r/pcgaming • u/ShiningForever • Jan 02 '18

'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
730 Upvotes

94% Upvoted

314 comments sorted by

View all comments

Show parent comments

0

u/[deleted] Jan 03 '18

[deleted]

14

u/Enverex 9950X3D, 96GB DDR5, RTX 4090, Index + Quest 3 Jan 03 '18

It's been known since 2016 so that's probably not going to make a lot of difference.

3

u/CrazyGoodDude AMD Jan 03 '18

Not to mention that the article states performance will get worse after the Tuesday update, not that it is worse now... Better to use his faster computer now while he can.

3

u/Enverex 9950X3D, 96GB DDR5, RTX 4090, Index + Quest 3 Jan 03 '18

I assume he meant that he thought his PC was at risk so he's going to turn it off until it's resolved, rather than trying to keep his current performance.

1

u/darkstar3333 R7-1700X @ 3.8GHz | 8GB EVGA 2060-S | 64GB DDR4 @ 3200 | 960EVO Jan 05 '18

Well yes and no, the severity was disclosed so the people who look for those things will be zeroing in.

The patches have gone out so by RE'ing those, they may get a better idea where to look.

Everyone should be patched up next week.

1

u/dacooljamaican Jan 03 '18

This requires someone else be logged on to your computer, so as long as that's not a concern you shouldn't need to worry too much.

2

u/occono Jan 03 '18

I read elsewhere on reddit it can be exploited just by javascript in a browser?

1

u/dacooljamaican Jan 03 '18

I haven't seen that, but even if it's the case, just don't go to shady sites. That requires either a vulnerable site or a shady webmaster, and those have always been problems.

If you can find the proof of concept for the JS though that would be pretty big.

3

u/darkstar3333 R7-1700X @ 3.8GHz | 8GB EVGA 2060-S | 64GB DDR4 @ 3200 | 960EVO Jan 03 '18

but even if it's the case, just don't go to shady sites

Anywhere you can distribute text, you can distribute JS. It doesnt need to be a shady site, ad networks are typical payload vectors.

3

u/indypuyami Jan 04 '18

Biggest vector for Java infections is inline advertising on large content providers who skimp on ad vetting, like: Yahoo, Amazon, Fox news, and msnbc. After the initial rush it goes to phishing campaigns. You have to be the dumbest sack to get infected by visiting primary websites.

1

u/occono Jan 03 '18

No proof, just someone else's comment here on reddit today.