Update your computers, ASAP.

OOC General Discussion

Moderators: Active DMs, Forum Moderators

Post Reply
User avatar
BegoneThoth
Posts: 1589
Joined: Fri Oct 06, 2017 5:20 am

Update your computers, ASAP.

Post by BegoneThoth » Fri Jan 05, 2018 6:00 am

A new and massive exploit has been found that works on basically every CPU (and therefore device and cell phone and anything made since the mid 90's). Technical information here.

https://meltdownattack.com/
Questions & Answers

Am I affected by the bug?

Most certainly, yes.

Can I detect if someone has exploited Meltdown or Spectre against me?

Probably not. The exploitation does not leave any traces in traditional log files.

Can my antivirus detect or block this attack?

While possible in theory, this is unlikely in practice. Unlike usual malware, Meltdown and Spectre are hard to distinguish from regular benign applications. However, your antivirus may detect malware which uses the attacks by comparing binaries after they become known.

What can be leaked?

If your system is affected, our proof-of-concept exploit can read the memory content of your computer. This may include passwords and sensitive data stored on the system.

Has Meltdown or Spectre been abused in the wild?

We don't know.
What do you do?

Run windows update. On windows 10 you want to check your windows update history and are most likely looking for KB4056892. On 8 you want KB4056898. On 7 you want KB4056897. If its not there check your anti-virus's website as some AV need to be updated before the fix goes in.

Linux or Mac, consult your whatever. If you're on the former you likely know what this is already and if you're on the latter you either also know how to update yourself or are better off waiting for your computer to do it for you.

This isn't a joke, the following video isn't a simulation, this is a real thing.

https://www.youtube.com/watch?v=RbHbFkh6eeE
\

User avatar
Commissar
Posts: 288
Joined: Wed Nov 25, 2015 12:48 pm
Location: Australia

Re: Update your computers, ASAP.

Post by Commissar » Fri Jan 05, 2018 6:31 am

Thanks for the heads-up!
May you live in interesting times.
Manticore, on Sun Elves wrote:Yeah, I'm pretty sure the racism is like a mating ritual or something. Like plumes on birds.

User avatar
Dovesong
Posts: 140
Joined: Mon Sep 25, 2017 10:10 am

Re: Update your computers, ASAP.

Post by Dovesong » Fri Jan 05, 2018 1:53 pm

Mine is demanding I update my BIOS. Is that normal?
In'iira - Woman of Many Talents.

Lily-Rose - Daughter of the storm

User avatar
Karris the Anarchist
Arelith Silver Supporter
Arelith Silver Supporter
Posts: 152
Joined: Thu Nov 24, 2016 11:21 pm

Re: Update your computers, ASAP.

Post by Karris the Anarchist » Fri Jan 05, 2018 2:29 pm

Dovesong wrote:Mine is demanding I update my BIOS. Is that normal?
I've never seen any PC config 'demand' a bios update - motherboard manufacturers recommend it occasionally, but usually such things are reserved for power users since updates normally add support for some fringe tech architecture. Which program is telling you to update your bios?
That which doesn't kill you, simply makes you... stranger.

User avatar
BegoneThoth
Posts: 1589
Joined: Fri Oct 06, 2017 5:20 am

Re: Update your computers, ASAP.

Post by BegoneThoth » Fri Jan 05, 2018 5:06 pm

Dovesong wrote:Mine is demanding I update my BIOS. Is that normal?
What is, windows update? Or some other utility?
\

User avatar
Opustus
Posts: 818
Joined: Tue Jun 13, 2017 9:07 pm

Re: Update your computers, ASAP.

Post by Opustus » Fri Jan 05, 2018 5:17 pm

Heatenings!

I checked my Windows update history but can't find KB4056892, although my status is up to date.

The latest updates are, in this order:

Removed!
EDIT: Oh shit, should I even be giving this type of information on the internet?
Characters: all poor babies suffering from neglect

User avatar
BegoneThoth
Posts: 1589
Joined: Fri Oct 06, 2017 5:20 am

Re: Update your computers, ASAP.

Post by BegoneThoth » Fri Jan 05, 2018 8:13 pm

Uh if you arnt getting updates check your settings to make sure you arnt deferring security updates (put it to zero days) and that you're using targeted updates. It's in windows 10 update settings (advanced or something).

Not at home atm to go through and check. But it's there.
\

User avatar
Opustus
Posts: 818
Joined: Tue Jun 13, 2017 9:07 pm

Re: Update your computers, ASAP.

Post by Opustus » Fri Jan 05, 2018 9:01 pm

Sure I will find it. Thanks :)
Characters: all poor babies suffering from neglect

CragOrion
Arelith Supporter
Arelith Supporter
Posts: 889
Joined: Tue Sep 09, 2014 2:52 am

Re: Update your computers, ASAP.

Post by CragOrion » Sat Jan 06, 2018 12:31 am

If you're not finding it, don't stress too much. Anybody on windows 10 has probably been automatically updated and didn't even notice. Windows 7 and vista users should get automatically updated on tuesday

Celestia Silverarms
Karynn Eldafire


User avatar
Dovesong
Posts: 140
Joined: Mon Sep 25, 2017 10:10 am

Re: Update your computers, ASAP.

Post by Dovesong » Sat Jan 06, 2018 4:31 am

BegoneThoth wrote:
Dovesong wrote:Mine is demanding I update my BIOS. Is that normal?
What is, windows update? Or some other utility?
The windows update service. I get the little popup from my Settings in the lower corner that updates couldn't properly install, and when I check it tells me I have to update my BIOS. I'm running an HP Pavilion.
In'iira - Woman of Many Talents.

Lily-Rose - Daughter of the storm

User avatar
BegoneThoth
Posts: 1589
Joined: Fri Oct 06, 2017 5:20 am

Re: Update your computers, ASAP.

Post by BegoneThoth » Sat Jan 06, 2018 4:37 am

I don't know why that would be, but HP sounds really miserable.

https://support.hp.com/us-en/document/c00007682 Desktop

https://support.hp.com/ca-en/document/c00042629 Laptop

Make 100% super sure you follow BIOS updating directions exactly and quit as many open apps as you can before you start the update.
\

Black Wendigo
Posts: 663
Joined: Sat Sep 13, 2014 4:09 am

Re: Update your computers, ASAP.

Post by Black Wendigo » Sat Jan 06, 2018 6:37 am

I"ve never encountered a case where the windows updater required me to update my BIOS. However it's a good thing to keep it up to date anyways (they don't change very often ).

And as BegoneTHoth has stated, be very careful and follow the directions carefully. It is not much different from udpating the OS, but you do not want a botched BIOS update.

WinkinBlinkin
Arelith Silver Supporter
Arelith Silver Supporter
Posts: 236
Joined: Sat May 21, 2016 5:29 pm

Re: Update your computers, ASAP.

Post by WinkinBlinkin » Sat Jan 06, 2018 8:51 am

https://www.drivereasy.com/knowledge/wi ... ows-10/#m2

I have Windows 10, but it wasn't automatically installing updates due to an "install error". The advice on this site helped. I used method 1, but it was necessary to restart my computer first, as I could not initially delete the required files, as they were "in use" after I had tried to push the install manually.

User avatar
Jack Oat
Posts: 734
Joined: Mon Sep 08, 2014 3:46 am
Location: The Slanty Shanty

Re: Update your computers, ASAP.

Post by Jack Oat » Sun Jan 07, 2018 12:24 am

Bump for this. My Spotify just got compromised. This is a serious thing.

"You shall know the truth, and the truth shall make you free."

Garrbear wrote:

quite bluntly we can't balance the server around people who don't play well

Irongron wrote:

My main takeaway from this is that Jack is apparently personable


Cihparg
Arelith Silver Supporter
Arelith Silver Supporter
Posts: 688
Joined: Sat Nov 15, 2014 4:32 pm
Location: Matrix, @bullish0576:mozilla.org

Re: Update your computers, ASAP.

Post by Cihparg » Sun Jan 07, 2018 12:56 am

For those without the update yet, please ensure your Antivirus (AV) is up to date before you apply the update, as once you do, you stand a chance of getting a BSOD once (and every time thereof) you try booting into Windows (except in safemode) without a compatible AV version.
There's a very rare risk of bricking your system without updating your AV prior to updating Windows.

If you find no update to your AV, it's likely compatible with the Windows update.
Here's a link to the current known supported AV list.

More information here: https://www.bleepingcomputer.com/news/m ... cpu-flaws/
Last edited by Cihparg on Sun Jan 07, 2018 1:03 am, edited 3 times in total.

Beep boop.


MoreThanThree
Posts: 476
Joined: Sat Jan 10, 2015 11:06 pm

Re: Update your computers, ASAP.

Post by MoreThanThree » Sun Jan 07, 2018 1:01 am

Anyone wanna hand hold me through this scheiss?
20 RPR GANG

User avatar
BegoneThoth
Posts: 1589
Joined: Fri Oct 06, 2017 5:20 am

Re: Update your computers, ASAP.

Post by BegoneThoth » Sun Jan 07, 2018 1:05 am

Cihparg wrote:For those without the update yet, please ensure your Antivirus (AV) is up to date before you apply the update, as once you do, you stand a chance of getting a BSOD once (and every time thereof) you try booting into Windows (except in safemode) without a compatible AV version.
There's a very rare risk of bricking your system without updating your AV prior to updating Windows.

If you find no update to your AV, it's likely compatible with the Windows update.
Here's a link to the current known supported AV list.

More information here: https://www.bleepingcomputer.com/news/m ... cpu-flaws/
Yes, I've had some BSOD's since (first ones on this computer) and it's been a headache. Using ESET which is updated but perhaps not updated enough.
\

User avatar
CharlesK
Posts: 29
Joined: Wed Oct 04, 2017 5:44 pm

Re: Update your computers, ASAP.

Post by CharlesK » Thu Jan 11, 2018 7:14 pm

Thanks for the post. Since I have Windows 10 and updated enabled, I was sure I was covered. But based on this thread I went and checked to be sure. (A little paranoia, is not a bad thing.)

Thank!
___________________________________
When the DM asks you "Are you sure you want to do that?"
Then go on with your idea and die...
Your an idiot and the party hopes the next character you role is smarter...
:D :D :D

User avatar
If Valor Were Inches
Arelith Platinum Supporter
Arelith Platinum Supporter
Posts: 343
Joined: Mon Sep 08, 2014 5:57 am

Re: Update your computers, ASAP.

Post by If Valor Were Inches » Thu Jan 11, 2018 8:29 pm

Same, I didn't worry about this since Windows 10 is great at keeping you protected.

CragOrion
Arelith Supporter
Arelith Supporter
Posts: 889
Joined: Tue Sep 09, 2014 2:52 am

Re: Update your computers, ASAP.

Post by CragOrion » Thu Jan 11, 2018 11:53 pm

Cihparg wrote:For those without the update yet, please ensure your Antivirus (AV) is up to date before you apply the update, as once you do, you stand a chance of getting a BSOD once (and every time thereof) you try booting into Windows (except in safemode) without a compatible AV version.
There's a very rare risk of bricking your system without updating your AV prior to updating Windows.

Microsoft has set the updates so they only install if your system has a specific reg key. The idea is that the AV programs verify they are compatible with the updates and then add the reg key to your system, then enabling the download. I know Symantec has enabled the reg key, last I heard Trend hadn't caught up yet, but that was days ago. That could have changed by now.
https://support.microsoft.com/en-us/hel ... s-software

One thing to watch for is some users with AMD processors have been getting stuck in an unbootable state after installing the updates due to AMD not providing Microsoft with accurate documentation about their processors. Thus, Microsoft has halted the updates for systems using these processors. This can be another reason why you might not be seeing the update getting installed in your system.
https://support.microsoft.com/en-us/hel ... ed-devices

Celestia Silverarms
Karynn Eldafire


User avatar
BegoneThoth
Posts: 1589
Joined: Fri Oct 06, 2017 5:20 am

Re: Update your computers, ASAP.

Post by BegoneThoth » Fri Jan 12, 2018 1:33 am

Do not -manually- install the update for any reason.

You can and easily will brick your pc/install. Just wait.
\

Post Reply