Hi,



Bios/UEFI flash update is persistent and is not written to volatile memory on the cpu.
As far as mitigation against Spectre type attacks is concerned it really makes no difference whether...

Hi,



Was wondering about that too. Seems like every new version of W10 is like a new OS all on its own....
After all, this is only a MC emulation, right ?

Cheers, ;)

Hi,



Seems like way too fast to have a patch ready by then.

Cheers, ;)

Hi,



I did not word that well, my bad. By "Closed System" they mean what exactly ?
The article isn't really clear about that. The way I read it is that most of those machines are either stand...

Hi,



You're most welcome.
Well, what they're saying is that those systems were meant to be stand alones. Sure enough, when you're not connected to a network you're not going to be vulnerable...

Hi,



My point exactly. MS will release a KB for the 1803 April 2018 version of W10 soon.



MCU for Haswell is ready, it was included in KB409007, right? So all it takes is for MS to...

Hi,



I doubt any OEM will go back as far as Haswell CPUs but soon enough MS will issue a KB for the April version of W10.
Should you stick to 1709 then you should be fine if you installed...

Hi,



Up to 1709 that would do it but not yet for the latest April 2018 version (1803).
I find it quite strange how MS has released various KB's for older versions of W10 to resolve this issue...

Hi,



Once your bios/uefi has been updated to mitigate against Spectre there's no need for any OS based patches.

Cheers, ;)

Hi,




No need to move to Linux. If you want to you can use the MCU's with AMI's tool to load the MCU in Windows at every boot.
Works fine for me even though GRC does not seem to recognize it,...

Hi,



Yep. And one that covers more than just a few of Intel's latest CPUs too.
Currently RS4 does not even support the KB that held the MC updates for 1709. Go figure....

Cheers, ;)

Hi,



No, I am not and it is quite easy to prove too. I 've been hinting to that for a while now so I'll leave you to whatever you prefer to believe.

Cheers, ;)

Hi,

Sorry but I'm 100% certain I am correct.
It appears you seem to be stuck on how Debian (Linux) updates MC through the OS.
And of course if you reflash the CPU's MC with a previous version...

Hi,



Cheers, ;)

Hi,

For info:



Source: MS e-mail


Cheers, ;)

Hi,

No, both are correct and act in a similar way as MS does when no bios/uefi MCU is available.
Note also that these methods are not persistent so these updates needs to be loaded every time the...

Hi,

That non-volatile memory can be written to. IOW, it can be flashed just like a BIOS/UEFI, RAID ROM, MEI/AMT management blocks and such.
It suffices to put the CPU with the latest MCU in a...

Hi,



MC is a software interpretation layer that sits between the cpu's firmware and the computer system as a whole and resides in the cpu's non-volatile memory. Once it's updated it stays that...

Hi,



I wasn't sure what exactly it was you meant by "CPU memory" at the time but assumed you meant DRAM memory in general.
The way the emulation works there's no need to acces the CPU's...

Hi,



Not that I know of, no. Besides what CPU memory would that be ? There's only a number of cacheing memory blocks, right ?

Cheers, ;)

Hi,

Actually it's just an emulation and that KB from MUC will only work on FCU (1709) and nothing else.

Cheers, ;)

Hi,



I'll have took it up but that's just how it works and that's why a bios/efi MCU update is so much better as it is entirely OS independent and definite (unless you reflash the bios/efi of...

Hi,



I believe the latter part, not the former one. :rolleyes:



Cpumcupdate works in a similar way to MS, it loads the MCU by way of a driver as the OS gets loaded.

Hi,



Not quite. What it does is make the OS think this is what the MCU actually is. Which in firmware terms it is not.

IOW, it emulates the correct MC to the OS but as far as the cpu is...

Hi,

Yep, I've got a Fujitsu machine runing the exact same cpu I doubt the OEM will issue a BIOS/EFI update to implement the MCU though.
I guess MS will add it to its KB when it deems it's ready...