- Meltdown and Spectre - Vulnerabilities in modern computers leak passwords and sensitive data.
- Project Zero team at Google: Reading privileged memory with a side-channel
- xorlgr - Thoughts on Meltdown & Spectre
- BSI: Prozessor-Schwachstellen: Spectre und Meltdown
Desktop
Browsers
- https://support.google.com/faqs/answer/7622138#chrome
- https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
- https://blog.gpunktschmitz.de/381-firefox-automatisches-fuellen-von-login-forms-deaktivieren
Microsoft
Windows 10
Apple
iOS
- 11.2: https://support.apple.com/de-de/HT208334
- 11.2.1: https://support.apple.com/de-de/HT208334
- 11.2.2: https://support.apple.com/en-us/HT208401
macOS
Android
Servers / Cloud
VMWare
KVM
Microsoft
Ubuntu
Random Links
- Known bugs sitting in upstream LTS kernels
- Merged patch in < 4.14
- instead of reworked or reworked and renamed variant
- Meltdown and Spectre in Debian - 10.01.2018
- Meltdown: What’s the performance impact and how to minimise it?
- iPhone performance benchmarks after Spectre security update
- Inside Meltdown and Spectre: Interview with Anders Fogh, Meltdown und Spectre: Mitentdecker warnt vor erstem Schadcode
- Exploit: EDB-ID 43490 - Multiple CPUs - Information Leak Using Speculative Execution
- Meltdown Proof-of-Concept
- Multiple CPUs - 'Spectre' Information Disclosure