News for hackers. Stuff that matters.

A comment on About speculative execution vulnerabilities in ARM-based and Intel CPUs.

Re:About speculative execution vulnerabilities in ARM-based ... by blinkingled on Thursday January 04, 2018 @08:12PM (#16075665)
So nothing required on hardware side? I was under the impression that OEMs need to send out BIOS/UEFI Firmware updates or at least CPU Microcode updates but doesn't look like Apple is planning to do so.
[ Parent | on HN ]
Re:About speculative execution vulnerabilities in ARM-based ... by kridsdale on Thursday January 04, 2018 @09:34PM (#16076037)
MacOS update packages include any relevant firmware updates at the same time.
[ Parent | on HN ]
Re:About speculative execution vulnerabilities in ARM-based ... by earenndil on Thursday January 04, 2018 @09:55PM (#16076120)
At least in the linux kernel, it was patched by essentially throwing off the branch predictor following every syscall, which didn't require any hardware, bios, or microcode patches.
[ Parent | on HN ]
Re:About speculative execution vulnerabilities in ARM-based ... by nly on Thursday January 04, 2018 @08:24PM (#16075724)
Microcode updates will come down the pipe to users as OS updates as Intel uses these channels.
[ Parent | on HN ]
Re:About speculative execution vulnerabilities in ARM-based ... by blinkingled on Thursday January 04, 2018 @08:45PM (#16075820)
Yeah I think if a UEFI update comes down it might bring the mitigated uCode with it. Just got to boot into USB macOS installation - don't think Boot Camp users get those updates.
[ Parent | on HN ]