<br /><a href="http://business.financialpost.com/technology/how-a-22-year-old-discovered-the-worst-chip-flaws-in-history">http://business.financialpost.com/technology/how-a-22-year-old-discovered-the-worst-chip-flaws-in-history</a><br /><br />JohnJ<br /><br /><hr /><strong>Subject:</strong> Re: [kwlug-disc] Meltdown and Spectre, on Firefox<br /><strong>Date:</strong> Mon, 08 Jan 2018 13:52:47 -0500<br /><strong>From:</strong> <jvj@golden.net><br /><strong>To:</strong> KWLUG discussion <kwlug-disc@kwlug.org><br /><strong>Reply-To:</strong> KWLUG discussion <kwlug-disc@kwlug.org><br /><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<p>Alex K - You can go easy on the software folks on this one.<br />AFAIK <br />The Meltdown and Spectre vulnerabilities have their roots (:/) in the processor hardware.<br />And Yes - they are getting better at discovering vulnerabilities. <br />Someone suspected these vulnerabilities and went looking for them.<br />JohnJ<br /><br /><br /></p>
<hr /><strong>Subject:</strong> Re: [kwlug-disc] Meltdown and Spectre, on Firefox<br /><strong>Date:</strong> Mon, 8 Jan 2018 12:02:37 -0500<br /><strong>From:</strong> Alex K <korobkin+kwl@gmail.com><br /><strong>To:</strong> KWLUG discussion <kwlug-disc@kwlug.org><br /><strong>Reply-To:</strong> KWLUG discussion <kwlug-disc@kwlug.org><br />
<div dir="ltr">Don't forget WPA2 crack. Are we getting better at discovering vulnerabilities or at building way too complex software?</div>
<div class="gmail_extra"><br />
<div class="gmail_quote">On Mon, Jan 8, 2018 at 11:28 AM, Khalid Baheyeldin <span><<a href="mailto:kb@2bits.com">kb@2bits.com</a>></span> wrote:<br />
<blockquote class="gmail_quote" style="margin: 0     0     0     .8ex; border-left: 1px     #ccc     solid; padding-left: 1ex;">
<div dir="ltr">
<div>
<div>One thing I noticed is that vulnerabilities just keep getting worse every year.<br /><br /></div>
We had Heartbleed in OpenSSL, and now we have the really scary Meltdown (Intel) and Spectre (multiple).<br /><br /></div>
Your browser can also be affected! Carefully crafted Javascript loaded from a web site can be made to exploit some of these.<br /><br />If you are running Firefox ESR, you are not "less at risk".<br />If you are running Firefox 57, you can disable a parameter, if you have not applied the update that was pushed a few days ago.<br /><br /><a href="https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/">https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/</a><br clear="all" />
<div>
<div>
<div><br /><a href="https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/">https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/</a><span class="HOEnZb"><span class="HOEnZb"><span style="color: #888888;"><br />-- <br /></span></span></span>
<div class="m_-7546740858930478138gmail_signature">Khalid M. Baheyeldin<br /><a href="http://2bits.com">2bits.com</a>, Inc.<br />Fast Reliable Drupal<br />Drupal optimization, development, customization and consulting.<br />Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra<br />Simplicity is the ultimate sophistication. --   Leonardo da Vinci<br />For every complex problem, there is an answer that is clear, simple, and wrong." -- H.L. Mencken</div>
</div>
</div>
</div>
</div>
<br />_______________________________________________<br /> kwlug-disc mailing list<br /><a href="mailto:kwlug-disc@kwlug.org">kwlug-disc@kwlug.org</a><br /><a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org">http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br /><br /></blockquote>
</div>
</div>
<p> </p>
<div> </div>
<p> </p>
<div> </div>