Windows 10: GRC InSpectre Shows Meltdown and Spectre Patched??

Page 1 of 2 12 LastLast
  1.    27 Mar 2018 #1

    GRC InSpectre Shows Meltdown and Spectre Patched??


    GRC InSpectre Shows Meltdown and Spectre Patched? Re: Doesn't One of These Patches Require Flashing The Bios?

    I did not run Gibson's InSpectre some three weeks or so ago when I was unceremoniously updated from 1703 to 1709. I thought that either Meltdown or Spectre patches required a bios update from the manufacturer. I have not updated my bios yet when I ran InSpectre this morning it shows both Meltdown and Spectre patched. What's up with that? TIA.

    Click image for larger version. 

Name:	Capture.JPG 
Views:	3 
Size:	128.2 KB 
ID:	182485


    did not install this:

    Click image for larger version. 

Name:	Capture2.JPG 
Views:	2 
Size:	81.5 KB 
ID:	182486

    did one of these updates patch either Spectre or Meltdown? TIA. Win 10 pro.

    Click image for larger version. 

Name:	Capture3.JPG 
Views:	2 
Size:	224.9 KB 
ID:	182487

    Thinkpad P51 BIOS ver

    Click image for larger version. 

Name:	Capture4.JPG 
Views:	80 
Size:	14.9 KB 
ID:	182488
      My ComputerSystem Spec

  2.    27 Mar 2018 #2

    The i7-7700 counts as a "Kaby Lake" processor. MS issued Update KB4090007 to address the Spectre and Meltdown vulnerabilities you show as covered in the GRC InSpectre tool on March 8. The only way to get that update is to download it manually from the Microsoft Update Catalog. I posted a tutorial on how to do that, based on KB4090007, last Friday. I must presume you have it installed on that system.
    HTH,
    --Ed--
      My ComputersSystem Spec

  3.    27 Mar 2018 #3

    EdTittel said: View Post
    The i7-7700 counts as a "Kaby Lake" processor. MS issued Update KB4090007 to address the Spectre and Meltdown vulnerabilities you show as covered in the GRC InSpectre tool on March 8. The only way to get that update is to download it manually from the Microsoft Update Catalog. I posted a tutorial on how to do that, based on KB4090007, last Friday. I must presume you have it installed on that system.
    HTH,
    --Ed--
    Thanks for the info however in the pic that I posted above I do not see KB4090007 installed so how did I get updated? Also if I go to uninstall updates I see this below and no installed/ uninstall KB4090007. Thanks.

    Click image for larger version. 

Name:	Capture.JPG 
Views:	2 
Size:	191.2 KB 
ID:	182490
      My ComputerSystem Spec

  4.    27 Mar 2018 #4

    OK, then: this is non-obvious. I figured that if the items were showing patched, you must've applied the MS fix. Did Lenovo offer an earlier BIOS/UEFI firmware fix around the beginning of the year? While some of those were flawed, some of them did indeed fix the problem. Microsoft, for example, got a patch out early in January, and so did some other vendors, with varying degrees of success. Otherwise, I have NO CLUE as to how your P51 got fixed. Sorry to have gone barking down a false trail. The Kaby Lake connection seemed pretty sure to me. But apparently, I was wrong about that, so I apologize for my mistake.
    --Ed--
      My ComputersSystem Spec

  5.    27 Mar 2018 #5

    @EdTittel

    >Did Lenovo offer an earlier BIOS/UEFI firmware fix around the beginning of the year?

    BINGO! I have this BIOS version installed, 1.17:

    On 22 Dec 2017 Thinkpad P51 BIOS v1.17 BIOS update was released on the Lenovo Support website. The Readme file advised it included an enhancement to address CVE-2017-5715, viz. Meltdown / Spectre vulnerability.

    https://forums.lenovo.com/t5/Securit...t/td-p/3948173

    According to the link above the BIOS version I have 1.17 can be problematic or sketchy and if you believe what is written it was actually pulled (that makes me feel good)

    Also in the pic above there is a "critical" BIOS update available to version 1.20. You can also see it available here:

    https://pcsupport.lenovo.com/us/en/downloads/ds121296

    So late Dec. when this BIOS update was made available I had only had the new notebook for a few weeks and while I can not actually recall flashing the BIOS to 1.17 apparently I did no doubt under the spell of a brand spanking new computer : )

    Sooo....While the machine appears to be stable I have read more then one article that indicates the fixes for Spectre and Meltdown may not be ready for Prime Time and I am suspicious of flashing up to 1.20 since all things considered I am mostly happy when the computer just boots up successfully each morning. In fact I have been toying with the idea if using the InSpectre tool to disable the Spectre and Meltdown patches now though I know that this is ill advised.

    >The Kaby Lake connection seemed pretty sure to me. But apparently, I was wrong about that, so I apologize for my mistake.

    Absolutely no need to apologize. You and others have helped me so much with other questions. Since the second week of December last year I have gone from an Intel Celeron processor 900 (win 7) to the Lenovo P51 Thinkpad Intel Core i7-7700HQ Processor and the jump was dramatic to say the least and no doubt I will have many more questions to come. Thanks again for your time and assistance.
      My ComputerSystem Spec

  6.    27 Mar 2018 #6

    If 1.20 is out as an improvement to 1.17, I'd be inclined to upgrade to take advantage of the learning that's occurred since the first round of BIOS/UEFI updates came out. Lenovo has been VERY cautious in its second round of updates, so I'd be more inclined to jump ahead than stay behind myself. That said, conventional wisdom on BIOS/UEFI Upgrades is to install them only if you can't do without them. Given that your P51 is behaving itself, you can take a couple weeks to a month to see how many of the "other pioneers" come back with arrows in their backs before deciding whether or not to apply the upgrade.
    HTH,
    --Ed--
      My ComputersSystem Spec

  7.    27 Mar 2018 #7

    EdTittel said: View Post
    snip ...how many of the "other pioneers" come back with arrows in their backs before deciding whether or not to apply the upgrade.--Ed--
    Heheh! I like the "other pioneers" tag rather then the relatively pedantic "early adopters." Thanks.
      My ComputerSystem Spec

  8. phrab's Avatar
    Posts : 152
    windows 10 professional 64-bit
       07 Sep 2018 #8

    Spectre protected?


    I saw this post & so I downloaded Gibson's tool. I also saw somewhere (can't recall where) that installing the fix on a computer that didn't need it slowed it down.

    So my questions are:
    1) Looking at the images I uploaded, should I install KB4090007? (I saw your tutorial on how to)
    2) When the Gibson tool says "Performance: Good", is that a reliable test that my machine performance won't be affected?

    Thank you in advance!
    Click image for larger version. 

Name:	Spectre.PNG 
Views:	41 
Size:	84.2 KB 
ID:	202931
    Click image for larger version. 

Name:	Device Specs.PNG 
Views:	41 
Size:	9.3 KB 
ID:	202932
    Click image for larger version. 

Name:	Bios version.PNG 
Views:	1 
Size:	7.5 KB 
ID:	202933
      My ComputerSystem Spec

  9.    07 Sep 2018 #9

    So my questions are: 1) Looking at the images I uploaded, should I install KB4090007? (I saw your tutorial on how to) 2) When the Gibson tool says "Performance: Good", is that a reliable test that my machine performance won't be affected?
    1. I would check your pc/motherboards mfg site to see if there is a BIOS update first vs MS KB.
    2. Yes
      My ComputersSystem Spec

  10. phrab's Avatar
    Posts : 152
    windows 10 professional 64-bit
       07 Sep 2018 #10

    Eagle51 said: View Post
    1. I would check your pc/motherboards mfg site to see if there is a BIOS update first vs MS KB.
    2. Yes
    Thank you for the quick response. This may seem stupid, but I don't know whether to go to American Megatrend's site or Gigabyte's site.
    Click image for larger version. 

Name:	Bios & Mfg.PNG 
Views:	39 
Size:	17.6 KB 
ID:	202943
      My ComputerSystem Spec


 
Page 1 of 2 12 LastLast

Related Threads
So after arriving home from holidays I noticed windows was installing the latest patches including the one for the recently discovered vulnerabilities. After 1-3 days problems started to appear, my computer would randomly freeze, first I wouldnt...
Spectre / Meltdown Looms? in AntiVirus, Firewalls and System Security
Maybe arriving soon? See http://www.securityweek.com/malware-exploiting-spectre-meltdown-flaws-emerges
Do we know the actual risk of Meltdown and Spectre? in AntiVirus, Firewalls and System Security
There has been a lot discussion about Meltdown and Spectre on this forum and others, but I'm still confused. And I have 2 computers, and possibly 3, that are old enough that no BIOS remedy will be forthcoming so I'm going to be vulnerable to...
I am running FCU Win 10 Pro on a MSI P35 Neo F v1 motherboard with Core 2 Duo E8400 CPU. I have ran the MS controlsettings script which informs me I am protected from Spectre by Windows Update but not Meltdown without a BIOS/Microcode update. As...
Source: Meltdown and Spectre: what you need to know - Malwarebytes Labs | Malwarebytes Labs See also: Windows Client Guidance against speculative execution vulnerabilities - Windows 10 Forums
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 18:07.
Find Us