EXPLAINER-How chip flaws Spectre, Meltdown work and what's next

    By Paresh Dave
    LAS VEGAS, Jan 11 (Reuters) - Smartphones, PCs and servers
across the world have received software updates in recent days
to plug security gaps on computer chips that cyber security
researchers have described as the most serious threat in years.
    Researchers identified the problem last year, shared details
with chip manufacturers last summer, and then made a public
announcement Jan. 3.
    
    What is the problem?
    The vulnerabilities, known as Meltdown and Spectre, can
allow passwords and other sensitive data on chips to be read.
The flaws result from the way computers try to guess what users
are likely to do next, a process called speculative execution.
    Simon Segars, the chief executive of chip designer ARM
Holdings, described speculative execution as the equivalent of
spinning a bunch of plates in the air, with the plates holding
data. 
    Watching the order in which the plates land lets observers
infer the data, he told Reuters during an interview on Wednesday
at the tech industry's CES conference in Las Vegas.
   
    How bad is it? 
    Affected chipmakers and large technology companies including
Alphabet Inc's           Google say they have not seen any
malicious hackers use Meltdown or Spectre in attacks, but the
vulnerabilities affect most modern computing devices.
    Security analysts have said that Meltdown, which only
affects Intel Corp          chips, is easier to exploit because
the program to steal passwords and other data can be hidden on a
website.
    Spectre, meanwhile, requires more direct access to the
microchip, but affects central processing units from Intel,
Advanced Micro Devices Inc         and SoftBank Group Corp's
         ARM.
        
    How have chipmakers and technology companies responded?
    Chipmakers have teamed up with Google, Microsoft Corp
        , Apple Inc         , and other leading tech companies
since the summer to devise software patches.
    
    Do the fixes have side effects? 
    The slowdown particularly affects Intel chips vulnerable to
Meltdown. Intel said on Wednesday that the performance decline
is as much as 10 percent, but that a typical home and business
PC user should not see big changes in how long it takes to save
a document or open a photo stored on a computer.
    The patches, however, do not always work with other
software. For example, a fix for Spectre led to issues turning
on some computers with AMD chips, and a Meltdown patch for
Microsoft Windows required changes from antivirus makers.
    
    What is being done to prevent similar problems in the
future?
    ARM's Segars said his company has been tweaking designs for
future chips to add "maximum flexibility." 
    The biggest change is adding more transistors to chips, a
negligible cost, to make it easier to turn chip features on and
off, he said. 
    Giving yourself "maximum flexibility" means it will be
easier to respond to future flaw discoveries, Segars said.
    Chipmakers and operating system makers must also collaborate
more. "What’s important to establish there is guidelines around
how to write software so you don’t run afoul," he said.

 (Reporting by Paresh Dave, editing by Peter Henderson and G
Crosse)
  

The Wider Image App

Explore the world through captivating visual stories by award-winning Reuters photojournalists. This immersive app for iPad reimagines news photography to bring images and information to life.

The Wider Image is a winner of 25 awards for innovation, photojournalism and design and an iTunes Editors Choice.

The Wider Image is also available as a responsive site at widerimage.reuters.com

Features include:

  • Discover What Matters: Uncover stories, people and places you never knew existed. New visual reports added daily to the wealth of work.
  • Lean in and Learn: Get more context on every story – interact with image sequences, read expanded facts, swipe between the before and after, hear words and sounds.
  • Meet the Storytellers: Get to know the photographers with behind the scenes images and insights. Follow your favorites to see new work as it is added.
  • Show and Tell: Enjoy stunning photojournalism on your television for all to see via Apple TV. Share stories with confidence they look great on any device.
EXPLAINER-How chip flaws Spectre, Meltdown work and what's next
EXPLAINER-How chip flaws Spectre, Meltdown work and what's next

Walmart hikes minimum wage, announces layoffs on same day

NEW YORK Walmart on Thursday said it will raise entry-level wages for U.S. hourly employees to $11 an hour in February as it benefits from last month’s major corporate tax cut and on the same day said it will shut stores and lay off thousands of workers. | Video

House passes NSA spying bill after Trump tweets cause confusion

EXPLAINER-How chip flaws Spectre, Meltdown work and what's next

The U.S. House of Representatives on Thursday passed a bill to renew the National Security Agency’s warrantless internet surveillance program, overcoming objections from privacy advocates and confusion prompted by morning tweets from President Donald Trump that initially questioned the spying tool.  Full Article 

Source: Reuters

News

BRIEF-‍Wattpad raises $51 mln in new funding

January 17, 2018 mmayha 0

Jan 17 (Reuters) – Wattpad: * ‍WATTPAD ANNOUNCES USD $51 MILLION (CAD $61.25 MILLION) IN NEW FUNDING​ * INVESTORS INCLUDE TENCENT HOLDINGS LIMITED, BDC, GLOBE TELECOM‘S KICKSTART VENTURES, PETERSON GROUP, AND EXISTING INVESTOR RAINE​ Source […]

Be the first to comment

Leave a Reply