301-571-5040    Get SUPPORT

Washington Works Blog

Washington Works has been serving the Bethesda area since 2005, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Reexamining Meltdown and Spectre

Reexamining Meltdown and Spectre

It’s been about a year and a half since the Meltdown and Spectre exploits became publicly known. While patches and updates were administered to reduce their threat, they continue to linger on in a less serious capacity. Of course, this doesn’t mean that the threat has entirely been neutered--you still want to know what these threats do and whether or not you’re safe from them.

What They Do
The Meltdown and Spectre threats both target the system processor, though in different ways. Meltdown essentially melts away the barrier between the processor and application processes and the system memory. On the other hand, Spectre can fool the processor into accessing parts of the system memory that it’s not supposed to. Both of these threats allow unauthorized access to a user’s system, creating more opportunities for further threat influence.

The biggest problem with Spectre and Meltdown is how widespread they are. They could potentially cause problems for every computer chip created over the past 20 years. Consequently, any data stored by technology utilizing these chips is also at risk.

How These Issues Were Resolved
Meltdown and Spectre have no definitive fix at the current moment, even though patches and updates have been frequently released in order to combat the latest updates to this threat. When the patches were first developed against Meltdown and Spectre, developers foresaw a major decrease in performance on the user’s end--as high as thirty percent, in fact.

Even though these patches do influence performance, the difference isn’t nearly as much as it was initially predicted to be. Depending on the individual circumstances (outlined below), the average user encountered much smaller effects that didn’t exceed five percent. Of course, this could change with future patch releases, but it’s important to keep in mind that the initial patches are generally going to have the biggest effects, as the primary concern is resolving the security issues rather than improving performance right off the bat.

What Influences Performance?
There are several factors that can influence the performance of your system following the patches of Meltdown and Spectre.

Depending on what you use your system for, Meltdown and Spectre will have different effects on your system performance. It’s reasonable to assume that applications and uses that need more processing power will be affected more than other processes. If you take advantage of virtualization, or are investing in cryptocurrency mining, chances are that you’ll see a performance drop as a result of these patches.

Patch Used
Several companies have issued patches for these threats, so naturally you’ll have various effects from them.

Device Configuration
Your hardware and software configurations are going to change how much your technology will be affected by these patches. A perfect example is that a newer processor won’t be influenced as much by these patches. A more up-to-date operating system will also be more resilient to the effects of these patches as well.

A Word of Advice
The best way to take the fight to Meltdown and Spectre is by following simple best practices that help you maintain network security in the long run. For one, you should always install the latest patches and security updates so that you are always up-to-date against the latest threat definitions. You can also consider a hardware refresh, as more recent hardware won’t be as influenced as much as legacy hardware that has been around the block a time or two. There are various attempts to create processors resistant to these threats, but there is no timetable as to when they will be available. In the meantime, you can work with Washington Works to make sure that your systems are running as efficiently as possible. To learn more, reach out to us at 301-571-5040.

Some Providers are Offering Blockchain as a Servic...
Tip of the Week: Keep Employees Off of Distracting...


No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Saturday, July 21 2018
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Tip of the Week Security Technology Best Practices Cloud Business Computing Privacy Malware Hackers Software Network Security Email Business Internet Tech Term Managed IT Services Backup Mobile Devices Computer Microsoft Ransomware Productivity User Tips Google Hosted Solutions Data Recovery Smartphone Data Backup Productivity Android Managed Service Provider Cloud Computing IT Support Data Management Efficiency Social Media Windows 10 IT Services Encryption Business Continuity Office 365 Paperless Office Small Business Browser Communication Outsourced IT Remote Monitoring Hardware Business Management Data BYOD Work/Life Balance Innovation Workplace Tips Cybersecurity Save Money App Server Tip of the week Infrastructure Facebook Disaster Recovery Smartphones Bandwidth Government Password Antivirus File Sharing Big Data Windows Managed IT Services Employer-Employee Relationship Chromebook Chrome Holiday Windows 10 Hosted Solution Internet of Things Unified Threat Management Compliance Money Vulnerability IT Management Virtual Reality Saving Money Risk Management How To Word Artificial Intelligence SaaS Two-factor Authentication Phishing Applications Apps BDR Document Management Training Recovery Remote Computing Identity Theft Storage Maintenance Automobile Business Technology Alert Health Wi-Fi Samsung G Suite Passwords Computing Taxes Politics Physical Security Hacker Patch Management Scam Vendor Management Websites Customer Relationship Management Data loss Office Blockchain Mobile Device Botnet Gmail Regulations Automation VPN Data Security IoT Telephone Systems Server Management Virtual Private Network Firewall HIPAA Collaboration Twitter Mobile Security Computer Care Tech Support Smart Technology Robot Unified Threat Management The Internet of Things Assessment Avoiding Downtime Hotspot Web Server Downloads Error Budget Mobile Gadgets IT Technicians Wires Router Distributed Denial of Service User Error Computer Repair Internet Exlporer Time Management Language Cameras Mirgation Multi-Factor Security Communications Company Culture Modem How To Managed IT Service Cybercrime Processors Law Enforcement Upgrade Value Network Management Computing Infrastructure CCTV Google Calendar Virtualization Managing Stress Managed IT Cookies Analytics Break Fix Supercomputer Wireless Gadget Search Professional Services Touchscreen Alerts IT Support Chatbots Corporate Profile Legislation Emoji VoIP Enterprise Content Management Outlook Lenovo Nanotechnology Dark Web IT Budget Travel Electronic Medical Records USB Licensing Cabling Identity WannaCry Mouse Cortana Unified Communications Shortcut Superfish Screen Reader Firefox Microsoft Excel Digital Payment Motion Sickness Legal IBM Dongle Cooperation Monitors Tablet Staffing Office Tips Bring Your Own Device Notifications Microsoft Office Social Smart Tech IT Consultant Sports Service Level Agreement Heating/Cooling Staff Disaster Comparison Network Vulnerabilities Networking Website Connectivity Meetings Utility Computing Servers Uninterrupted Power Supply YouTube Specifications WiFi Administrator IT Solutions Geography Quick Tips Permissions Webcam Education Printer Machine Learning Spam Healthcare Wearable Technology Social Networking Settings Black Friday GPS Upgrades Black Market Mobile Device Management High-Speed Internet Crowdsourcing Star Wars Google Drive Fraud Point of Sale Solid State Drive Cleaning Access Control Relocation Management Statistics Mail Merge Motherboard Digital Cyber Monday Tracking Development Augmented Reality Techology Personal Information Cost Management VoIP Hard Disk Drive SharePoint Private Cloud Update Enterprise Resource Planning Bluetooth Address Spyware Downtime Cables Hiring/Firing Competition CrashOverride Fun Users Managed Service Emergency Miscellaneous Presentation 5G Wireless Technology Marketing IP Address Customer Service Mobile Office Domains Hard Drives Public Speaking Lithium-ion battery Safety