Who’s affected by computer chip security flaw

Technology companies are scrambling to fix serious security flaws affecting computer processors built by Intel and other chipmakers and found in many of the world’s personal computers and smartphones.

Posted: Jan 4, 2018 3:18 PM

Technology companies are scrambling to fix serious security flaws affecting computer processors built by Intel and other chipmakers and found in many of the world’s personal computers and smartphones.

The two hardware bugs discovered can be exploited to allow the memory content of a computer to be leaked. Such a leak could potentially expose stored passwords and other sensitive data, including personal photos, emails and instant messages.

Researchers at Google’s Project Zero and academic institutions including the Graz University of Technology in Austria discovered the problem last year and disclosed it Wednesday.

There’s no evidence that bad actors have yet exploited the bugs, but companies from Microsoft to Mozilla said this week they have worked to patch up vulnerabilities to their operating systems and browsers to protect against one of the bugs. But researchers say the other is harder to fix and “will haunt us for quite some time.”

Here’s a look at what’s affected, what’s being done about it and whether you should worry.

___

INTEL INSIDE

Intel is at the center of the problem because it supplies the processors used in many of the world’s PCs. Researchers say one of the bugs, called Meltdown, affects nearly every processor it’s made since the mid-1990s.

While security flaws are typically limited to a specific company or product, Intel says the problem is “not a bug or a flaw in Intel products” but rather a broader problem affecting processing techniques common to modern computing platforms.

Both the chipmaker and Google, which informed Intel about the vulnerability last year, said they were planning to disclose the issue next week when fixes will be available. Tech companies typically withhold details about security problems until fixes are available so that hackers wouldn’t have a roadmap to exploit the flaws. But in this case, Intel was forced to disclose the problem Wednesday after British technology site The Register reported it, causing Intel’s stock to fall.

Most of the immediate fixes will be limited to the Meltdown bug. The other, Spectre, is harder to fix, but also harder to exploit, making it less of an immediate threat to consumer devices.

___

OTHER CHIPMAKERS

While researchers say the Meltdown bug is limited to Intel processors, they have verified Spectre as a problem for Intel, Advanced Micro Devices and ARM processors. AMD chips are also common in PCs, while ARM chips are found in many smartphones and other internet-connected products, including cars and home appliances.

AMD said there is “near zero risk” to its own processors, either because its chips are designed differently, or security fixes for Microsoft Windows and other operating systems will take care of the problem. ARM Holdings said it’s working with Intel, AMD and operating system vendors to address the problem. The ARM design is also used in Apple’s mobile chips; Apple didn’t immediately respond to inquiries on whether iPhones and other mobile products are affected.

___

WHAT TO DO NEXT?

There are limits to what consumers can do now to protect their computers.

Advice from the U.S Computer Emergency Readiness Team’s was grim. The federal organization says that “fully removing the vulnerability” requires replacing the hardware already embedded in millions of computing devices.

That’s not to say nothing can be done.

Consumers can mitigate the underlying vulnerability by making sure they patch up their operating systems with the latest software upgrades. There are already Meltdown patches for Microsoft’s Windows, Apple’s macOS and Linux. Mozilla says it’s also implementing a short-term mitigation that disables some capabilities of its Firefox browser. Google says Android devices are protected if they have the latest security updates.

“If you download the latest update from Microsoft, Apple, or Linux, then the problem is fixed for you and you don’t have to worry,” security researcher Rob Graham said in a blog post Thursday. “If you aren’t up to date, then there’s a lot of other nasties out there you should probably also be worrying about.”

Graham says fixing the problem will require a major design of processors and operating systems, but that’s not something most consumers will notice.

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 32437

Reported Deaths: 2030
CountyConfirmedDeaths
Marion9371546
Lake3347170
Cass15867
Allen135366
St. Joseph121834
Hendricks113567
Hamilton112391
Johnson1092104
Elkhart107028
Madison58259
Porter49521
Bartholomew48634
Clark47141
LaPorte41523
Tippecanoe3803
Howard37620
Jackson3681
Delaware35936
Hancock32327
Shelby32121
Floyd31539
Boone29335
Morgan27024
Vanderburgh2532
Montgomery23317
White2288
Decatur22431
Clinton2221
Grant19521
Noble19221
Harrison18821
Dubois1852
Henry1709
Greene16824
Warrick16528
Dearborn16421
Monroe16211
Vigo1507
Lawrence14623
Miami1391
Putnam1347
Jennings1284
Orange12422
Scott1183
Ripley1136
Franklin1068
Kosciusko971
Carroll932
Daviess8416
Marshall801
Steuben802
Wayne755
Newton7410
Wabash732
Fayette714
Jasper621
LaGrange622
Washington521
Fulton471
Jay460
Randolph453
Rush452
Jefferson421
Whitley412
Clay411
Pulaski400
Owen341
Sullivan331
DeKalb331
Brown331
Starke313
Perry260
Wells260
Huntington262
Knox250
Benton250
Tipton241
Crawford230
Blackford202
Switzerland190
Fountain182
Parke180
Spencer171
Posey160
Gibson142
Ohio130
Warren121
Adams121
Vermillion100
Martin90
Union80
Pike60
Unassigned0159

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 114306

Reported Deaths: 5083
CountyConfirmedDeaths
Cook745213455
Lake7845270
DuPage7350347
Kane5947162
Will5279264
Winnebago200152
McHenry147569
St. Clair103573
Kankakee80843
Kendall73619
Rock Island63823
Champaign5807
Madison54457
Boone41016
Sangamon33727
DeKalb3343
Randolph2644
Jackson24210
McLean21513
Out of IL2051
Stephenson1942
Ogle1932
Macon18919
Peoria1888
Clinton17817
Union1437
LaSalle14013
Whiteside13410
Iroquois1314
Coles11912
Warren1130
Unassigned1100
Jefferson10116
Knox940
Monroe9311
Grundy882
McDonough837
Lee761
Tazewell693
Cass680
Henry670
Williamson572
Marion500
Jasper457
Adams441
Macoupin431
Perry410
Pulaski410
Montgomery391
Vermilion371
Morgan341
Christian334
Jo Daviess310
Livingston312
Douglas260
Fayette203
Ford201
Jersey201
Washington180
Woodford182
Mason170
Menard170
Mercer160
Shelby161
Bureau151
Hancock150
Carroll142
Franklin120
Piatt120
Schuyler120
Crawford110
Fulton110
Bond101
Brown100
Clark100
Cumberland100
Logan100
Moultrie100
Wayne91
Alexander80
Henderson80
Johnson70
Massac70
Saline70
Effingham61
Greene50
Marshall50
De Witt40
Lawrence40
Richland30
Stark30
Clay20
Edwards20
Gallatin20
Hamilton20
Wabash20
White20
Calhoun10
Hardin10
Pike10
Pope10
Putnam10
Edgar00
Terre Haute
Clear
75° wxIcon
Hi: 82° Lo: 64°
Feels Like: 75°
Robinson
Broken Clouds
71° wxIcon
Hi: 80° Lo: 63°
Feels Like: 71°
Indianapolis
Broken Clouds
78° wxIcon
Hi: 79° Lo: 64°
Feels Like: 80°
Rockville
Overcast
66° wxIcon
Hi: 80° Lo: 63°
Feels Like: 66°
Casey
Clear
73° wxIcon
Hi: 80° Lo: 63°
Feels Like: 73°
Brazil
Clear
75° wxIcon
Hi: 80° Lo: 63°
Feels Like: 75°
Marshall
Clear
75° wxIcon
Hi: 82° Lo: 63°
Feels Like: 75°
Cold Front Approaching
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events