Home

About Us

IT Services

Electronic Security

Knowledge Center

News & Events

Blog

Support

Contact Us

Blog
  • Register

Prosper Solutions Blog

Surveying the Damage of Meltdown and Spectre

Surveying the Damage of Meltdown and Spectre

At the time of this writing, it has only been about a half a year since the Meltdown and Spectre exploits became public knowledge. Fortunately, patches were swiftly rolled out to mitigate the problems that these exploits could cause, but that doesn’t mean that these exploits are dead and buried. Let’s look back at Meltdown and Spectre to help us establish where we stand today.

What Do They Do?
Both Meltdown and Spectre affect the processor of the targeted system. The accurately-named Meltdown virtually melts away the barriers that a processor has between application processes and the system memory, which is not a good thing. Spectre works differently, in that it can ‘fool’ the processor into accessing parts of a system’s memory that it shouldn’t. Either of these results could quite easily allow a greater threat to access a user’s system.

The worst thing about Spectre and Meltdown is that they are so widespread, with the capability to influence almost every computer chip manufactured in the past 20 years. This could potentially put any data at risk, regardless of how well it was otherwise protected.

How They Were “Fixed”
Unfortunately, there is no singular, magic bullet fix for Meltdown and Spectre. However, patches were quickly released and have continued to roll out, as these exploits are repeatedly updated. When first discovered and mitigated, developers warned that patching against Meltdown and Spectre may cause a dip in performance as high as thirty percent.

While these patches do influence performance, the influence they have is currently much less significant than initially advertised. While the actual numbers vary based on a few circumstances that can be found below, the average use case showed much smaller affects, topping out at around five percent. This may change as later patches are released. However, it is also important to remember that in these kinds of situations, the initial patches usually have the greatest effects.

What Influences Performance
As mentioned above, there are other circumstances that will make the patches for Meltdown and Spectre more of a burden on your system, thereby causing a slight dip in your performance.

Use
Depending on your intended usage of your system, Meltdown and Spectre could have greater or lesser effect. A good rule of thumb to keep in mind is that applications and uses that lean more heavily on processing power will be more affected than others. So, if you rely heavily on virtualization, or have made investments into cryptocurrency mining, you may be disappointed to find your performance suffer.

Patch Used
A variety of companies have put out patches, which means that different patches are going to have different effects on the systems that they are applied to.

Device Configuration
Both your system’s hardware and software are going to influence how you may find your technology to be impacted by these patches. For instance, a newer processor will most likely be more resilient against the adverse effects of the patches, and a more up-to-date operating system, like Windows 10, will be impacted less than 7 or 8.

Our Best Advice
In order to fend off Meltdown and Spectre, we recommend that you follow a few basic best practices, including regularly installing updates to your software and being generally more security-minded as you utilize your technology. Additionally, it is probably also in your best interest, if you were considering a hardware refresh/update, to wait a while. There are currently efforts being made to develop processors that are resistant to these threats, but there is still no indication of when this hardware will be made available.

In the meantime, keep checking back to our blog for IT best practices, tips, and more.

Your Backup Needs to Meet Some Prerequisites
Tip of the Week: What You’ll Need to Leverage BYOD
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Monday, December 10, 2018

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Applications Time Management IP Address Network Security Mobile Computing Cryptocurrency Disaster Virus Knowledge Twitter Programming Motion Sickness Finance IT Consultant Inbound Marketing 3D Printing Conferencing Messenger Pain Points Administrator Net Neutrality Asset Tracking Gadgets Computer Malfunction Managed IT Encryption Experience HIPAA Business Cards Value Going Green Troubleshooting Save Money Healthcare VoIP Project Management Error Business Owner Network Management Directions Networking Start Menu Disaster Recovery Vendor Mangement Running Cable Thank You Unified Threat Management Printer Worker Computer Care Technology Tips Vulnerability Cache Digital Payment Current Events Human Resources Skype Automobile Environment Microsoft Excel Software as a Service Streaming Media Cortana Backup and Disaster Recovery Nanotechnology Application Micrsooft Gaming Console Data Security Music clout services Computing Infrastructure Cybersecurity Relocation Hacking Gamification Trending Risk Management Tactics Bluetooth Training Data Loss eWaste Firewall SaaS Smartphone Displays Vendor Management Network Congestion Cybercrime Outlook Memory Management WiFi Proactive IT Bandwidth Multi-factor Authentication Comparison HTML LiFi communications Business Metrics Data Warehousing Cleaning Mobile Security Smart Tech Unified Communications Big data Company Culture Touchscreen User Error Retail Customer Resource management Customer Service USB End of Support Uninterrupted Power Supply Equifax Operating System Piracy Remote Monitoring Tech Analytics Product Reviews Navigation Staffing DDoS Sync Phone System File Sharing Digital Signature CCTV Electronic Payment Google Downtime Web Server SharePoint Statistics PDF Printers hardware Content Hacker Computing Documents Hard Drive Heating/Cooling Robot Apple Patching Business Continuity Telephone Systems Recovery Flexibility Proxy Server Wireless Augmented Reality Websites Reading Windows 8 Settings Analytic Securty Law Enforcement Two-factor Authentication Avoiding Downtime Emails Windows Computers Upload Virtual Reality Efficiency Wireless Technology Machine Learning Digital Username Email Hosted Solutions Hackers Taxes Upgrade Employer Employee Relationship Processors Audit Data Protection User Tip Fileless Malware Service Level Agreement Router Word Business Computing Facebook Internet of Things Scam cyber security Work/Life Balance Books Cost IBM Multi-Factor Security Consultation UTM uptime Politics Health Alert Public Speaking Windows Server 2008 Marketing Managed IT Services Downloads Domains Hard Drives Computer Accessories Passwords Best Practice How To Money Intranet Innovation Artificial Intelligence Workplace Tips Cabling Assessment Evernote Data Backup Ransomware Enterprise Resource Planning In Internet of Things Travel Communication Hack Excel Telephone Browsers Employer-Employee Relationship Solid State Drive Banking Password BDR Document Management Business Technology Dark Web Congratulations Business Monitoring Government Vulnerabilities Physical Security Laptop Samsung Fiber-Optic Remote Computing Data Recovery VoIP Saving Time Microsoft Office Information Technology Managed IT services Specifications IT Plan Chrome Social MSP Entertainment Mobile Payment Google Drive Safety Storage Managed Service Freedom of Information Scalability Data Management VPN Device security Hard Drive Disposal Google Maps Windows 10 Software License Teamwork Mobile Device IT Quick Tips Language Hacks G Suite Meetings Access Control Database A.I. Society CrashOverride Wi-Fi Visible Light Communication the Internet of Things Outsourced IT Budget Office Tips Save Time Gmail IT Support Redundancy Google Wallet Small Business Black Market Read Telephony Search IT Services BYOD Saving Money Managed IT Service Telephone System Upgrades Entrepreneur Access Writing Google Docs Compliance Screen Reader Term Website Help Desk Competition Miscellaneous Android Windows10 Managed Service Provider Best Practices Mobile Devices Phishing Text Messaging Botnet Regulation Computer Repair Patch Management Security Addiction News Drones Flash Administration outsource cloud storage Maintenance Migration Connected Devices Browser Lithium-ion battery Public Cloud email scam Technology Information Virtualization Smartphones Reliable Computing Automation Business Mangement Tablets Fake News Google Calendar Spam Desktop Computer Antivirus User Tips Co-Managed IT YouTube Supercomputer Mouse Regulations Tablet Licensing Bitcoin Bata Backup Server Spyware Update Cost Management Education Blockchain Trends outsource cloud computing Mobility Startup Productivity Business Intelligence Holiday Tech Term Processor Bookmark Virtual Assistant Microsoft IT Support Mobile Device Management Electronic Medical Records Microchip Apps Windows 10 Windows 7 Identity Theft Webcam Collaboration Fleet Tracking User Customer Relationship Management Advertising Download Network Mobile Technology Printing cloud storage Accountants Fraud Productuvuty Capital Malware Tech Terms Bring Your Own Device cloud computing cloud PowerPoint Deep Learning Distributed Denial of Service Business Growth IT consulting IT service Office switches Legal Content Filtering Chromebook Hosted Solution Permissions Windows XP Rental Service Data Breach Social Engineering Emergency IT Management Private Cloud Social Media Tip of the Week Data CIO Tech Support Best Available Distribution Virtual Desktop Paperless Office Office 365 Devices Monitors Productivity Corporate Profile Business Management App Keyboard Electricity Wireless Headphones History Tip of the week Managing Stress Shortcut Hiring/Firing Sports Privacy Software iPhone Social Networking Data storage Legislation Presentation Health IT Citrix Xenapp Social Network Tracking Television Workers Data Analysis Internet Notifications Users Vendor WannaCry Backup Unified Threat Management

Latest News & Events

Prosper Solutions is proud to announce the launch of our new website at http://www.prospersolutions.com. The goal of the new website is to make it easier for our existing clients to submit and manage support requests, and provide more information about our ser...

Contact Us

Learn more about what Prosper Solutions can do for your business.

Call Us Today
Call us today
(617) 369-9977

150 Eastern Ave, Second Floor
Chelsea, Massachusetts 02150