Is there an example of it being exploited in malicious manner ?
Windows Client Guidance against speculative execution vulnerabilities
-
-
-
-
-
New 08 Jan 2018 #103
That is there list so far so I am hoping it expands this week , not too worried since ,I haven't heard of any actually exploits yet.VBF said:
I found a small app on the TECHNET site so you don't need to use PowerShell for this though , someone turn the PS Scripts into an .exe so it will run on it's own...
KB.
-
-
-
New 08 Jan 2018 #105
Hi,
Basically, we're all just waiting for the hardware part to be patched.
Cheers,
-
New 08 Jan 2018 #106
It's in TechNet Script Centertracit99 said:
The FILE AT THE TOP IS AN EMPTY ZIP at least for me, the one I posted is in the Comments of this post by a guy called Andy-Bentley under EXE version of the SCRIPT at 11.28AM :
Q and A - Speculation Control Validation PowerShell Script
-
-
-
New 08 Jan 2018 #108
The ZIP at the top was just the script for IT Managers etc , my guess is the file was open when they tried to zip it.....tracit99 said:
There are actually 3 versions of the .exe now depending on which level of the . Net Framework you have, ie:
This is a link to three versions of the EXE version of the script, compiled respectively
for .NET versions 2.0, 3.0/.5 and 4.0/.5. It also contains the .ps1 script.
Folks having trouble with the module and PS 2.0 - you might find an EXE works for you.
I'm not saying this is a better option than using modules, it's just an alternative approach
and slightly more portable. You still need PS and .NET as-per PS2EXE documentation
as it's more of a wrapper than a true standalone EXE.Last edited by Kbird; 08 Jan 2018 at 18:30.
-
New 08 Jan 2018 #109
There's an unofficially released microcode update 23 20/11/2017 for the Haswell line that has a partial fix for spectre.VBF said:
Improved overclocking for Haswell with updated microcode (+ update CPU microcode through software)
I'm rocking it right now on my rig: 4670K + Maximus VI Hero (Z87) and its been reported to work on these so far:
ASRock Z87 Extreme6
ASRock Z97 Extreme4
ASRock Z97 OC Formula
ASUS Maximus Hero Z87
ASUS Maximus VII Impact
AW17 R1/Ranger/R5
Gigabyte Z87X-UD4H
MSI Z97 MPOWER MAX AC
MSI Z87-GD65 Gaming
MSI Z97 Gaming 5
MSI Z97 G45 Gaming
Unfortunately your mobo lacks the "risk free" ASUS FLASHBACK feature where you can flash your bios when the computer is turned off so there's a chance you'll brick it.
Everyone is better off waiting for the official release and finalized code.
Quote
Related Threads
General Tips Change PowerShell Script Execution Policy in Windows 10 in Tutorials
The PowerShell script execution policies enables you to determine which Windows PowerShell scripts (if any) will be allowed to run on your computer. Windows PowerShell has four different execution policies:
Execution Policy
Description
...
Mitigating speculative execution side-channel attacks in Edge and IE11 in Windows 10 News
Source: Mitigating speculative execution side-channel attacks in Microsoft Edge and Internet Explorer - Microsoft Edge Dev Blog
See also update: Cumulative Update KB4056892 Windows 10 v1709 Build 16299.192 - Windows 10 Forums
Google Disclosing Windows 10 vulnerabilities to protect users in Windows 10 News
Source: Google Online Security Blog: Disclosing vulnerabilities to protect users
Windows 10 - Need some guidance on recovery in Installation and Upgrade
One of my spare Windows 10 machines is on life support.
I must have clobbered it somehow when I was tweaking the multiple display settings ( to incorporate a HDMI projector). It actually worked fine all week, but today, when I tired to set it...
Microsoft offers IT guidance to prepare for Windows as a Service in Windows 10 News
Read more: http://www.zdnet.com/article/microsoft-offers-it-guidance-to-prepare-for-windows-as-a-service/
