
https://xkcd.com/1938/
-- Ed Leafe
<snip>
Well ... if you *need* to believe that software can patch hardware design
faults....
and you also believe that these clever patches have either (a) been
written in 48 hours or (b) been written well in advance *and* that's not
sinister....
- - - - -now I know I've got a Sinclair Scientific calculator and a abacus
around here somewhere.....
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CAMvTR9f54ik9dM1bd=+7vjHSYm9=NM1SYzfpwzAWk1+***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ted Roche
2018-01-06 13:33:21 UTC
Permalink
Well, actually, he geek-splains...
Post by AndyHC
Post by Ed Leafe
https://xkcd.com/1938/
-- Ed Leafe
<snip>
Well ... if you *need* to believe that software can patch hardware design
faults....
It's a thumb in the dike, not a fix. Firmware updates and eventually
new chip designs are necessary.
Post by AndyHC
and you also believe that these clever patches have either (a) been written
in 48 hours
No, under the rules of limited disclosure, the discoverers notified
the hardware and software vendors some time ago, and the disclosure
has been under embargo until such time as Microsoft and Google and
Mozilla and Apple had patches ready to go.

or (b) been written well in advance *and* that's not
Post by AndyHC
sinister....
While it's getting a bit long in the tooth (2014), "Countdown to Zero
Day" by Kim Vetter has a good layperson's description of the zero day
marketplace, and the white-, black- and grey-hat hackers who make
serious money ($100,000 USD or more for root-level exploit, in some
cases). Is it sinister? Absolutely. Like all marketplaces, there are
good guys, there are bad guys and there are seriously-scary bad guys
(and governments). In this case, some geeks figured out an obscure way
to poke through the garbage pile that CPUs discard and build it into
an exploit. And chose to make white-hat money.
Post by AndyHC
- - - - -now I know I've got a Sinclair Scientific calculator and a abacus
around here somewhere.....
Once I get my C=64 hooked up to the internet, I'll be all set!
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4tWJH-R=boDrZA4U0e7_pCtmx5Ca1QxgH+***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ted Roche
2018-01-06 15:20:04 UTC
Permalink
Well ... if you *need* to believe that software can patch hardware design
faults....
It turns out, Microsoft very much agrees with Andy:

"6. Why aren't Windows Server 2008 and Windows Server 2012 platforms
getting an update? When can customers expect the fix?"

"Addressing a hardware vulnerability with a software update presents
significant challenges with some operating systems requiring extensive
architectural changes. Microsoft continues to work with affected chip
manufacturers and investigate the best way to provide mitigations."

from:

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002


I encourage you to re-read the two questions and the non-answer.
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4vwKejG4VwR+***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Alan Bourke
2018-01-06 18:27:46 UTC
Permalink
Can software fix a hardware design fault? No, but you can work potentially around it by causing the processor to work in a different way.

Also connecting a C64 to the internet is easier than you might think.
--
Alan Bourke
alanpbourke (at) fastmail (dot) fm
Post by Ted Roche
Well ... if you *need* to believe that software can patch hardware design
faults....
"6. Why aren't Windows Server 2008 and Windows Server 2012 platforms
getting an update? When can customers expect the fix?"
"Addressing a hardware vulnerability with a software update presents
significant challenges with some operating systems requiring extensive
architectural changes. Microsoft continues to work with affected chip
manufacturers and investigate the best way to provide mitigations."
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
I encourage you to re-read the two questions and the non-answer.
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@webmail.messagingengine.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-07 10:27:13 UTC
Permalink
Having read El Reg's pretty good article [
http://www.theregister.co.uk/2018/01/04/intel_amd_arm_cpu_vulnerability/
] I would just take issue with the suggestion that the vulnerability
could be breached by Javascript (malign code in e.g. a jpg maybe, but
not just javascript in a browser).
Putting on my very battered old security consultant's hat I would say
it's time to evaluate actual risk on a per situation basis:
 If you are a company that has foolishly put the family jewels on
someone else's computer because you believed in Clouds - then hope that
someone up in the clouds can fix it!
 If you are running heavily VM'd in-house then look out for your own
villains and try to air-gap your internet facing servers.
 If you've got a home PC don't worry about state-level actors - if they
want you they'll get you. Oh but don't let your browser remember
important passwords, and try to remember to switch off each time after
doing your online banking.

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/1fe853ad-bd91-a9e0-54ec-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see
Paul Hill
2018-01-07 16:27:11 UTC
Permalink
Old cheesy related joke:

Knock knock!
Branch prediction
Who's there?
--
Paul

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CADwx0+JGVDfo16xjPQ2PB9SnkrrSoPDhx7JQC-***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-07 16:43:58 UTC
Permalink
Post by Paul Hill
Knock knock!
Branch prediction
Who's there?
Like!


--- StripMime Report -- processed MIME parts ---
multipart/alternative
text/plain (text body -- kept)
text/html
---

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/1ee53486-8f62-1bb3-74ab-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ted Roche
2018-01-09 18:24:13 UTC
Permalink
Post by AndyHC
Having read El Reg's pretty good article [
http://www.theregister.co.uk/2018/01/04/intel_amd_arm_cpu_vulnerability/ ] I
would just take issue with the suggestion that the vulnerability could be
breached by Javascript (malign code in e.g. a jpg maybe, but not just
javascript in a browser).
Thanks for the reference. Linux machines were all updated Friday,
Windows machines under my supervision Friday and again Saturday.
Client LAMP boxes onsite were updated Friday, and VPS machines still
seem to be getting updates. Rebooted Friday and again Sunday
afternoon.
Post by AndyHC
Putting on my very battered old security consultant's hat I would say it's
If you are a company that has foolishly put the family jewels on someone
else's computer because you believed in Clouds - then hope that someone up
in the clouds can fix it!
I think clouds have been over-promised and people misunderstand what
they are supposed to be. A redundant array of inexpensive services
with graceful failover and no loss of data-in-motion is a great idea,
but only an idea for most.

On the other hand, I have web servers on the internet ("Don't call it
a cloud") that are hosted on VPS that are right in the middle of the
target, so I've been working on those.
Post by AndyHC
If you are running heavily VM'd in-house then look out for your own
villains and try to air-gap your internet facing servers.
I'm thinking that air-gapping your internet facing servers is a good idea.
Post by AndyHC
If you've got a home PC don't worry about state-level actors - if they want
you they'll get you. Oh but don't let your browser remember important
passwords, and try to remember to switch off each time after doing your
online banking.
And... right on time: "Windows Meltdown and Spectre patches: Now
Microsoft blocks security updates for some AMD based PCs:"
"Microsoft has paused nine operating system security updates after
complaints that they rendered some AMD PCs unbootable."

http://www.zdnet.com/article/meltdown-and-spectre-now-microsoft-blocks-security-updates-for-some-amd-based-devices/
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4s4KLJOm1t0hcqGh4Nhj7_nM=***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-13 13:23:07 UTC
Permalink
Knock knock!
Is there anybody there?

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/07602fc2-c51e-febf-0357-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Alan Bourke
2018-01-13 15:13:31 UTC
Permalink
I'm not.
--
Alan Bourke
alanpbourke (at) fastmail (dot) fm
Post by Paul Hill
Knock knock!
Is there anybody there?
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@webmail.messagingengine.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Desmond Lloyd
2018-01-14 13:06:00 UTC
Permalink
...just nod if you can hear me
Post by Alan Bourke
I'm not.
--
Alan Bourke
alanpbourke (at) fastmail (dot) fm
Post by Paul Hill
Knock knock!
Is there anybody there?
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CAAJXvaPQrK7B9oKEDLzynmWm8wbq_C=***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Paul H. Tarver
2018-01-15 17:54:56 UTC
Permalink
The lunatics are in my hall.

-----Original Message-----
From: ProfoxTech [mailto:profoxtech-***@leafe.com] On Behalf Of Desmond
Lloyd
Sent: Sunday, January 14, 2018 7:06 AM
To: ***@leafe.com
Subject: Re: hellooo-o

...just nod if you can hear me
Post by Alan Bourke
I'm not.
--
Alan Bourke
alanpbourke (at) fastmail (dot) fm
Post by Paul Hill
Knock knock!
Is there anybody there?
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/0f5101d38e29$f41e0dd0$dc5a2970$@tpcqpc.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ted Roche
2018-01-15 18:02:21 UTC
Permalink
Post by Paul H. Tarver
The lunatics are in my hall.
The paper holds their folded faces to the floor.
And every day the paper boy brings more.
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4vLgq8d5uduVq3bGsmmFPPHwRJ5V=Yn48eMns4bBj+***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Stephen Russell
2018-01-15 18:23:41 UTC
Permalink
Just nod if you can hear me
Is there anyone home?
Post by Ted Roche
Post by Paul H. Tarver
The lunatics are in my hall.
The paper holds their folded faces to the floor.
And every day the paper boy brings more.
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CAJidMYK0cjz+***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
John Weller
2018-01-13 15:39:40 UTC
Permalink
Felix

John Weller
01380 723235
07976 393631
Post by Richard Kaye
-----Original Message-----
AndyHC
Sent: 13 January 2018 13:23
Subject: hellooo-o
Knock knock!
Is there anybody there?
_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/000f01d38c84$bf00f8c0$3d02ea40$@johnweller.co.uk
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Kurt at VR-FX
2018-01-13 15:57:06 UTC
Permalink
OK - I give!

Felix Who?
Post by John Weller
Felix
John Weller
01380 723235
07976 393631
Post by Richard Kaye
-----Original Message-----
AndyHC
Sent: 13 January 2018 13:23
Subject: hellooo-o
Knock knock!
Is there anybody there?
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/4d2f9e4c-de86-9a3c-2985-***@optonline.net
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
John Weller
2018-01-13 16:09:57 UTC
Permalink
If he licks my ice cream I'll hit him :-)

John Weller
01380 723235
07976 393631
Post by Richard Kaye
-----Original Message-----
Kurt at VR-FX
Sent: 13 January 2018 15:57
Subject: Re: hellooo-o
OK - I give!
Felix Who?
Post by John Weller
Felix
John Weller
01380 723235
07976 393631
Post by Richard Kaye
-----Original Message-----
AndyHC
Sent: 13 January 2018 13:23
Subject: hellooo-o
Knock knock!
Is there anybody there?
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/001501d38c88$f566c3f0$e0344bd0$@johnweller.co.uk
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Man-wai Chang
2018-01-15 10:35:27 UTC
Permalink
Felix The Cat? The wonderful.... wonderful cat? :)
Felix
--
.~. Might, Courage, Vision. SINCERITY!
/ v \ 64-bit Fedora 25 Server Spin
/( _ )\ http://sites.google.com/site/changmw
^ ^ May the Force and farces be with you!

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CAGv=MJAF6DEA2MUnOaqNY8Mct0eWE5UoSkxXy_zmgVT++***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ted Roche
2018-01-13 16:13:09 UTC
Permalink
Post by Paul Hill
Knock knock!
Is there anybody there?
Present!
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4s0nbq3hRPjBgNEq5KiPn3me3s4uvfe=***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ed Leafe
2018-01-13 16:20:00 UTC
Permalink
Post by Paul Hill
Knock knock!
Is there anybody there?
Knock knock!
Branch prediction!
Who's there?


-- Ed Leafe







--- StripMime Report -- processed MIME parts ---
multipart/signed
text/plain (text body -- kept)
application/pgp-signature
---

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/51E9683F-15C7-4687-860D-***@leafe.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Jean MAURICE
2018-01-13 16:32:38 UTC
Permalink
I am here too !
The Foxil
Post by Paul Hill
Knock knock!
Is there anybody there?
_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/ef735e07-7e16-1ca6-e36c-***@wanadoo.fr
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages f
Paul H. Tarver
2018-01-13 21:03:56 UTC
Permalink
We gave at the office!

Paul

-----Original Message-----
From: ProfoxTech [mailto:profoxtech-***@leafe.com] On Behalf Of AndyHC
Sent: Saturday, January 13, 2018 7:23 AM
To: ***@leafe.com
Subject: hellooo-o

Knock knock!
Is there anybody there?

[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/011101d38cb2$068170d0$13845270$@tpcqpc.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
José Enrique Llopis
2018-01-13 23:02:06 UTC
Permalink
Greetings from Spain!!



-----Mensaje original-----
De: ProFox [mailto:profox-***@leafe.com] En nombre de AndyHC
Enviado el: sábado, 13 de enero de 2018 14:23
Para: ***@leafe.com
Asunto: hellooo-o

Knock knock!
Is there anybody there?

[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@LENOVO1
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Michael Oke, II
2018-01-14 01:33:18 UTC
Permalink
[image: MailTag]
Did the "No Soliciting" sign fall off my door?


-----------------------------
Michael Oke, II
***@gmail.com
661-349-6221
-----------------------------
Post by José Enrique Llopis
Greetings from Spain!!
-----Mensaje original-----
Enviado el: sábado, 13 de enero de 2018 14:23
Asunto: hellooo-o
Knock knock!
Is there anybody there?
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACBEV=W7pWDdXL4t1AN+nts5uGCjGpQ67VLnA7+***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the ob
Jean MAURICE
2018-01-14 08:59:41 UTC
Permalink
a long time ago, I read this joke :

"Knock, knock."
"Who's there?"
very long pause….
"Java."

Have a nice week-end !
The Foxil
Post by Paul Hill
Knock knock!
Is there anybody there?
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/4986458b-d075-c7a2-e3df-***@wanadoo.fr
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too
Fletcher Johnson
2018-01-15 18:54:54 UTC
Permalink
Andy,

Ach....

Ach who?

Guesuntight!

Fletcher


Fletcher Johnson
***@Yahoo.com
LinkedIn.com/in/FletcherJohnson
beknown.com/FletcherJohnson
twitter.com/fletcherJ
strava.com/athletes/fletcherjohnson
408-946-0960 - work
408-781-2345 - cell


-----Original Message-----
From: ProFox [mailto:profox-***@leafe.com] On Behalf Of AndyHC
Sent: Saturday, January 13, 2018 5:23 AM
To: ***@leafe.com
Subject: hellooo-o

Knock knock!
Is there anybody there?

[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/089a01d38e32$55a78fb0$00f6af10$@yahoo.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Ted Roche
2018-01-20 12:14:50 UTC
Permalink
Post by Ted Roche
Post by AndyHC
Having read El Reg's pretty good article [
http://www.theregister.co.uk/2018/01/04/intel_amd_arm_cpu_vulnerability/ ] I
would just take issue with the suggestion that the vulnerability could be
breached by Javascript (malign code in e.g. a jpg maybe, but not just
javascript in a browser).
Thanks for the reference. Linux machines were all updated Friday,
Windows machines under my supervision Friday and again Saturday.
Client LAMP boxes onsite were updated Friday, and VPS machines still
seem to be getting updates. Rebooted Friday and again Sunday
afternoon.
And my hosting provider (Linode, good experience) has updated their
host machines, requiring another very brief restart on each of my
hosted boxes.
Post by Ted Roche
Post by AndyHC
If you've got a home PC don't worry about state-level actors - if they want
you they'll get you. Oh but don't let your browser remember important
passwords, and try to remember to switch off each time after doing your
online banking.
And... right on time: "Windows Meltdown and Spectre patches: Now
Microsoft blocks security updates for some AMD based PCs:"
"Microsoft has paused nine operating system security updates after
complaints that they rendered some AMD PCs unbootable."
http://www.zdnet.com/article/meltdown-and-spectre-now-microsoft-blocks-security-updates-for-some-amd-based-devices/
And, apparently, security never sleeps, as Microsoft released an
updated advisory on Friday night (~5 PM Seattle time, hmmm...) that it
was okay to patch AMD machines again.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002

Perhaps I'll wait a while on this one, and find out how it works for others...
--
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/CACW6n4veeSrNOQ10htBaUMSp__6mooARf1j=+gqcE++m=***@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Kurt at VR-FX
2018-01-06 16:57:27 UTC
Permalink
Ed - that comic is pretty wild!

Will admit - I never heard of this RowHammer concept! Is it for Real? I
suspect so...

-K-
Post by Ed Leafe
Post by Ed Leafe
https://twitter.com/gsuberland/status/948907452786933762
It’s a long thread, but then again, it’s a complex issue.
https://xkcd.com/1938/
-- Ed Leafe
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/8243e4d4-94e3-2afe-3f6d-***@optonline.net
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to s
Ed Leafe
2018-01-06 17:39:50 UTC
Permalink
Will admit - I never heard of this RowHammer concept! Is it for Real? I suspect so...
Oh, they don't have Google in your area? Too bad!

http://lmgtfy.com/?q=rowhammer


-- Ed Leafe







--- StripMime Report -- processed MIME parts ---
multipart/signed
text/plain (text body -- kept)
application/pgp-signature
---

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/664EDE64-7279-4E76-A1AA-***@leafe.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Kurt at VR-FX
2018-01-06 17:46:01 UTC
Permalink
Yes - I guess I could have answered my own question. I was mostly
shocked at the concept.

And - no - its SO Damn Cold up here in the NorthEast right now - that
even Google is Frozen and doesn't work!!!

:-)

-K-
Post by Ed Leafe
Will admit - I never heard of this RowHammer concept! Is it for Real? I suspect so...
Oh, they don't have Google in your area? Too bad!
http://lmgtfy.com/?q=rowhammer
-- Ed Leafe
--- StripMime Report -- processed MIME parts ---
multipart/signed
text/plain (text body -- kept)
application/pgp-signature
---
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/fb559a43-6747-455d-cc3a-***@optonline.net
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Paul H. Tarver
2018-01-05 22:18:42 UTC
Permalink
My thoughts exactly. I usually read what the media says ("AAAAAHHHH! REPLACE
ALL COMPUTERS TODAY!") and know that the reality is more like "Keep Calm And
Patch On!"

Paul H. Tarver
Tarver Program Consultants, Inc.


-----Original Message-----
From: ProfoxTech [mailto:profoxtech-***@leafe.com] On Behalf Of Alan
Bourke
Sent: Friday, January 05, 2018 2:28 AM
To: ***@leafe.com
Subject: Re: [NF] Meltdown and Spectre CPU Flaw Information

These exploits are nasty but if they've been in Intel chips ever since they
started implementing out-of-order execution in 1995 then surely if there was
a serious real-world threat we would have seen it long ago?



--
Alan Bourke
alanpbourke (at) fastmail (dot) fm
Post by Ken Dibble
Virtually everything we do here involves HIPAA-sensitive information,
but we have very robust perimeter defenses. I'm much more concerned
about a potential 30%+ performance loss in systems that are constantly
used by nearly a hundred people every day.
Post by Richard Kaye
The exploit allows VMs to go into the memory space of other VMs.
Very bad. Unless you don't have any sensitive info that needs to stay
that way.
--
rk
-----Original Message-----
Sent: Thursday, January 04, 2018 1:35 PM
Subject: Re: [NF] Meltdown and Spectre CPU Flaw Information
I just can't wait to see what it's going to do to my highly
virtualized network--if I ever decide to let it through. Probably a
smaller version of what it's already started to do to some commercial
cloud systems.
Windows Automatic Updates: Just Say No. (TM)
Post by Ted Roche
Also, kudos to Microsoft for shipping their patches a week early,
and spontaneously rebooting idle Windows workstations while people
were freaking out over the new exploits. Good job!
Post by Ken Dibble
Hi folks,
Ask Woody has a very thorough report on this, with links to more
information.
We all need to be fully informed about this; it is going to
affect everybody.
https://www.askwoody.com/
Ken Dibble
www.stic-cil.org
[excessive quoting removed by server]

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/007501d38673$29a84150$7cf8c3f0$@tpcqpc.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
Gene Wirchenko
2018-01-05 22:59:23 UTC
Permalink
Post by Alan Bourke
These exploits are nasty but if they've been in Intel chips ever
since they started implementing out-of-order execution in 1995 then
surely if there was a serious real-world threat we would have seen it long ago?
No.

It is possible that the Black Hats do not know every weakness of systems.

[snip]

Sincerely,

Gene Wirchenko


_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/***@mtlp000085
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
AndyHC
2018-01-05 09:24:16 UTC
Permalink
Post by Ted Roche
Also, kudos to Microsoft for shipping their patches a week early, and
spontaneously rebooting idle Windows workstations while people were
freaking out over the new exploits. Good job!
...  it's almost as if they're saying "here's one I prepared earlier!"   <g>
<snip>

_______________________________________________
Post Messages to: ***@leafe.com
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/7bc6e9b9-472b-1799-7ece-***@hawthorncottage.com
** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those l
Loading...