Windows Client Guidance against speculative execution vulnerabilities

Page 64 of 75 FirstFirst ... 1454626364656674 ... LastLast

  1. Posts : 2,557
    Windows 10 pro x64-bit
       #630

    MUser said:
    RS5, Skip ahead, gave me new microcode.
    Good to know. Kinda confirming what I have heard. Here is hoping that I will have a microcode update from RS4 when it is finally released.
      My Computers


  2. Posts : 2,826
    Windows 10 Pro X64
       #631

    Hi,

    Here is hoping that I will have a microcode update from RS4 when it is finally released.
    Yep. And one that covers more than just a few of Intel's latest CPUs too.
    Currently RS4 does not even support the KB that held the MC updates for 1709. Go figure....

    Cheers,
      My Computers


  3. Posts : 2,826
    Windows 10 Pro X64
       #632

    Hi,

    Ground Sloth said:
    I don't know if it would be feasible in your particular situation, but you could move the computer to Linux. Linux has protection against Spectre Variant 2 built into the Linux kernel (reptoline). And if you want Linux to update the CPU microcode, you can download the update directly from Intel and install it manually. Intel provides instructions.

    Download Linux* Processor Microcode Data File

    No need to move to Linux. If you want to you can use the MCU's with AMI's tool to load the MCU in Windows at every boot.
    Works fine for me even though GRC does not seem to recognize it, the MCU is effectively active as HWInfo will show so it does provide protection against Spectre attacks.

    This can cover any machine Intel has updated the MC for and works on all W10 versions I've tested it on from 1040 to SCU 1803.

    Cheers,
      My Computers


  4. Posts : 118
    Windows 10
       #633

    How to check which microcode revision Windows is loading (if newer than BIOS microcode)?

    Run Notepad.exe and turn on Format/Word Wrap from pull down menu.
    Use File/Open and navigate to C:\Windows\System32\mcupdate_GenuineIntel.dll, its a bit slow to open
    Scroll to the late screen full

    You will see a list of CPUID's, Platform ID's and MCU revisions (microcode)

    Using build 17643 RS5, some match up with the latest releases from Intel but others are still on old revisions, e.g. 20655.

    Hope this helps somehow?
      My Computer


  5. Posts : 118
    Windows 10
       #634

    MUser said:
    How to check which microcode revision Windows is loading (if newer than BIOS microcode)?

    Run Notepad.exe and turn on Format/Word Wrap from pull down menu.
    Use File/Open and navigate to C:\Windows\System32\mcupdate_GenuineIntel.dll, its a bit slow to open
    Scroll to the late screen full

    You will see a list of CPUID's, Platform ID's and MCU revisions (microcode)

    Using build 17643 RS5, some match up with the latest releases from Intel but others are still on old revisions, e.g. 20655.

    Hope this helps somehow?

    If Windows is not updating microcode based on Intel's guidance then I suggest opening support case with Microsoft.
      My Computer


  6. Posts : 1,020
    Windows 10 Pro 20H2 19042.572
       #635

    MUser said:
    How to check which microcode revision Windows is loading (if newer than BIOS microcode)?

    Run Notepad.exe and turn on Format/Word Wrap from pull down menu.
    Use File/Open and navigate to C:\Windows\System32\mcupdate_GenuineIntel.dll, its a bit slow to open
    Scroll to the late screen full

    You will see a list of CPUID's, Platform ID's and MCU revisions (microcode)

    Using build 17643 RS5, some match up with the latest releases from Intel but others are still on old revisions, e.g. 20655.

    Hope this helps somehow?
    That file doesn't exist on my skylake system, but I did install a MC update from Gigabyte and Inspectre shows my system as being protected. I'll have to check the tablet when I get a chance, its unprotected.


    ********** Correction - It does exist my ERROR (first one this year) ************

    Last edited by storageman; 16 Apr 2018 at 12:56.
      My Computers


  7. Posts : 234
    Microsoft Windows 10 Home x64
       #636

    Here is a copy of where my Windows PowerShell indicated my system is at with regard to Windows Client Guidance against speculative execution vulnerabilities.

    I'm not sure if there is anything further I need to do at the moment?

    I know my Toshiba Satellite P50-C (Part Number: PSPT2A-00E001) BIOS is up-to-date with version 1.50 and I'm also aware a firmware update from Toshiba for my Model Number for Intel, AMD & Microsoft Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method Security Vulnerabilities is yet to be released and determined.

    Intel, AMD & Microsoft Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method Security Vulnerabilities

    Attachment 185043
      My Computer


  8. Posts : 1,079
    10 + Linux
       #637

    NSA Inspectors: Kernel 5.0 In Reinforcement


    Hp seems overwhelmed? in-Specter's on vacations there:

    Code:
    ~$ cat /proc/sys/kernel/osrelease
    4.17.0-041700rc1-generic
    ~$ cat /sys/devices/system/cpu/vulnerabilities/*
    Not affected
    Mitigation: __user pointer sanitization
    Mitigation: Full AMD retpoline
    
    sudo dpkg-query -l | grep amd64-microcode
    ii  amd64-microcode                             3.20171205.1
    dpkg -l mesa-vdpau-drivers
    ii  mesa-vdpau-dri 1:18.0.0-0~x amd64  Mesa VDPAU video acceleration dri
    ~$ glxinfo | grep "OpenGL version"
    OpenGL version string: 3.0 Mesa 18.0.0
    Code:
    AMD CARRIZO (DRM 3.25.0 / 4.17.0-041700rc1-generic, LLVM 6.0.0)
    Last edited by MikeMecanic; 16 Apr 2018 at 23:32.
      My Computer


  9. Posts : 1,020
    Windows 10 Pro 20H2 19042.572
       #638

    ASUS support has released a list of systems and when new BIOS will become available for them. Link here -> https://www.asus.com/News/YQ3Cr4OYKdZTwnQK
      My Computers


  10. Posts : 2,295
    Win10 202H
       #639

    storageman said:
    ASUS support has released a list of systems and when new BIOS will become available for them. Link here -> https://www.asus.com/News/YQ3Cr4OYKdZTwnQK
    I did read elsewhere that they wont be releasing Bios Updates for Motherboards considered EOL (like the X99 Series) and that list would seem to confirm it , not a single MB listed , just pre-built systems and a few Laptops.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:59.
Find Us




Windows 10 Forums