Jump to content
Sign in to follow this  
alt3rn1ty

InSpectre - New Steve Gibson utility

Recommended Posts

I saw that.  Still only goes back to Skylake, but they are making progress.  Tons of people use pre-Skylake CPUs--I guess Skylake + makes up the bulk out there in the wild.

Share this post


Link to post
Share on other sites

Indeed. Patchable in firmware, in a few weeks vs months or never, requires admin access AND a BIOS reflash to make it all work. Color me unsurprised to find all that out. It's basically no worse than Intel's own problems with their IME chip that everyone swept under the rug.

Share this post


Link to post
Share on other sites

Intel are cutting back on the amount of planned microcode fixes, so some older models will not be supported ..

https://arstechnica.com/gadgets/2018/04/intel-drops-plans-to-develop-spectre-microcode-for-ancient-chips/

 

And here's the guide listing all the ones that will be getting an update ..

https://newsroom.intel.com/wp-content/uploads/sites/11/2018/04/microcode-update-guidance.pdf

Thankfully all of our family machines are being done.

 

And just a reminder, here are the ones already done ..

https://support.microsoft.com/en-us/help/4090007/intel-microcode-updates

Share this post


Link to post
Share on other sites

InSpectre has been updated

  • Release #8 — Now shows whether an Intel microcode patch is (ever) available for Spectre.
    Intel has finished designing microcode update patches for its processors. On April 2nd, 2018, they announced that processors that have not yet been patches will never be patched. Their full statement is available in this PDF document. In that document, Intel specifies which of their many processors do have patches and which of their more recent processors will never receive updated firmware. Now that the industry has this information, this 8th release of InSpectre incorporates that list of CPUIDs and displays whether microcode firmware updates exist for the system's Intel CPU.

Share this post


Link to post
Share on other sites

And at long last my machine has had all the fixes, although at the moment the Spectre microcode fix is the one fed to the processor as windows boots up, I would still prefer the BIOS fix from MSI, which is going to take a while longer.

https://support.microsoft.com/en-us/help/4090007/intel-microcode-updates

https://support.microsoft.com/en-us/help/4078407/update-to-enable-mitigation-against-spectre-variant-2

InSpectre release #8 (running in Admin mode) detects all of them as fixed

9l6AEN9.png

 

And so far I have had no detectable performance decrease in games, but if that happens just use InSpectre before hand and use its Disable fix buttons temporarily.

Share this post


Link to post
Share on other sites

I just received an email today from MSI linking me to a BIOS update for my laptop machine. I sent them a request for support in case my machine model had mistakenly been missed, and I think my suspicion was sort of correct, the modified date on the BIOS file was 22nd of March.

I think someone just forgot to update my machines page on their website. Anyway, alls well that ends well, its now successfully reflashed with the new BIOS firmware and doing the necessary :)

Share this post


Link to post
Share on other sites

:facepalm::lmao:

Windows 10 April 18 update - Apparently they have not bundled the Spectre mitigation microcode updates (KB4090007) with it.

So if you already applied the update to Windows 10 Fall Creators update 1709 .. Standby to watch that get overwritten and not be protected anymore, and go back to waiting for another update from Microsoft.

For those of us with actual BIOS updates thats not a problem, but you would have thought they would include the boot time microcode updates they have already done for everybody in the major overhaul of the OS.

Share this post


Link to post
Share on other sites

Well I just updated to my latest BIOS (1.8) and according to InSpectre the system is still vulnerable to Spectre. So MSI have not fixed this on my motherboard yet.

Share this post


Link to post
Share on other sites

I just this minute finished updating to Windows 10 April 18 update v 1803, and InSpectre is reporting I am still protected across the board .. So the MSI BIOS update I was emailed a link to by MSI support Staff seems to be working fine here (otherwise due to the new windows update not including the on boot microcode update I would have reverted to Spectre Protection not installed) :

The MSI support page in my case though still needs to be updated with a new BIOS (at least to match the one I received), so I am guessing MSI are still doing their best to update all the models they need to, and the supporting website pages and links to new files. Just a case of remaining patient, but also, unless some attacker has actual access to your machine, it cant be exploited. And so far there are no reports anyone has heard of that the vulnerability has any actual code in the wild to take advantage of it. Maybe nation state level organisations have, for use of government spooks, but I have no worries they would be interested in my game modding machine, :) unless they are bored.

 

Share this post


Link to post
Share on other sites
2 hours ago, drizzan said:

Well I just updated to my latest BIOS (1.8) and according to InSpectre the system is still vulnerable to Spectre. So MSI have not fixed this on my motherboard yet.

Oh wait .. Did you right click InSpectre and "Run as Administrator"

If not it will not have enough access permission to find out if your BIOS is protecting you, and defaults to answering NO

Share this post


Link to post
Share on other sites

I did run it as both admin and regular user, in both cases it answers with not protected vs Spectre. The latest BIOS for my card was released in January 2018, it had a note that said: "- Update Intel Micro code for security vulnerabilities " but that doesn't seem to be Spectre, unless you need a Windows 10 update for Spectre aswell which I haven't downloaded manually. I have just gotten the regular updates through Windows Update.

Share this post


Link to post
Share on other sites

Asus decided to work some BIOS's to include a Spectre fix.  Kudos, Asus (if you're reading :)).  BIOS-level should have less of an impact on performance, yes, no?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

Support us on Patreon!

×