spectre_meltdown.md
· 1.3 KiB · Markdown
原始文件
* [Meltdown and Spectre - Vulnerabilities in modern computers leak passwords and sensitive data.](https://spectreattack.com/)
* [Project Zero team at Google: Reading privileged memory with a side-channel](https://googleprojectzero.blogspot.de/2018/01/reading-privileged-memory-with-side.html)
## Desktop
### Browsers
* https://support.google.com/faqs/answer/7622138#chrome
* https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
* https://blog.gpunktschmitz.de/381-firefox-automatisches-fuellen-von-login-forms-deaktivieren
### Microsoft
* [SpecuCheck - a Windows utility for checking the state of the software mitigations against Meltdown and Spectre](https://ionescu007.github.io/SpecuCheck/)
#### Windows 10
* [KB4056892 (OS Build 16299.192)](https://support.microsoft.com/en-us/help/4056892/windows-10-update-kb4056892)
## Servers / Cloud
* [Meltdown and Spectre kernel update per operating system](https://docs.ovh.com/fr/dedicated/meltdown-spectre-kernel-update-per-operating-system/)
### VMWare
* https://lists.vmware.com/pipermail/security-announce/2018/000397.html
### KVM
* https://twitter.com/olesovhcom/status/949214617510842369
### Microsoft
* [Microsoft: Guidance to mitigate speculative execution side-channel vulnerabilities](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002)
- Meltdown and Spectre - Vulnerabilities in modern computers leak passwords and sensitive data.
- Project Zero team at Google: Reading privileged memory with a side-channel
Desktop
Browsers
- https://support.google.com/faqs/answer/7622138#chrome
- https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
- https://blog.gpunktschmitz.de/381-firefox-automatisches-fuellen-von-login-forms-deaktivieren