GRC InSpectre Shows Meltdown and Spectre Patched??

GRC InSpectre Shows Meltdown and Spectre Patched? Re: Doesn't One of These Patches Require Flashing The Bios?

I did not run Gibson's InSpectre some three weeks or so ago when I was unceremoniously updated from 1703 to 1709. I thought that either Meltdown or Spectre patches required a bios update from the manufacturer. I have not updated my bios yet when I ran InSpectre this morning it shows both Meltdown and Spectre patched. What's up with that? TIA.




did not install this:



did one of these updates patch either Spectre or Meltdown? TIA. Win 10 pro.



Thinkpad P51 BIOS ver

EdTittel said:

The i7-7700 counts as a "Kaby Lake" processor. MS issued Update KB4090007 to address the Spectre and Meltdown vulnerabilities you show as covered in the GRC InSpectre tool on March 8. The only way to get that update is to download it manually from the Microsoft Update Catalog. I posted a tutorial on how to do that, based on KB4090007, last Friday. I must presume you have it installed on that system.
HTH,
--Ed--

Thanks for the info however in the pic that I posted above I do not see KB4090007 installed so how did I get updated? Also if I go to uninstall updates I see this below and no installed/ uninstall KB4090007. Thanks.

@EdTittel

>Did Lenovo offer an earlier BIOS/UEFI firmware fix around the beginning of the year?

BINGO! I have this BIOS version installed, 1.17:

On 22 Dec 2017 Thinkpad P51 BIOS v1.17 BIOS update was released on the Lenovo Support website. The Readme file advised it included an enhancement to address CVE-2017-5715, viz. Meltdown / Spectre vulnerability.

https://forums.lenovo.com/t5/Securit...t/td-p/3948173

According to the link above the BIOS version I have 1.17 can be problematic or sketchy and if you believe what is written it was actually pulled (that makes me feel good)

Also in the pic above there is a "critical" BIOS update available to version 1.20. You can also see it available here:

https://pcsupport.lenovo.com/us/en/downloads/ds121296

So late Dec. when this BIOS update was made available I had only had the new notebook for a few weeks and while I can not actually recall flashing the BIOS to 1.17 apparently I did no doubt under the spell of a brand spanking new computer : )

Sooo....While the machine appears to be stable I have read more then one article that indicates the fixes for Spectre and Meltdown may not be ready for Prime Time and I am suspicious of flashing up to 1.20 since all things considered I am mostly happy when the computer just boots up successfully each morning. In fact I have been toying with the idea if using the InSpectre tool to disable the Spectre and Meltdown patches now though I know that this is ill advised.

>The Kaby Lake connection seemed pretty sure to me. But apparently, I was wrong about that, so I apologize for my mistake.

Absolutely no need to apologize. You and others have helped me so much with other questions. Since the second week of December last year I have gone from an Intel Celeron processor 900 (win 7) to the Lenovo P51 Thinkpad Intel Core i7-7700HQ Processor and the jump was dramatic to say the least and no doubt I will have many more questions to come. Thanks again for your time and assistance.

EdTittel said:

snip ...how many of the "other pioneers" come back with arrows in their backs before deciding whether or not to apply the upgrade.--Ed--

Heheh! I like the "other pioneers" tag rather then the relatively pedantic "early adopters." Thanks.

I saw this post & so I downloaded Gibson's tool. I also saw somewhere (can't recall where) that installing the fix on a computer that didn't need it slowed it down.

So my questions are:
1) Looking at the images I uploaded, should I install KB4090007? (I saw your tutorial on how to)
2) When the Gibson tool says "Performance: Good", is that a reliable test that my machine performance won't be affected?

Thank you in advance!

So my questions are: 1) Looking at the images I uploaded, should I install KB4090007? (I saw your tutorial on how to) 2) When the Gibson tool says "Performance: Good", is that a reliable test that my machine performance won't be affected?

1. I would check your pc/motherboards mfg site to see if there is a BIOS update first vs MS KB.
2. Yes

Eagle51 said:

1. I would check your pc/motherboards mfg site to see if there is a BIOS update first vs MS KB.
2. Yes

Thank you for the quick response. This may seem stupid, but I don't know whether to go to American Megatrend's site or Gigabyte's site.