freebsd security - Jan 2018 - Intel hardware bug

I am guessing this will impact FreeBSD as well ?

http://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/

	---Mike

-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/

On Tuesday, January 02, 2018 08:52:27 PM Mike Tancsa
wrote:
> I am guessing this will impact FreeBSD as well ?
> 
> http://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
No way around it. It's hardware FAIL, and ignoring it isn't an option
since
it's apparently a huge hole.

--
Joey Kelly
Minister of the Gospel and Linux Consultant
http://joeykelly.net
504-239-6550

On 1/2/2018 5:52 PM, Mike Tancsa wrote:
> I am guessing this will impact FreeBSD as well ?
> 
> http://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
> 
Keep in mind that this issue is still under Embargo, so no official
statement from FreeBSD will likely be made before it is lifted.  I do
know that the right people are definitely aware of what's going on.


-- 
Regards,
Bryan Drewery

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.freebsd.org/pipermail/freebsd-security/attachments/20180103/5c1f1428/attachment.sig>

In message <477ab39d-286d-d9a2-d31e-fd5f7f1679a8 at sentex.net>, 
Mike Tancsa <mike at sentex.net> wrote:
>I am guessing this will impact FreeBSD as well ?
>
>http://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
Swell.  Just swell.

Why couldn't this have been announced the week -before- I bought an Intel
processor and motherboard to replace my aging AMD rig, rather than the week
-after- I did so?

Geeeesssh!

Mike Tancsa wrote:
> I am guessing this will impact FreeBSD as well ?
> http://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
More URLs:

  https://lkml.org/lkml/2017/12/4/709 
	[patch 00/60] x86/kpti: Kernel Page Table Isolation (was KAISER)

  https://gruss.cc/files/kaiser.pdf Funded by ERC & EU
         KASLR is Dead: Long Live KASLR

 
http://pythonsweetness.tumblr.com/post/169166980422/the-mysterious-case-of-the-linux-page-table
	July 28, 2017
    	The mysterious case of the Linux Page Table Isolation patches
        ... Ref to FreeBSD

  http://www.bbc.co.uk/news/technology-42553818
	Major flaw in millions of Intel chips revealed

 
https://www.theguardian.com/technology/2018/jan/03/major-security-flaw-found-intel-processors-computers-windows-mac-os-linux
        Wed 3 Jan `18 14.24 GMT
	Major security flaw found in Intel processors

  https://twitter.com/aionescu/status/948609809540046849
	9:39 AM - 3 Jan 2018
        MacOS fix the Intel #KPTI Issue? Why yes ... since 10.13.2

  https://twitter.com/aionescu/status/948609809540046849
 
https://www.fool.com/investing/2017/12/19/intels-ceo-just-sold-a-lot-of-stock.aspx?source=isesitlnk0000001&mrr=1.00
	Dec 19, 2017 at 5:10PM
        Intel's CEO Just Sold A Lot of StocK ..
        Krzanich is keeping the bare minimum

  https://github.com/IAIK/KAISER/
	Kernel Address Isolation to have Side-channels Efficiently Removed

 
https://cyber.wtf/2017/07/28/negative-result-reading-kernel-memory-from-user-mode/


Upgrades inc reboots of lots of commercial global net servers is
predicted once patches are out for each OS in a few days.  I wonder
what keywords industry will settle on to refer to this by (eg last
time "FOOF bug") Options inc.: KASLR, KAISER, Kernel Address tables,
Intel software mitigation, x86/kpti: Kernel Page Table Isolation.

I don't know what effect this has on FreeBSD, I guess we'll see an
authoritative announcement in a bit, when memory management people
get time to stop coding & drop back to PR, Meanwhile:

 
https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/bibliography-osinternals.html

 
https://duckduckgo.com/?sites=www.FreeBSD.org%2Cdocs.FreeBSD.org%2Clists.FreeBSD.org%2Cwiki.FreeBSD.org%2Cforums.FreeBSD.org&ka=v&kt=v&kh=1&kj=r2&q=memory+management&submit=Search&ia=web

 
https://www.freebsd.org/doc/en_US.ISO8859-1/articles/vm-design/page-table-optimizations.html

  https://forums.freebsd.org/threads/63955/page-2

Cheers,
Julian
-- 
Julian H. Stacey, Computer Consultant, BSD Linux Unix Systems Engineer, Munich
 http://berklix.eu/brexit/ UK stole 3,700,000 votes; 700,000 from Brits in EU.
 http://berklix.eu/queen/  Sign petition before end of 2017.

On Tue, Jan 02, 2018 at 08:52:27PM -0500, Mike Tancsa
wrote:
> I am guessing this will impact FreeBSD as well ?
> 
> http://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
https://meltdownattack.com/

-- 
Shawn Webb
Cofounder and Security Engineer
HardenedBSD

Tor-ified Signal:    +1 443-546-8752
GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL:
<http://lists.freebsd.org/pipermail/freebsd-security/attachments/20180103/8fbdc190/attachment.sig>