Live data from Hacker News

Meltdown Update Kernel doesnt boot

bugs.launchpad.net

51–60 of 205 posts

Re: Meltdown Update Kernel doesnt boot

#51
post #20

Would this entire Meltdown/Spectre thing count as the biggest mess-up of computing history? When yesterday the PoC repo was posted here, the spy.mp4 demo video gave me some chills. And now I can't update my OS before making an installation USB because Canonical can't just follow Linus' releases. Thanks.

I watched that spy demo. How does it know what memory location contains the password being typed?

I'm assuming if you know either common byte patterns or string patterns you might be able to figure out where the password string is being allocated and watch that area of memory for changes.

Re: Meltdown Update Kernel doesnt boot

#52

Earlier quoted context omitted.

They consider a bug that renders the OS unable to boot a "low" urgency!?!

Sorry fam - security issues are more important ¯\_(ツ)_/¯

I think it's fair to say build 108 has no security issues :P in fact, it's the most secure one yet.

Re: Meltdown Update Kernel doesnt boot

#54
post #5

Earlier quoted context omitted.

Doesn't this affect all of their CPUs going a long way back? And how do you recall embedded or laptop CPUs, which are often soldered in-place? A recall would be great, but there's no way they'd be able to do it. Vehicle recalls are a bit different because they impact physical safety. Digital safety doesn't get the same priority.

even if it affects all speculative CPUs, if this happened in the car world, all the cars would be recalled. Not saying that is practical in computer world...just continuing with the analogy. Spectre/Meltdown is a wakeup call for many things, one of them probably being for computer manufacturers to not solder the CPU to the Motherboard and for the x86 world to stick with a standard socket, to facilitate replacing part…

> "Spectre/Meltdown is a wakeup call for many things, one of them probably being for computer manufacturers to not solder the CPU to the Motherboard"

Good luck with that. A large portion of affected CPUs/SoCs are in mobile devices and ultrabooks. Socketed chips simply won't fly in those kinds of devices.

Re: Meltdown Update Kernel doesnt boot

#55
post #2

it's the fault of Intel, why don't they recall all the CPU? just like vehicle company

Are you suggesting that we recall the great bulk of modern CPU's? Like, literally gut everyone's computers, including those in data centers and running critical infrastructure, until replacements are eventually manufactured?

Or did you mean something else?

Re: Meltdown Update Kernel doesnt boot

#56

Earlier quoted context omitted.

Wait if a court forces Intel to replace processors with a safe one does that mean I get new macbook?

I can't imagine a court doing anything. The cost to intel is simply to high, and its not like they were negligent given that ARM/POWER/etc are all vulnerable to some extent too. This whole thing is the equivalent of discovering that if someone throws enough nails on the road your car will blow a tire, spin out of control and kill you. With the kneejerk reaction of trying to fill everyone's tires with concrete to avoi…

I agree with you that the courts probably won't do much, but you should not group all the CPU manufacturers together. Meltdown mainly (only?) affects Intel. It's spectre that affects basically everyone.

Re: Meltdown Update Kernel doesnt boot

#57

This arch/x86/events/intel/ds.c fix is unlikely to have rendered too many things unbootable. I missed ds.c entirely when doing the original implementation. I can't fault the nice folks at Canonical for mis-merging a tiny hunk like this. It really only affects pretty specific hardware anyway.

What hardware does it effect?

Re: Meltdown Update Kernel doesnt boot

#58
post #20

Would this entire Meltdown/Spectre thing count as the biggest mess-up of computing history? When yesterday the PoC repo was posted here, the spy.mp4 demo video gave me some chills. And now I can't update my OS before making an installation USB because Canonical can't just follow Linus' releases. Thanks.

"biggest" by number of affected CPUs? very possibly, yes. the march of time has that effect: there are more cpus potentially and actually affected, worldwide, than at any other time in history.

"biggest" by net financial loss to a single entity? I dunno. How much did that failed NSA launch cost the state again?

Re: Meltdown Update Kernel doesnt boot

#59
post #45

Earlier quoted context omitted.

from https://github.com/IAIK/meltdown/ : https://cdn.rawgit.com/IAIK/meltdown/master/videos/spy.mp4

YouTube mirror for mobile users anyone?

https://www.youtube.com/watch?v=RbHbFkh6eeE

Re: Meltdown Update Kernel doesnt boot

#60
post #28
post #18

Earlier quoted context omitted.

Is this endangering the life of anyone? A car manufacturer doesn't do a recall if personal safety isn't at risk.

Eh, sometimes they do for the sake of brand preservation. If personal safety is at risk they will do a recall, either voluntary or mandated by the NHTSA.

But they have yet to do any recalls for cars that are susceptible to being broken into using a slim jim.
Post reply on HN