parent
c4a30a17ea
commit
a02ad504d2
1
404.html
1
404.html
@ -9,7 +9,6 @@
|
|||||||
<link rel="stylesheet" href="/assets/styles/main.css" />
|
<link rel="stylesheet" href="/assets/styles/main.css" />
|
||||||
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
||||||
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
||||||
<!-- hi -->
|
|
||||||
</head>
|
</head>
|
||||||
|
|
||||||
|
|
||||||
|
@ -9,7 +9,6 @@
|
|||||||
<link rel="stylesheet" href="/assets/styles/main.css" />
|
<link rel="stylesheet" href="/assets/styles/main.css" />
|
||||||
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
||||||
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
||||||
<!-- hi -->
|
|
||||||
</head>
|
</head>
|
||||||
|
|
||||||
|
|
||||||
@ -49,14 +48,26 @@
|
|||||||
|
|
||||||
|
|
||||||
<section class="spotlight">
|
<section class="spotlight">
|
||||||
<div class="image"><img src="/assets/images/pic01.jpg" alt="" /></div>
|
<div class="image"><img src="/assets/images/spectre.jpg" alt="" /></div>
|
||||||
|
<div class="content">
|
||||||
|
<h2>
|
||||||
|
<a href="/blog/spectre-and-meltdown/" class="link">
|
||||||
|
Spectre and Meltdown
|
||||||
|
</a>
|
||||||
|
</h2>
|
||||||
|
<p>A Spectre Is Haunting Our Processors...</p>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
<section class="spotlight">
|
||||||
|
<div class="image"><img src="/assets/images/thinkpad.jpg" alt="" /></div>
|
||||||
<div class="content">
|
<div class="content">
|
||||||
<h2>
|
<h2>
|
||||||
<a href="/blog/our-founding-principles/" class="link">
|
<a href="/blog/our-founding-principles/" class="link">
|
||||||
Our Founding Principles
|
Our Founding Principles
|
||||||
</a>
|
</a>
|
||||||
</h2>
|
</h2>
|
||||||
<p>Autonomic Co-operative And Our Core Values.</p>
|
<p>Autonomic Co-operative And Our Core Values</p>
|
||||||
</div>
|
</div>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
|
@ -15,7 +15,6 @@
|
|||||||
<link rel="stylesheet" href="/assets/styles/main.css" />
|
<link rel="stylesheet" href="/assets/styles/main.css" />
|
||||||
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
||||||
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
||||||
<!-- hi -->
|
|
||||||
</head>
|
</head>
|
||||||
|
|
||||||
|
|
||||||
@ -49,10 +48,10 @@
|
|||||||
|
|
||||||
<div
|
<div
|
||||||
class="header-image"
|
class="header-image"
|
||||||
style="background-image: url('/assets/images/pic01.jpg');"></div>
|
style="background-image: url('/assets/images/thinkpad.jpg');"></div>
|
||||||
|
|
||||||
<h2>Our Founding Principles</h2>
|
<h2>Our Founding Principles</h2>
|
||||||
<p>Autonomic Co-operative And Our Core Values.</p>
|
<p>Autonomic Co-operative And Our Core Values</p>
|
||||||
<p><em>October 03, 2017</em></p>
|
<p><em>October 03, 2017</em></p>
|
||||||
</header>
|
</header>
|
||||||
<section class="wrapper style5">
|
<section class="wrapper style5">
|
||||||
|
260
blog/spectre-and-meltdown/index.html
Normal file
260
blog/spectre-and-meltdown/index.html
Normal file
@ -0,0 +1,260 @@
|
|||||||
|
<!DOCTYPE HTML>
|
||||||
|
<!--
|
||||||
|
Spectral by HTML5 UP
|
||||||
|
html5up.net | @ajlkn
|
||||||
|
Free for personal and commercial use under the CCA 3.0 license (html5up.net/license)
|
||||||
|
-->
|
||||||
|
<html>
|
||||||
|
|
||||||
|
<head>
|
||||||
|
<title>Autonomic Co-operative</title>
|
||||||
|
<meta charset="utf-8" />
|
||||||
|
<link rel="shortcut icon" href="/assets/images/favicon.ico" />
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||||
|
<!--[if lte IE 8]><script src="/assets/js/ie/html5shiv.js"></script><![endif]-->
|
||||||
|
<link rel="stylesheet" href="/assets/styles/main.css" />
|
||||||
|
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
||||||
|
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
||||||
|
</head>
|
||||||
|
|
||||||
|
|
||||||
|
<body>
|
||||||
|
|
||||||
|
<div id="page-wrapper">
|
||||||
|
<header id="header" >
|
||||||
|
<h1><a href="/">Autonomic</a></h1>
|
||||||
|
<nav id="nav">
|
||||||
|
<ul>
|
||||||
|
<li class="special">
|
||||||
|
<a href="#menu" class="menuToggle"><span>Menu</span></a>
|
||||||
|
<div id="menu">
|
||||||
|
<ul>
|
||||||
|
<li><a href="/">Home</a></li>
|
||||||
|
<li><a href="/#core-values">Our Core Values</a></li>
|
||||||
|
<li><a href="/blog">Blog</a></li>
|
||||||
|
<li><a href="/#services">Services We Offer</a></li>
|
||||||
|
<li><a href="/#contact">Get In Touch</a></li>
|
||||||
|
</ul>
|
||||||
|
</div>
|
||||||
|
</li>
|
||||||
|
</ul>
|
||||||
|
</nav>
|
||||||
|
</header>
|
||||||
|
|
||||||
|
|
||||||
|
<!-- Main -->
|
||||||
|
<article id="main">
|
||||||
|
<header>
|
||||||
|
|
||||||
|
<div
|
||||||
|
class="header-image"
|
||||||
|
style="background-image: url('/assets/images/spectre.jpg');"></div>
|
||||||
|
|
||||||
|
<h2>Spectre and Meltdown</h2>
|
||||||
|
<p>A Spectre Is Haunting Our Processors...</p>
|
||||||
|
<p><em>January 11, 2018</em></p>
|
||||||
|
</header>
|
||||||
|
<section class="wrapper style5">
|
||||||
|
<div class="inner">
|
||||||
|
|
||||||
|
<p>Autonomic have now completed the process of applying patches to to all
|
||||||
|
of our servers in response to the so called Spectre and Meltdown
|
||||||
|
vulnerabilities. Our upstream providers have also confirmed that they have
|
||||||
|
patched their infrastructure. We will monitor the situation as it develops.</p>
|
||||||
|
|
||||||
|
<p>We are currently super busy with clients so we decided to repost the
|
||||||
|
excellent security bulletin from our friends over at <a href="https://riseup.net/">Rise Up</a>
|
||||||
|
which goes into detail oh how to update various operating systems. All credit
|
||||||
|
to them for the rest of this blog post.</p>
|
||||||
|
|
||||||
|
<h2 id="the-facts">The Facts</h2>
|
||||||
|
|
||||||
|
<p>As you have probably read, there are three related security problems in
|
||||||
|
contemporary CPUs. These vulnerabilities open the potential for a
|
||||||
|
nefarious program to steal passwords, secrets, and personal information
|
||||||
|
from you computer, even if the program is just Javascript loaded from a
|
||||||
|
web site you visit. These vulnerabilities are as serious as they sound,
|
||||||
|
and you should take action to upgrade your software.</p>
|
||||||
|
|
||||||
|
<ul>
|
||||||
|
<li>
|
||||||
|
<p>The first flaw, called “Meltdown,” affects nearly all Intel CPUs and
|
||||||
|
has been fixed with updates to most operating systems.</p>
|
||||||
|
</li>
|
||||||
|
<li>
|
||||||
|
<p>The two other flaws, called “Spectre,” apply to nearly all CPUs built
|
||||||
|
in the last 20 years, not just Intel, although they are more difficult
|
||||||
|
to exploit. There are no permanent fixes for Spectre available at this
|
||||||
|
time, although if you update your software you will make these attacks
|
||||||
|
much less likely.</p>
|
||||||
|
</li>
|
||||||
|
</ul>
|
||||||
|
|
||||||
|
<p>You should take <em>both</em> these steps now, for all your devices:</p>
|
||||||
|
|
||||||
|
<ul>
|
||||||
|
<li>
|
||||||
|
<p>Upgrade your web browser (see below). These fixes make the new
|
||||||
|
attacks against CPUs more much difficult.</p>
|
||||||
|
</li>
|
||||||
|
<li>
|
||||||
|
<p>Upgrade your operating system. There are updates available for
|
||||||
|
Windows, macOS, and GNU/Linux that fix the Meltdown vulnerability for
|
||||||
|
Intel CPUs and provide some mitigations for Spectre. Additionally, new
|
||||||
|
releases of iOS and Android have mitigations for Spectre.</p>
|
||||||
|
</li>
|
||||||
|
</ul>
|
||||||
|
|
||||||
|
<p>Better fixes will continue to arrive in the next weeks/months for your
|
||||||
|
operating system and software. Please keep your system up to date!</p>
|
||||||
|
|
||||||
|
<h2 id="browsers">Browsers</h2>
|
||||||
|
<p>By updating your browser, you can make it significantly harder for an
|
||||||
|
attacker to steal secrets off your computer using Javascript loaded from
|
||||||
|
a web site you visit.</p>
|
||||||
|
|
||||||
|
<p>Firefox version 57.0.4 and later <a href="https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/">includes mitigation measures</a>
|
||||||
|
against Spectre attack.</p>
|
||||||
|
|
||||||
|
<p>Edge has been updated to include Spectre migitations. When you apply the
|
||||||
|
latest Windows update, you will get the new version of Edge.</p>
|
||||||
|
|
||||||
|
<p>Safari will be updated very soon, according to Apple. Check the App
|
||||||
|
Store updates.</p>
|
||||||
|
|
||||||
|
<p>Chrome will include Spectre mitigations starting with version 64, to be
|
||||||
|
released Jan 23. In the mean time, you can change your configuration to
|
||||||
|
greatly mitigate <a href="https://support.google.com/chrome/answer/7623121?hl=en">against the Spectre vulnerability by enabling</a>
|
||||||
|
“site isolation.”</p>
|
||||||
|
|
||||||
|
<p>Additionally, please see <a href="https://riseup.net/en/better-web-browsing">Rise Up’s better browsing guide</a> for
|
||||||
|
instructions on best practices for securing your web experience (which
|
||||||
|
will also help mitigate against these new attacks).</p>
|
||||||
|
|
||||||
|
<h2 id="windows">Windows</h2>
|
||||||
|
<p>For Windows 10, you must first upgrade any anti-virus software before
|
||||||
|
upgrading Windows. <a href="http://www.theregister.co.uk/2018/01/04/microsoft_windows_patch_meltdown/">Failure to do so may make your computer stop working</a>.</p>
|
||||||
|
|
||||||
|
<p>To upgrade Windows 10:</p>
|
||||||
|
|
||||||
|
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Select the Start button, and then go to Settings > Update & security > Windows Update, and select Check for updates.
|
||||||
|
</code></pre></div></div>
|
||||||
|
|
||||||
|
<p>Now is a good time to enable automatic updates:</p>
|
||||||
|
|
||||||
|
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Select the "Start" button, then select "Settings" > "Update & security" > "Windows Update" > "Advanced options"
|
||||||
|
and then under "Choose how updates are installed", select "Automatic (recommended)".
|
||||||
|
</code></pre></div></div>
|
||||||
|
|
||||||
|
<p>If you are running Windows 7 or 8, an update is also available.</p>
|
||||||
|
|
||||||
|
<h2 id="macos">macOS</h2>
|
||||||
|
<p>If you already have macOS version 10.13.2 then you are <a href="https://support.apple.com/en-us/HT208394">protected against Meltdown</a>.
|
||||||
|
Otherwise, to upgrade macOS:</p>
|
||||||
|
|
||||||
|
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Open the App Store app on your Mac. Click "Updates" in the App Store toolbar, then use the "Update" buttons
|
||||||
|
to download and install any updates listed.
|
||||||
|
</code></pre></div></div>
|
||||||
|
|
||||||
|
<p>Now is a good time to check enable automatic updates:</p>
|
||||||
|
|
||||||
|
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>Select the Apple menu, then select "System Preferences" > "App Store" > "Automatically check for updates".
|
||||||
|
</code></pre></div></div>
|
||||||
|
|
||||||
|
<p>Apple plans to soon release an update to Safari browser to provide some
|
||||||
|
mitigation against Spectre.</p>
|
||||||
|
|
||||||
|
<h2 id="ios">iOS</h2>
|
||||||
|
<p>Apple has said that iOS is affected by Spectre, and an update to
|
||||||
|
mitigate against most of the new attacks has been released. If you have
|
||||||
|
iOS version 11.2 or later, <a href="https://support.apple.com/en-us/HT208394">then you are good</a>.</p>
|
||||||
|
|
||||||
|
<p>To check for new updates, go to <code class="highlighter-rouge">Settings > General > Software Update.</code></p>
|
||||||
|
|
||||||
|
<h2 id="android">Android</h2>
|
||||||
|
<p>The bad news is that Android is vulnerable to Spectre and unless you
|
||||||
|
have a Google-branded phone or run a custom firmware you might not get
|
||||||
|
an update for months, if ever. However, the consensus among security
|
||||||
|
researchers at the moment is that the Spectre attack is difficult enough
|
||||||
|
that there are probably easier ways to compromise an Android device.
|
||||||
|
Yeah?</p>
|
||||||
|
|
||||||
|
<p>There is one thing you can do now to make your Android device more safe
|
||||||
|
against these new CPU attacks:</p>
|
||||||
|
|
||||||
|
<ul>
|
||||||
|
<li>Turn on <a href="https://support.google.com/chrome/answer/7623121?hl=en">“site isolation” in Chrome</a></li>
|
||||||
|
<li>Upgrade Chrome Browser after Jan 23.</li>
|
||||||
|
<li>Alternately, use Firefox for Android.</li>
|
||||||
|
</ul>
|
||||||
|
|
||||||
|
<h2 id="debianubuntu-gnulinux">Debian/Ubuntu GNU/Linux</h2>
|
||||||
|
<p>Run “Software Center” or “Software Updater.”</p>
|
||||||
|
|
||||||
|
<p>Alternately, open a terminal and type:</p>
|
||||||
|
|
||||||
|
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo apt update
|
||||||
|
sudo apt upgrade
|
||||||
|
sudo reboot
|
||||||
|
</code></pre></div></div>
|
||||||
|
|
||||||
|
<h2 id="fedora-gnulinux">Fedora GNU/Linux</h2>
|
||||||
|
<p>Open a terminal and type:</p>
|
||||||
|
|
||||||
|
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>sudo dnf --refresh update kernel
|
||||||
|
sudo reboot
|
||||||
|
</code></pre></div></div>
|
||||||
|
|
||||||
|
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
</article>
|
||||||
|
|
||||||
|
<!-- Footer -->
|
||||||
|
<footer id="footer">
|
||||||
|
<ul class="icons">
|
||||||
|
|
||||||
|
<li><a href="https://twitter.com/autonomiccoop" class="icon fa-twitter" target="_blank"><span class="label">Twitter</span></a></li>
|
||||||
|
|
||||||
|
<li><a href="https://gitlab.com/autonomic-cooperative" class="icon fa-gitlab" target="_blank"><span class="label">GitLab</span></a></li>
|
||||||
|
|
||||||
|
</ul>
|
||||||
|
<ul class="copyright">
|
||||||
|
<li class="icon fa-creative-commons"> Autonomic Co-operative</li>
|
||||||
|
</ul>
|
||||||
|
</footer>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- Scripts -->
|
||||||
|
<script src="/assets/js/jquery.min.js"></script>
|
||||||
|
<script src="/assets/js/jquery.scrollex.min.js"></script>
|
||||||
|
<script src="/assets/js/jquery.scrolly.min.js"></script>
|
||||||
|
<script src="/assets/js/skel.min.js"></script>
|
||||||
|
<script src="/assets/js/util.js"></script>
|
||||||
|
<script src="//cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js"></script>
|
||||||
|
<!--[if lte IE 8]><script src="/assets/js/ie/respond.min.js"></script><![endif]-->
|
||||||
|
<script src="/assets/js/main.js"></script>
|
||||||
|
|
||||||
|
</body>
|
||||||
|
|
||||||
|
</html>
|
||||||
|
|
||||||
|
<!-- Piwik -->
|
||||||
|
<script type="text/javascript">
|
||||||
|
var _paq = _paq || [];
|
||||||
|
_paq.push(['trackPageView']);
|
||||||
|
_paq.push(['enableLinkTracking']);
|
||||||
|
(function() {
|
||||||
|
_paq.push(['setTrackerUrl', 'https://api-183ae21d2fb4215fa8fb3bbf13fbda21.autonomic.sandcats.io']);
|
||||||
|
_paq.push(['setSiteId', 1]);
|
||||||
|
_paq.push(['setApiToken', '6X45HLvJ0KWNiLTlhbZ-uuhZcXfg9n3bDauHalRZMSh']);
|
||||||
|
var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
|
||||||
|
g.type='text/javascript'; g.async=true; g.defer=true; g.src='https://6aurs6uetbyvpubfuh5y.autonomic.sandcats.io/embed.js'; s.parentNode.insertBefore(g,s);
|
||||||
|
})();
|
||||||
|
</script>
|
||||||
|
<!-- End Piwik Code -->
|
||||||
|
|
||||||
|
</body>
|
||||||
|
|
||||||
|
</html>
|
16
index.html
16
index.html
@ -9,7 +9,6 @@
|
|||||||
<link rel="stylesheet" href="/assets/styles/main.css" />
|
<link rel="stylesheet" href="/assets/styles/main.css" />
|
||||||
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
<!--[if lte IE 8]><link rel="stylesheet" href="/assets/css/ie8.css" /><![endif]-->
|
||||||
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
<!--[if lte IE 9]><link rel="stylesheet" href="/assets/css/ie9.css" /><![endif]-->
|
||||||
<!-- hi -->
|
|
||||||
</head>
|
</head>
|
||||||
|
|
||||||
<body class="landing">
|
<body class="landing">
|
||||||
@ -77,10 +76,19 @@
|
|||||||
|
|
||||||
|
|
||||||
<section class="spotlight">
|
<section class="spotlight">
|
||||||
<div class="image"><img src="/assets/images/pic01.jpg" alt="" /></div>
|
<div class="image"><img src="/assets/images/spectre.jpg" alt="" /></div>
|
||||||
|
<div class="content">
|
||||||
|
<h2><a href="/blog/spectre-and-meltdown/" class="link">Spectre and Meltdown</a></h2>
|
||||||
|
<p>A Spectre Is Haunting Our Processors...</p>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
|
||||||
|
<section class="spotlight">
|
||||||
|
<div class="image"><img src="/assets/images/thinkpad.jpg" alt="" /></div>
|
||||||
<div class="content">
|
<div class="content">
|
||||||
<h2><a href="/blog/our-founding-principles/" class="link">Our Founding Principles</a></h2>
|
<h2><a href="/blog/our-founding-principles/" class="link">Our Founding Principles</a></h2>
|
||||||
<p>Autonomic Co-operative And Our Core Values.</p>
|
<p>Autonomic Co-operative And Our Core Values</p>
|
||||||
</div>
|
</div>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
@ -160,7 +168,7 @@
|
|||||||
<p>
|
<p>
|
||||||
A grounded and principled understanding of the cybersecurity domain can ensure
|
A grounded and principled understanding of the cybersecurity domain can ensure
|
||||||
your organisation is not liable to any unwanted security threats. We provide
|
your organisation is not liable to any unwanted security threats. We provide
|
||||||
structured training.
|
structured training taliored to your threat model.
|
||||||
</p>
|
</p>
|
||||||
</li>
|
</li>
|
||||||
</ul>
|
</ul>
|
||||||
|
Reference in New Issue
Block a user