Stories
Slash Boxes
Comments

SoylentNews is people

posted by takyon on Monday May 07 2018, @04:35PM   Printer-friendly
from the meltdown-letdown dept.

Microsoft Working on a Fix for Windows 10 Meltdown Patch Bypass

Submitted via IRC for SoyCow3941

Microsoft's patches for the Meltdown vulnerability have had a fatal flaw all these past months, according to Alex Ionescu, a security researcher with cyber-security firm Crowdstrike. Only patches for Windows 10 versions were affected, the researcher wrote today in a tweet. Microsoft quietly fixed the issue on Windows 10 Redstone 4 (v1803), also known as the April 2018 Update, released on Monday.

"Welp, it turns out the Meltdown patches for Windows 10 had a fatal flaw: calling NtCallEnclave returned back to user space with the full kernel page table directory, completely undermining the mitigation," Ionescu wrote.

Source: https://www.bleepingcomputer.com/news/security/microsoft-working-on-a-fix-for-windows-10-meltdown-patch-bypass/

Here is why you may want to skip this month Windows Updates - gHacks Tech News

Submitted via IRC for TheMightyBuzzard

Patch Tuesday is just around the corner; Microsoft pushes out security updates and other updates for all of its products on the second Tuesday of the month. [...] If you have not followed the release of the update, you may wonder why you should block the upgrade at this point in time.

It is simple: the update is riddled with bugs. I upgraded one PC to Windows 10 version 1803 and ran into a good dozen major issues; Edge or Windows Defender won't load, I can't right-click on taskbar items, no microcode update for Windows 10 version 1803 to patch the Spectre security issue is available, and shutdown is broken unless you disable Fast Restart. Those are just the issues that I ran into. Other users reported Chrome, Cortana and other software program freezes, out of disk space warnings because the recovery partition got a drive letter suddenly, lots of Alienware PCs that lock up, and a lot more.

Well maybe that's why you should. Why I should is because I don't let my gaming box connect to the Internet at all.

Source: https://www.ghacks.net/2018/05/05/here-is-why-you-may-want-to-skip-this-months-windows-updates/

PoC Code Published for Triggering an Instant BSOD on All Recent Windows Versions

Submitted via IRC for SoyCow4408

A Romanian hardware expert has published proof-of-concept code on GitHub that will crash most Windows computers within seconds, even if the computer is in a locked state.

Source: https://www.bleepingcomputer.com/news/microsoft/poc-code-published-for-triggering-an-instant-bsod-on-all-recent-windows-versions/


Original Submission #1Original Submission #2Original Submission #3

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by Gaaark on Monday May 07 2018, @09:43PM (4 children)

    by Gaaark (41) on Monday May 07 2018, @09:43PM (#676801) Journal

    Hahahaha

    Gasp

    Hahahahahahahahahaha........

    Windows is, at best, a gaming console. Real men (and women) use ANYTHING but Windows online.

    "Kick me in the nuts AGAIN Microsoft! Please!!!"

    Seriously! Put Windows in a VM on linux!....isolate the problem.
    WHY, oh WHY do people put up with this? Would you, as adults, let someone fuck you around THIS much in real life?

    I. Would. Not.
    I. Do. Not.

    Flamebait away, oh cowardly ones, but just realise... MS just laughed at you again.

    --
    --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by c0lo on Tuesday May 08 2018, @12:38AM (2 children)

    by c0lo (156) Subscriber Badge on Tuesday May 08 2018, @12:38AM (#676846) Journal

    Would you, as adults, let someone fuck you around THIS much in real life?

    My dear fellow soylenter, some 'words of wisdom' for you: patience, there will come a time of your life when you'll wish you'll be fucked in real life with a higher frequency than 1.16699016e--8 hertz [google.com]

    ---

    I was surprised the learn there's a real thing behind that frequency [wikipedia.org]

    --
    https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford
    • (Score: 2) by realDonaldTrump on Tuesday May 08 2018, @01:07AM

      by realDonaldTrump (6614) on Tuesday May 08 2018, @01:07AM (#676853) Homepage Journal

      Sex after 70 is very real -- and there's nothing more fun. Except a Trump rally!

    • (Score: 2) by Gaaark on Tuesday May 08 2018, @09:45AM

      by Gaaark (41) on Tuesday May 08 2018, @09:45AM (#676967) Journal

      Ah, but being fucked and being fucked around are two VERY different things!
      ;)

      --
      --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
  • (Score: 0) by Anonymous Coward on Tuesday May 08 2018, @06:33AM

    by Anonymous Coward on Tuesday May 08 2018, @06:33AM (#676919)

    We use Microsoft for the same reason English is the predominant global language.... because its the language of trade and money.

    The Dollar is the World's Reserve Currency because we have the ability to use physical force if necessary to enforce that.

    I think we often forget... things have changed before ... and they can change again.

    I am hoping Microsoft starts putting ads on the screen that users can't dismiss, and it irritates them enough to make them jump ship. Then later Business will figure out that not having a Linux presence is about like not having a FaceBook or LinkedIn presence. Go ahead and do business with Copyrighted scripts and proprietary formats, and not many people will see them. Their need of Dollars will encourage them to speak the language of the populace, providing we can get the populace to abandon Microsoft and embrace Open Source public solutions. Right now, Microsoft fulfills their needs, and there is no need to change, but just as Advertisers and Rate Hikes have fueled a cord-cutting movement, if Microsoft can be encouraged to think a little more like a Businessman by jettisoning their customer base by harassment with ads, fees, privacy intrusions, and litigation, this balance may be quite tippable.

    Just be prepared to have Congress overrun with Lobbyists urging that use of Open Source be deemed to be illegal, and be prepared to immediately impeach from office any politician that gives the lobbyists the time of day.