Windows Client Guidance against speculative execution vulnerabilities

fdegrove said:

Hi,



Once your bios/uefi has been updated to mitigate against Spectre there's no need for any OS based patches.

Cheers,

Yes that's what I thought. I just mention it because I think some got good to go readings with it or I think I read that somewhere...

Hi,

Yes that's what I thought. I just mention it because I think some got good to go readings with it or I think I read that somewhere...

Up to 1709 that would do it but not yet for the latest April 2018 version (1803).
I find it quite strange how MS has released various KB's for older versions of W10 to resolve this issue to then release a new version that does not have a KB ready to corner this...

Cheers,

fdegrove said:

Hi,



Once your bios/uefi has been updated to mitigate against Spectre there's no need for any OS based patches.

Cheers,

Good point!. My understanding also. That's why I am longing for the day HP Customer Support page would give me an update (BIOS/UEFI) for the make and model of my PC HP Envy 700-329 CPUID: 306C3

tomseys said:

Yes I got it from the HP software download page for my specific HP laptop model. That bios has been available there for a while but I just didn't want to deal with it. It came out in March 2018. They have an even newer one from a few days ago that fixes memory module install blue screen issues but I installed the March 2018 one which has an "important security update". Maybe I'll do the April 2018 one soon.

HP Software and Driver Downloads for HP Printers, Laptops, Desktops and More | HP® Customer Support

I haven't installed any Microsoft microcode stuff (which has also been available for a while) just the new bios update today and now I appear to be good when before that bios install I wasn't.

Thanks a lot mate for taking the time to answer. I have checked the link you provided, which I also already have, but nothing is available yet for me: HP Envy 700-329

Hi,

for the make and model of my PC HP Envy 700-329 CPUID: 306C3

I doubt any OEM will go back as far as Haswell CPUs but soon enough MS will issue a KB for the April version of W10.
Should you stick to 1709 then you should be fine if you installed KB4090007.

Cheers,

fdegrove said:

Hi,



I doubt any OEM will go back as far as Haswell CPUs but soon enough MS will issue a KB for the April version of W10.
Should you stick to 1709 then you should be fine if you installed KB4090007.

Cheers,

According to this KB4090007, my CPUID is in production. Doesn't that mean that I should be getting a BIOS/UEFI firmware update in the foreseeable future. My PC is not that old, you know. I bought it, as far as I remember, In June or July 2015.

"Should you stick to 1709 then you should be fine if you installed KB4090007." That's what I did in order to have the green light from InSpectre, but after the April 2018 feature Update, I got back to square One. I even tried to re-install the update from the Microsoft Update Catalog after this latest feature Update, and I got the error message saying that this update is not for your PC or something of that ilk.

Hi,

"Should you stick to 1709 then you should be fine if you installed KB4090007." That's what I did in order to have the green light from InSpectre, but after the April 2018 feature Update, I got back to square One. I even tried to re-install the update from the Microsoft Update Catalog after this latest feature Update, and I got the error message saying that this update is not for your PC or something of that ilk.

My point exactly. MS will release a KB for the 1803 April 2018 version of W10 soon.

According to this KB4090007, my CPUID is in production. Doesn't that mean that I should be getting a BIOS/UEFI firmware update in the foreseeable future. My PC is not that old, you know. I bought it, as far as I remember, In June or July 2015.

MCU for Haswell is ready, it was included in KB409007, right? So all it takes is for MS to include it into a new KB that's compatible with the newest OS.

I have one PC with a Haswell CPU as well. It's still on Fujitsu's support list but I really doubt they care to issue another bios/uefi update. I used to work for this company when it was Siemens-Nixdorf, most other "Intel/MS companies" follow the same policy.

Cheers,

fdegrove said:

Hi,



My point exactly. MS will release a KB for the 1803 April 2018 version of W10 soon.



MCU for Haswell is ready, it was included in KB409007, right? So all it takes is for MS to include it into a new KB that's compatible with the newest OS.

I have one PC with a Haswell CPU as well. It's still on Fujitsu's support list but I really doubt they care to issue another bios/uefi update. I used to work for this company when it was Siemens-Nixdorf, most other "Intel/MS companies" follow the same policy.

Cheers,

A great many thanks for the insight and all the clarification. It really helps me better understand. Patience is the name of the game. I have read somewhere in an article that when they won't issue a firmware update (BIOS/UEFI) for the CPU on one's mobo which is too old, it is because it is a "closed system" and therefore less likely to be vulnerable to Spectre & Meltdown.

Hi,

I have read somewhere in an article that when they won't issue a firmware update (BIOS/UEFI) for the CPU on one's mobo which is too old, it is because it is a "closed system" and therefore less likely to be vulnerable to Spectre & Meltdown.

You're most welcome.
Well, what they're saying is that those systems were meant to be stand alones. Sure enough, when you're not connected to a network you're not going to be vulnerable to these kinds of attacks....
Guess they have to draw the line somewhere.


Cheers,