Spectre and Meltdown: Computer Chip Security Flaw Update

By January 8, 2018 Announcements, Security
Computer chip flaw: Spectre and Meltdown

It has been another interesting week in the IT business! We wanted you to have an update going into this week about Spectre and Meltdown, the computer chip security flaws. We will all get a lot more information this week and we will keep you informed. Just trying not to add to the “fake news” that is out there.

Bottom line: OXEN Technology is working with our leading industry partners, including Intel and Microsoft, to take measured and appropriate steps to mitigate the risk that we and our clients have from recently discovered security vulnerabilities.

If you’ve been keeping up with computer news over the last few days, you might have heard about Spectre and Meltdown. You might be wondering what they are, what they can do, and how they will affect you. Basically, Meltdown and Spectre are the names for multiple new vulnerabilities discovered and reported for numerous computer processors. Meltdown is a vulnerability for Intel processors while Spectre can be used to attack nearly all processor types.

The potential danger of an attack using these vulnerabilities includes being able to read “secured” memory. This can do things like reveal personally identifiable information, banking information, and of course usernames and passwords.

Microsoft, Google, Mozilla, and other vendors have been releasing patches to help protect users from these vulnerabilities. You may have heard that some of the updates from Microsoft may negatively interact with certain anti-virus solutions. We always work hard to make sure any “patch” to a system doesn’t create other problems. We have verified with our anti-virus and anti-malware software companies (Webroot and Malwarebytes) that they are compatible with the latest Microsoft updates.

The best thing to do to protect each of our businesses is to update our browsers and our operating systems with these patches as soon as updates are available. The updates currently available are in our update stream and are rolling out across our base of managed clients according to the existing update windows and processes.

We will learn over the coming days and weeks about the potential performance impact on existing computers, as well as the need for firmware or other updates. We hear a lot of speculation about this issue, so I will save a better update until we know more. Our best information has us expecting that older computers will be hit the hardest on the performance front. Hopefully, the chip and hardware vendors will have good news for us.

Bob Gentzler
President
bgentzler@oxen.tech


Recent Posts / View All Posts

IT Leadership | Shared CIO

You Need IT Leadership

| Consulting, Leadership | No Comments
Missouri is just beginning to emerge from its stay-at-home order in response to the pandemic threat. Who ever imagined that pandemic planning policies would become a reality? What was once regarded as a threat with low probability of occurrence will likely become a much higher probability as we navigate through the coming years. The realization of this threat has certainly changed the way we view ourselves and the world around us. It has sensitized us to our newfound vulnerability. This month, I am writing to you from the Joplin, MO office of OXEN Technology. Considering our present circumstances, our physical…
Tech Tip Background

Office 365 Tip: Create a file request in OneDrive

| Office 365, Tech Tip | No Comments
If you need to obtain files from various people, you can use OneDrive to create a file request that allows others to upload documents directly to a folder you specify. This gives people a quick way to transfer files to you without giving them view or edit permissions to your OneDrive folder. Here’s how! Note: This feature is not available in Office 365 Government. For file requests to work, your Office 365 administrator must enable Anyone links in OneDrive. Requesting Files Using OneDrive Online, select the folder where you want others to upload their files. Click Request files on the…
Virtual Private Network

What is a VPN and do you need one to work from home?

| Security | No Comments
Since businesses started shifting to remote work due to COVID-19, OXEN has seen a sizeable uptick in requests for purchasing and implementing VPNs for at-home workers. You’ve probably seen that a Virtual Private Network (VPN) connection is often recommended for securely working from home while accessing company resources. So what’s a VPN for in this context, and do you need one? If you’re a business manager, do you need a VPN connection for every employee who’s now working from home? Read on for our tips. What Is a Virtual Private Network? VPN stands for “Virtual Private Network”. It creates a…