301-571-5040    Get SUPPORT

Washington Works Blog

Reexamining Meltdown and Spectre

Reexamining Meltdown and Spectre

It’s been about a year and a half since the Meltdown and Spectre exploits became publicly known. While patches and updates were administered to reduce their threat, they continue to linger on in a less serious capacity. Of course, this doesn’t mean that the threat has entirely been neutered--you still want to know what these threats do and whether or not you’re safe from them.

What They Do
The Meltdown and Spectre threats both target the system processor, though in different ways. Meltdown essentially melts away the barrier between the processor and application processes and the system memory. On the other hand, Spectre can fool the processor into accessing parts of the system memory that it’s not supposed to. Both of these threats allow unauthorized access to a user’s system, creating more opportunities for further threat influence.

The biggest problem with Spectre and Meltdown is how widespread they are. They could potentially cause problems for every computer chip created over the past 20 years. Consequently, any data stored by technology utilizing these chips is also at risk.

How These Issues Were Resolved
Meltdown and Spectre have no definitive fix at the current moment, even though patches and updates have been frequently released in order to combat the latest updates to this threat. When the patches were first developed against Meltdown and Spectre, developers foresaw a major decrease in performance on the user’s end--as high as thirty percent, in fact.

Even though these patches do influence performance, the difference isn’t nearly as much as it was initially predicted to be. Depending on the individual circumstances (outlined below), the average user encountered much smaller effects that didn’t exceed five percent. Of course, this could change with future patch releases, but it’s important to keep in mind that the initial patches are generally going to have the biggest effects, as the primary concern is resolving the security issues rather than improving performance right off the bat.

What Influences Performance?
There are several factors that can influence the performance of your system following the patches of Meltdown and Spectre.

Use
Depending on what you use your system for, Meltdown and Spectre will have different effects on your system performance. It’s reasonable to assume that applications and uses that need more processing power will be affected more than other processes. If you take advantage of virtualization, or are investing in cryptocurrency mining, chances are that you’ll see a performance drop as a result of these patches.

Patch Used
Several companies have issued patches for these threats, so naturally you’ll have various effects from them.

Device Configuration
Your hardware and software configurations are going to change how much your technology will be affected by these patches. A perfect example is that a newer processor won’t be influenced as much by these patches. A more up-to-date operating system will also be more resilient to the effects of these patches as well.

A Word of Advice
The best way to take the fight to Meltdown and Spectre is by following simple best practices that help you maintain network security in the long run. For one, you should always install the latest patches and security updates so that you are always up-to-date against the latest threat definitions. You can also consider a hardware refresh, as more recent hardware won’t be as influenced as much as legacy hardware that has been around the block a time or two. There are various attempts to create processors resistant to these threats, but there is no timetable as to when they will be available. In the meantime, you can work with Washington Works to make sure that your systems are running as efficiently as possible. To learn more, reach out to us at 301-571-5040.

Some Providers are Offering Blockchain as a Servic...
Tip of the Week: Keep Employees Off of Distracting...
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Monday, October 22 2018
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Tip of the Week Security Technology Best Practices Cloud Privacy Business Computing Malware Hackers Email Network Security Business Tech Term Software Productivity Internet Computer Hosted Solutions Managed IT Services Backup Mobile Devices Ransomware User Tips IT Support Microsoft Data Productivity Google Data Backup Data Recovery Managed Service Provider IT Services Smartphone Efficiency Cloud Computing Outsourced IT Innovation Android Workplace Tips Encryption Data Management Browser Office 365 Business Management Social Media Hardware Paperless Office Windows 10 Business Continuity Communication Small Business Government Save Money Remote Monitoring Collaboration Disaster Recovery Artificial Intelligence BYOD Cybersecurity App Windows 10 Smartphones Work/Life Balance Infrastructure Tip of the week Facebook Server Unified Threat Management Phishing Bandwidth SaaS Word Customer Relationship Management Managed Service Windows Big Data Network Hosted Solution Mobile Device Applications Chrome Office Healthcare Password Saving Money BDR Employer-Employee Relationship Holiday Internet of Things Money VoIP Compliance Chromebook Two-factor Authentication Antivirus Virtual Reality Politics Wi-Fi Risk Management Passwords Vulnerability Managed IT Services File Sharing How To IT Management Document Management Apps Meetings Hacker VPN Remote Workers Maintenance Botnet Quick Tips Data Security Samsung Server Management HIPAA Business Technology Physical Security Twitter Virtual Private Network Computing Information Automobile Machine Learning Website Mobile Security Identity Theft Robot Point of Sale Smart Technology Telephone Systems Recovery G Suite Remote Computing Router Patch Management Firewall Computer Care Vendor Management Taxes Blockchain Scam Gmail Automation Data loss Regulations Training Tech Support Storage Websites IoT Alert Health How To Crowdsourcing Vulnerabilities Conferencing YouTube Black Friday Social Networking Emoji Communications The Internet of Things Network Management Staffing Alerts Company Culture Gadgets Cybercrime Budget Legislation Managed IT Chatbots WPA3 Microsoft Office Fraud Star Wars Administrator Access Control Electronic Medical Records Law Enforcement Analytics CCTV Dark Web Nanotechnology Utility Computing Features Personal Information Geography Instant Messaging Settings Webcam Cyber Monday Motherboard IT Support Touchscreen Licensing Managing Stress Help Desk Corporate Profile Mouse Outlook Identity Update Fleet Tracking Google Drive Education Cost Management Solid State Drive SharePoint Statistics Legal Gadget Microsoft Excel Lenovo Screen Reader Electronic Health Records High-Speed Internet Digital Mail Merge Professional Services Monitoring Cabling Upgrade WiFi Cooperation Social Notifications Enterprise Content Management Bookmarks WannaCry Travel Tablet Shortcut Asset Tracking Relocation VoIP Cleaning Hotspot Techology Assessment Cyberattacks Hard Disk Drive Spam Downloads Bluetooth Supercomputer IT Technicians Sports MSP Firefox Wireless Superfish Smart Tech IT Solutions Management Computer Repair Development Spyware Mobile Device Management Distributed Denial of Service Address Virtualization USB Consulting Unified Threat Management GPS Staff Unified Communications Favorites Monitors Motion Sickness Comparison OneNote Private Cloud Avoiding Downtime Language Internet Exlporer Enterprise Resource Planning Files Downtime Multi-Factor Security IT Budget Mirgation Search Proactive Connectivity Upgrades Processors Cables Web Server Managed IT Service Modem Dongle Managed Services Provider Disaster Office Tips User Error Heating/Cooling Tracking Bring Your Own Device Project Management Specifications Employee-Employer Relationship Error Time Management Augmented Reality Computing Infrastructure Value Mobile Read Only Google Calendar Digital Payment Remote Monitoring and Management IT Consultant Permissions Networking IBM Printer Servers Wearable Technology Wires Cameras Break Fix Cookies Cortana Black Market Service Level Agreement E-Commerce Uninterrupted Power Supply Marketing Printers Competition IP Address Hiring/Firing Users Customer Service Fun Regulation Miscellaneous Finance Mobile Office Domains Hard Drives Public Speaking Presentation CrashOverride Lithium-ion battery Wireless Technology 5G Safety Emergency