waja / gist:8236ad04d8c24cc68abe1608983f807a

Last active 3 months ago

Like 0

Revision cf8d7ea5017c6d74b7947ed400bc825f2e2fadd5

spectre_meltdown.md · 1.3 KiB · Markdown Raw

* [Meltdown and Spectre - Vulnerabilities in modern computers leak passwords and sensitive data.](https://spectreattack.com/)
* [Project Zero team at Google: Reading privileged memory with a side-channel](https://googleprojectzero.blogspot.de/2018/01/reading-privileged-memory-with-side.html)

## Desktop

### Browsers

* https://support.google.com/faqs/answer/7622138#chrome
* https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
* https://blog.gpunktschmitz.de/381-firefox-automatisches-fuellen-von-login-forms-deaktivieren

### Microsoft

* [SpecuCheck - a Windows utility for checking the state of the software mitigations against Meltdown and Spectre](https://ionescu007.github.io/SpecuCheck/)

#### Windows 10

* [KB4056892 (OS Build 16299.192)](https://support.microsoft.com/en-us/help/4056892/windows-10-update-kb4056892)

## Servers / Cloud

* [Meltdown and Spectre kernel update per operating system](https://docs.ovh.com/fr/dedicated/meltdown-spectre-kernel-update-per-operating-system/)

### VMWare

* https://lists.vmware.com/pipermail/security-announce/2018/000397.html

### KVM

* https://twitter.com/olesovhcom/status/949214617510842369

### Microsoft

* [Microsoft: Guidance to mitigate speculative execution side-channel vulnerabilities](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002)

Desktop

Browsers

Microsoft

SpecuCheck - a Windows utility for checking the state of the software mitigations against Meltdown and Spectre

Windows 10

KB4056892 (OS Build 16299.192)

Servers / Cloud

Meltdown and Spectre kernel update per operating system