“Today, AMD is providing updates regarding our recommended mitigations for Google Project Zero (GPZ) Variant 2 (Spectre) for Microsoft Windows users. These mitigations require a combination of processor microcode updates from our OEM and motherboard partners, as well as running the current and fully up-to-date version of Windows. For Linux users, AMD recommended mitigations for GPZ Variant 2 were made available to our Linux partners and have been released to distribution earlier this year…
Microsoft is releasing an operating system update containing Variant 2 (Spectre) mitigations for AMD users running Windows 10 (version 1709) today. Support for these mitigations for AMD processors in Windows Server 2016 is expected to be available following final validation and testing.
In addition, microcode updates with our recommended mitigations addressing Variant 2 (Spectre) have been released to our customers and ecosystem partners for AMD processors dating back to the first “Bulldozer” core products introduced in 2011.
AMD customers will be able to install the microcode by downloading BIOS updates provided by PC and server manufacturers and motherboard providers. Please check with your provider for the latest updates.”
Spectre Mitigation Update – Mark Papermaster, Senior Vice President and Chief Technology Officer
Security
Patch Tuesday
*This post will be updated as info comes in.
Microsoft Security Update Summary at bottom of post.
Windows 7 SP1 – April 10, 2018—KB4093118 (Monthly Rollup)
Win10 1709 – April 10, 2018—KB4093112 (OS Build 16299.371)
“This update includes quality improvements. No new operating system features are being introduced in this update.”
Win10 1703 – April 10, 2018—KB4093107 (OS Build 15063.1029)
“This update includes quality improvements. No new operating system features are being introduced in this update.”
Win10 1607 – April 10, 2018—KB4093119 (OS Build 14393.2189)
“Windows 10 version 1607 will reach end of service on April 10, 2018. Devices running Windows 10 Home or Pro editions will no longer receive monthly security and quality updates that contain protection from the latest security threats. To continue receiving security and quality updates, Microsoft recommends updating to the latest version of Windows 10.”
Insider builds also get the above updates (KB4100375).
[Read more…] about Patch Tuesday
Intel Isn’t Going To Patch Your Old CPU
Intel has microcode patches available for newer CPUs.
They are not going to patch: Bloomfield, Clarksfield, Gulftown, Penryn, Wolfdale, Yorkfield…
AFAICS this is basically Intel Core 2 through the early i5/7 and the Xeons from those eras.
Intel – Microcode Revision Guidance, April 2, 2018 (PDF)
Windows Defender Vulnerability
I’m in front of the boob tube last night and I get this email entitled “Microsoft Security Update Releases” (full email posted below).
CVE-2018-0986 | Microsoft Malware Protection Engine Remote Code Execution Vulnerability
The gist of the alert is that all versions of Windows Defender have a vulnerability.
If Windows Defender scans an infected file then a hacker could own your system.
Rephrased…
If the product that is supposed to protect your system just SCANS a bad file you could be OWNED.
Fortunately this has been patched. Windows Defender should update automatically but you can force an update.
Press the Windows + R keys > copy paste the following: “%ProgramFiles%\Windows Defender\MSASCui.exe” -Update
[Read more…] about Windows Defender Vulnerability
Tweaking Firefox
This is how I set up and run Firefox on my Windows machines. It’s pretty basic but it is all I need.
[Read more…] about Tweaking Firefox
Patch Tuesday
Updates available for all things Windows. I am still not updating my Windows 7 machines. The only Win10 machine I am updating is my main rig. I have switched that over to Windows Insider Fast Lane so I can get a head start on the Spring Creators Update that comes out next month. The things I do for you guys.
Full Windows Update info at the bottom of this post.
Win10 version 1709: March 13, 2018—KB4088776 (OS Build 16299.309)
“This update includes quality improvements. No new operating system features are being introduced in this update.”
Win10 version 1703: March 13, 2018—KB4088782 (OS Build 15063.966)
“This update includes quality improvements. No new operating system features are being introduced in this update.”
Firefox 59
Firefox 32-bit
Firefox 64-bit
All downloads
Release Notes. Be sure to check these out as there are a couple of new features you’ll want to know about.
Related: Tor Browser 7.5.1 released and Tails 3.6 too.
CCleaner 5.41
Release Announcement
Download (I use the portable version)
Thanks Arthur!
Adobe Flash Player 29.0.0.113
for Firefox, Opera
for Internet Explorer
[Read more…] about Patch Tuesday
AMDFLAWS.com
So this is a thing: https://amdflaws.com/
Slashdot links to this article: AMD has a Spectre/Meltdown-like security flaw of its own
They say, “13 Critical Security Vulnerabilities and Manufacturer Backdoors discovered throughout AMD Ryzen & EPYC product lines.” Apparently they only gave AMD a 24 hour heads up.
Just you break out the popcorn, sit back, put your feet up and watch what comes of this.
Patch Tuesday
I’m not patching. See the previous post: Patch Tuesday, Part 1 as to why.
Windows 10: February 13, 2018—KB4074588 (OS Build 16299.248)
Warning – Windows 7 Users, KB2952664 Is Back
It has been moved to “Important” again. We Geeks don’t like it because it is telemetry related.
KB2952664 – Compatibility update for keeping Windows up-to-date in Windows 7
In Windows Update you can right-click and hide this.
My script to block this and other sneaky updates: https://www.tweakhound.com/2015/11/01/remove-and-block-gwx-in-windows-7-2/
Microsoft Security Update Summary for February 13, 2018
I post this for your info when Microsoft sends it to me.
[Read more…] about Patch Tuesday
Patch Tuesday, Part 1
Let’s try this again shall we?
Today is patch Tuesday. My advice from last Patch Tuesday holds,
“Unless you are a masochist you shouldn’t be updating any Windows machine today.“
I’ll post more info this afternoon.
Over at AskWoody they are MS-DEFCON 2
“Last month’s Patch Tuesday (and Monday, Wednesday, Thursday, Friday, Saturday and Sunday) should prove, once again, that knowledgeable Windows users need to turn off Automatic Update.”
More from Woody here:
Get Windows Update locked down in preparation for this month’s problems
“If February turns out half as bad as January, you’ll thank your lucky stars if you take a few minutes now and make sure Windows Update is turned off. Temporarily, of course.”
New AMD Drivers
Listed as “Optional”, AMD has released the Radeon Adrenalin Edition 18.2.2 drivers.
Support for Final Fantasy 12: The Zodiac Age and a couple of minor fixes. Download
Adobe Reader Updated
Adobe Acrobat Reader DC 2018.11.20035. Download and Release Notes
GET OFF OF FACEBOOK
A Facebook employee asked a reporter to turn off his phone so Facebook couldn’t track its location — and it reveals a bigger problem within the company
“Whether Facebook actually does track its employees this way doesn’t matter. The fact an employee would think such an option was on the table is telling of the culture at the company.”
Facebook is illegally collecting user data, court rules
“A German court today ruled Facebook was collecting data illegally from its users…Facebook hides default settings that are not privacy-friendly in its privacy center and does not provide sufficient information about it when users register…This does not meet the requirement for informed consent.”
Wired – Inside Facebook’s Hellish Two Years—and Mark Zuckerberg’s Struggle to Fix it All
“Facebook has essentially told media to kiss off,” Franklin Foer wrote in The Atlantic. “Facebook will be back primarily in the business of making us feel terrible about the inferiority of our vacations, the relative mediocrity of our children, teasing us into sharing more of our private selves.””Facebook will start to boost certain publishers—ones whose content is “trustworthy, informative, and local.”
Less-cool Facebook losing youth at fast pace: survey
“With mom, dad and grandma signing up in increasing numbers, Facebook is losing younger users in the United States at a faster pace than previously estimated”
They stopped actually using Facebook with their friends a longtime ago. When you were 16 would you hang out where your parents were?
Do Not, I Repeat, Do Not Download Onavo, Facebook’s Vampiric VPN Service
“Facebook is not a privacy company; it’s Big Brother on PCP. It does not want to anonymize and protect you; it wants to drain you of your privacy, sucking up every bit of personal data. You should resist the urge to let it, at every turn.”
– – – – – – – – – – – – – – – – – – – –
Yellow Jacket 12/3 Heavy-Duty Contractor Extension Cord with Lighted Ends, 50-Feet
$30 . That is 30% off. Killer deal. I just bought one. EXPIRED
Patch Tuesday, Part 1
Today is patch Tuesday. My advice from last Patch Tuesday holds,
“Unless you are a masochist you shouldn’t be updating any Windows machine today.“
I’ll post more info this afternoon.
oops, I was a week early.