Meltdown and Spectre attacks/bugs/flaws

[sbl]

https://meltdownattack.com/

https://meltdownattack.com/

https://meltdownattack.com/

https://meltdownattack.com/

https://meltdownattack.com/

https://meltdownattack.com/

 

Quote

Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal data which is currently processed on the computer. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to get hold of secrets stored in the memory of other running programs. This might include your passwords stored in a password manager or browser, your personal photos, emails, instant messages and even business-critical documents.

Meltdown and Spectre work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider's infrastructure, it might be possible to steal data from other customers.

Which systems are affected by Meltdown?

Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013). We successfully tested Meltdown on Intel processor generations released as early as 2011. Currently, we have only verified Meltdown on Intel processors. At the moment, it is unclear whether ARM and AMD processors are also affected by Meltdown.

Which systems are affected by Spectre?

Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors.

tl;dr Meltdown and Spectre exploit critical vulnerabilities in modern computers. These are hardware bugs that allow programs to steal your data on a computer by getting into the memory. For Meltdown, essentially every Intel processor since 1995 (with some exceptions) is affected. For Spectre, almost every system is affected: desktops, laptops, servers, and smartphones. Spectre has been verified on Intel, AMD, and ARM processors. Update everything to stay safe!!!!!!!!!!!!!!!!!!