Meltdown and Spectre Exploits

VFN

Member
Are Vista machines going to receive a security update?

Thanks
 

My Computer

System One

  • Operating System
    Vista Home Premium x64
    Manufacturer/Model
    Dell Inspiron 546
    CPU
    Sempron LE-1300
    Memory
    2GB DDR SDRAM 800MHZ-2X1GB DIM M
    Graphics Card(s)
    Integrated ATI Radeon HD3200
    Sound Card
    VIA High Definition Audio
    Monitor(s) Displays
    Samsung 32" HDTV
    Screen Resolution
    1366 x 768
    Hard Drives
    320GB NCQ Serial ATA (7200 RPM) w/ 16MB DataBurst Cache

z3r010

Staff member
Nope, it's dead, you need to upgrade to a more modern OS.
 

My Computers

System One System Two

  • Operating System
    Windows 10
    Manufacturer/Model
    me
    CPU
    Intel Core i7 5960X Extreme Unlocked
    Motherboard
    Asus RAMPAGE V EXTREME
    Memory
    32GB (8x4GB) Corsair DDR4 Vengeance LPX Black PC3-24000 3000
    Graphics Card(s)
    2x 4GB ASUS GTX 980 STRIX CUII
    Sound Card
    Creative
    Monitor(s) Displays
    3 x27" Dell U2714H & 3 x 25" U2515H Dell
    Screen Resolution
    6 @ 2560x1440
    Hard Drives
    3x 1TB Samsung Evo 840's
    PSU
    1500W ThermalTake Toughpower
    Case
    ThermalTake Level 10 GT
    Cooling
    Enermax Liqtech 240
    Mouse
    Logitech Performance MX
    Keyboard
    Surface Ergonomic
    Internet Speed
    350 Mb/s
    Other Info
    WinTV NovaTD
    HP CP1515n Color Laser
    Sony BD-5300S-0B Blu-ray Writer
    Microsoft LifeCam Cinema
    APC 750i Smart UPS
  • Operating System
    windows 10
    Manufacturer/Model
    Surface Pro 3
    CPU
    1.9GHz Intel Core i5-4300U (dual-core, 3MB cache, up to 2.9GHz with Turbo Boost)
    Memory
    4GB
    Graphics card(s)
    Intel HD Graphics 4400
    Monitor(s) Displays
    12" Multi Touch
    Screen Resolution
    2160 x 144
    Hard Drives
    128GB
    Mouse
    Logitech
    Keyboard
    yes
    Internet Speed
    350 Mb/s

VFN

Member
Thanks
 

My Computer

System One

  • Operating System
    Vista Home Premium x64
    Manufacturer/Model
    Dell Inspiron 546
    CPU
    Sempron LE-1300
    Memory
    2GB DDR SDRAM 800MHZ-2X1GB DIM M
    Graphics Card(s)
    Integrated ATI Radeon HD3200
    Sound Card
    VIA High Definition Audio
    Monitor(s) Displays
    Samsung 32" HDTV
    Screen Resolution
    1366 x 768
    Hard Drives
    320GB NCQ Serial ATA (7200 RPM) w/ 16MB DataBurst Cache
well, it could be like what Microsoft did with Windows Xp during Wannacry, they gave it a security update since a lot of machines still ran it and some too this day still run XP just like vista users.
 

My Computers

System One System Two

  • Operating System
    Windows Vista Home Basic 32-Bit
    Manufacturer/Model
    DELL
    CPU
    Intel(R) Core(TM)2 Duo CPU E7200 @ 2.53GHz
    Motherboard
    G33m02
    Memory
    3.00 GB
    Graphics Card(s)
    AMD Radeon HD 5450 (salvaged part)
    Sound Card
    Integrated Sound card
    Monitor(s) Displays
    DELL E207WFP
    Screen Resolution
    1680x1050 60Hz
    Hard Drives
    One 40GB HDD SATA
    Manufacturers N/A
    PSU
    N/A
    Case
    OEM DELL Vostro-200 Case
    Cooling
    OEM fans
    Mouse
    DELL Mouse
    Keyboard
    DELL Keyboard
    Internet Speed
    100 MB/s
    Other Info
    OS: Windows Vista Home Basic OEM 32-Bit
  • Operating System
    Windows 7 Home premium 64-Bit
    Manufacturer/Model
    Home made "Gaming" Pc
    CPU
    AMD Athlon(TM) 64 X2 Dual Core Processor 4800+ 2.33GHz
    Motherboard
    Gigabyte GA-K8N-SLI
    Memory
    4 Gb
    Graphics card(s)
    Gt 1030 (Pny Model)
    Sound Card
    OEM/Built-in sound Chip
    Monitor(s) Displays
    Dell(TM) E207WFP
    Screen Resolution
    1680x1050 60Hz
    Hard Drives
    Three HHD's installed
    Manufacturers: N/A
    PSU
    PowerHouse 500Watt
    Case
    NZXT Case
    Cooling
    Stock AMD and case colling
    Mouse
    SteelSeries Sensei [RAW] gaming mouse
    Keyboard
    Dell USB Smartcard Keyboard-Model:N/A
    Internet Speed
    100 MB/s

johngalt

Antidisestablishmentarianist
Vista Guru
This is not an exploit that will help create a lot of bots on the net to make one big botnet, nor will it allow ransomware onto your machine or anything like that.

This is a proof of concept that the way our modern processors work in conjunction with the way modern kernels interact with them, can be sabotaged to give up information that was previously considered secured because of the use of various technologies built into the processors.

Because of that, the major targets for this are not going ot be end users - yeah, malware devs will ahve to target hundreds of thousands of end users machines ot get lucky enough for a modest windfall, or they can target cloud-based and web-based server, where they can target hundreds of thousainds of users' info on a single server - and Vista is not a server class OS.
 

My Computers

System One System Two

  • Operating System
    Windows 10 Insider Preview current build
    Manufacturer/Model
    The Beast Model V
    CPU
    Intel Core i7 965 EE @ 3.6 GHz
    Motherboard
    eVGA X58 Classified3
    Memory
    3 * 4GB Mushkin Enhanced Redline CL7 DDR3 1600 MHz (PC3-12800)
    Graphics Card(s)
    eVGA GTX 970
    Sound Card
    Realtek HD Audio (onboard)
    Monitor(s) Displays
    2 * Lenovo LT2323pwA
    Screen Resolution
    2 * 1920 x 1080
    Hard Drives
    SanDisk Ultra SDSSDHII-960G-G25 SATA III SSD (System)
    Crucial MX100 CT256MX100SSD1 SATA III SSD (User Tree)
    2 * Seagate Barracuda 7200.12 ST31000528AS SATA II
    Seagate ST1500DL001 7200 RPM SATA II
    Intel SSDSA2M080G2GC SATA II SSD
    PSU
    Thermaltake Black Widow TX TR2 850W 80+ Bronze Semi-Mod ATX
    Case
    ThermalTake Level 10 GT (Black)
    Cooling
    Corsair H100 (CPU) + Air (2 * 210 mm + 3 * 120mm fans)
    Mouse
    Logitech MX Master
    Keyboard
    Logitech G15 (gen 2)
    Internet Speed
    Cable: 330+ Mbps down / 30+ Mbps up
  • Operating System
    Windows 10 Insider Preview (current)
    Manufacturer/Model
    Lenovo ThinkPad E545
    CPU
    AMD A6-5350M APU
    Motherboard
    Lenovo
    Memory
    8 GB
    Graphics card(s)
    Radeon HD (Embedded)
    Sound Card
    Conextant 20671 SmartAudio HD
    Monitor(s) Displays
    Lenovo 15"
    Screen Resolution
    1680 * 1050
    Hard Drives
    INTEL SSDSC2CW180A
    PSU
    Lenovo
    Case
    Lenovo
    Cooling
    Lenovo
    Mouse
    Logitech MX Master | Synaptics TouchPad
    Keyboard
    Lenovo
    Internet Speed
    330+ Mbps downstream | 30+ Mbps upstream

wither 3

Vista Guru
Gold Member
I wonder what VFN had in mind when he asked about the updates. Something missing or a problem? I run Vista all day, everyday with Norton Security and haven't had any problems. I think Norton has stopped maybe 4 or 5 web attacks since last April.
 

My Computer

System One

  • Operating System
    Vista Home Premium 64 bit SP2
    Manufacturer/Model
    Cyberpower
    CPU
    Intel Quad CPU Q6700 2.67 GHZ
    Motherboard
    NVIDIA 780i
    Memory
    4 GB
    Graphics Card(s)
    MSI GTX 560 TI Twin Frozr
    Sound Card
    Sound Blaster SB Audigy
    Monitor(s) Displays
    Viewsonic VG2436
    Screen Resolution
    1920x1080p
    Hard Drives
    Samsung HD 105SI
    WDC WD20
    Case
    Apevia XJupiter
    Cooling
    air
    Mouse
    Logitech MX 600
    Keyboard
    Logitech MX 3200
    Internet Speed
    30 Mbps

VFN

Member
I wonder what VFN had in mind when he asked about the updates.
I read Microsoft will be sending updates to protect against these exploits. Apparently, browsers are taking measures as well.
 

My Computer

System One

  • Operating System
    Vista Home Premium x64
    Manufacturer/Model
    Dell Inspiron 546
    CPU
    Sempron LE-1300
    Memory
    2GB DDR SDRAM 800MHZ-2X1GB DIM M
    Graphics Card(s)
    Integrated ATI Radeon HD3200
    Sound Card
    VIA High Definition Audio
    Monitor(s) Displays
    Samsung 32" HDTV
    Screen Resolution
    1366 x 768
    Hard Drives
    320GB NCQ Serial ATA (7200 RPM) w/ 16MB DataBurst Cache
Yeah, like i said they'll be doing this cause systems don't have time to upgrade to newer equipment and software. So microsoft will probably send an update to Xp (this doesn't seem likely :() but they might send an update for windows vista since its brother Windows Server 2008 is still being used and vista can install some of The Server 2008 updates so we might be able to download the Server update and install it on vista. But idk i'm just a new member.
 

My Computers

System One System Two

  • Operating System
    Windows Vista Home Basic 32-Bit
    Manufacturer/Model
    DELL
    CPU
    Intel(R) Core(TM)2 Duo CPU E7200 @ 2.53GHz
    Motherboard
    G33m02
    Memory
    3.00 GB
    Graphics Card(s)
    AMD Radeon HD 5450 (salvaged part)
    Sound Card
    Integrated Sound card
    Monitor(s) Displays
    DELL E207WFP
    Screen Resolution
    1680x1050 60Hz
    Hard Drives
    One 40GB HDD SATA
    Manufacturers N/A
    PSU
    N/A
    Case
    OEM DELL Vostro-200 Case
    Cooling
    OEM fans
    Mouse
    DELL Mouse
    Keyboard
    DELL Keyboard
    Internet Speed
    100 MB/s
    Other Info
    OS: Windows Vista Home Basic OEM 32-Bit
  • Operating System
    Windows 7 Home premium 64-Bit
    Manufacturer/Model
    Home made "Gaming" Pc
    CPU
    AMD Athlon(TM) 64 X2 Dual Core Processor 4800+ 2.33GHz
    Motherboard
    Gigabyte GA-K8N-SLI
    Memory
    4 Gb
    Graphics card(s)
    Gt 1030 (Pny Model)
    Sound Card
    OEM/Built-in sound Chip
    Monitor(s) Displays
    Dell(TM) E207WFP
    Screen Resolution
    1680x1050 60Hz
    Hard Drives
    Three HHD's installed
    Manufacturers: N/A
    PSU
    PowerHouse 500Watt
    Case
    NZXT Case
    Cooling
    Stock AMD and case colling
    Mouse
    SteelSeries Sensei [RAW] gaming mouse
    Keyboard
    Dell USB Smartcard Keyboard-Model:N/A
    Internet Speed
    100 MB/s

Jody Thornton

Power User
Yeah, like i said they'll be doing this cause systems don't have time to upgrade to newer equipment and software. So microsoft will probably send an update to Xp (this doesn't seem likely :() but they might send an update for windows vista since its brother Windows Server 2008 is still being used and vista can install some of The Server 2008 updates so we might be able to download the Server update and install it on vista. But idk i'm just a new member.
There were originally no plans to release Spectre and Meltdown packages for Server 2008 (initial release) - however (read below) ......
 
Last edited:

My Computer

System One

  • Operating System
    Windows 8 Pro x64
    Manufacturer/Model
    HP xw8600 Workstation
    CPU
    Two Intel Xeon Core2 Quad 3.2 GHz Processors
    Motherboard
    Proprietary
    Memory
    16 GB DDR2 800 MHz
    Graphics Card(s)
    nVidia Quadro FX 3800 PCI-E
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Samsung SyncMaster 213T 21" 4x3 Flat Screen
    Screen Resolution
    1600x1200
    Hard Drives
    Two Seagate Cheetah 300 GB SAS Disks
    PSU
    Proprietary
    Case
    HP xw8600 Workstation Case
    Cooling
    Two CPU Fans and One Larger Cooling Fan
    Mouse
    Microsoft USB Optical Mouse
    Keyboard
    PS/2 Keyboard
    Internet Speed
    7 mbps
    Other Info
    Storage Interface: Two LSI 3000 SAS Adapters
    Browser: Firefox Quantum ESR 60.2.0

Jody Thornton

Power User
MAJOR NEWS - there are new Spectre and Meltdown patches for March 2018 (for Server 2008). There ARE installable on to Vista. I have avoided installing them because I'm not sure that I want to endure the performance degradation that likely accompanies these updates. But they are available.

KB4090450 - Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008 (SPECTRE)
https://support.microsoft.com/en-us/help/4090450
http://catalog.update.microsoft.com/v7/site/search.aspx?q=4090450

KB4089229 - Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008 (MELTDOWN)
https://support.microsoft.com/en-us/help/4089229
http://catalog.update.microsoft.com/v7/site/search.aspx?q=4089229
 

My Computer

System One

  • Operating System
    Windows 8 Pro x64
    Manufacturer/Model
    HP xw8600 Workstation
    CPU
    Two Intel Xeon Core2 Quad 3.2 GHz Processors
    Motherboard
    Proprietary
    Memory
    16 GB DDR2 800 MHz
    Graphics Card(s)
    nVidia Quadro FX 3800 PCI-E
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Samsung SyncMaster 213T 21" 4x3 Flat Screen
    Screen Resolution
    1600x1200
    Hard Drives
    Two Seagate Cheetah 300 GB SAS Disks
    PSU
    Proprietary
    Case
    HP xw8600 Workstation Case
    Cooling
    Two CPU Fans and One Larger Cooling Fan
    Mouse
    Microsoft USB Optical Mouse
    Keyboard
    PS/2 Keyboard
    Internet Speed
    7 mbps
    Other Info
    Storage Interface: Two LSI 3000 SAS Adapters
    Browser: Firefox Quantum ESR 60.2.0

johngalt

Antidisestablishmentarianist
Vista Guru
It would be interesting if you could make a full image of your Vista install and then perform some benchmarks to see if there is an actual determinable performance degradation.

I wish I still had an older machine lying around onto which I could install Vista (I suppose I could try in a VM, but I'd have to set up a comprehensive testing routine as well, including limiting any potential outside interference from the host machine running tasks in the background, so that would take a lot longer than it sounds. And I'd have to find a Vista install disc :p
 

My Computers

System One System Two

  • Operating System
    Windows 10 Insider Preview current build
    Manufacturer/Model
    The Beast Model V
    CPU
    Intel Core i7 965 EE @ 3.6 GHz
    Motherboard
    eVGA X58 Classified3
    Memory
    3 * 4GB Mushkin Enhanced Redline CL7 DDR3 1600 MHz (PC3-12800)
    Graphics Card(s)
    eVGA GTX 970
    Sound Card
    Realtek HD Audio (onboard)
    Monitor(s) Displays
    2 * Lenovo LT2323pwA
    Screen Resolution
    2 * 1920 x 1080
    Hard Drives
    SanDisk Ultra SDSSDHII-960G-G25 SATA III SSD (System)
    Crucial MX100 CT256MX100SSD1 SATA III SSD (User Tree)
    2 * Seagate Barracuda 7200.12 ST31000528AS SATA II
    Seagate ST1500DL001 7200 RPM SATA II
    Intel SSDSA2M080G2GC SATA II SSD
    PSU
    Thermaltake Black Widow TX TR2 850W 80+ Bronze Semi-Mod ATX
    Case
    ThermalTake Level 10 GT (Black)
    Cooling
    Corsair H100 (CPU) + Air (2 * 210 mm + 3 * 120mm fans)
    Mouse
    Logitech MX Master
    Keyboard
    Logitech G15 (gen 2)
    Internet Speed
    Cable: 330+ Mbps down / 30+ Mbps up
  • Operating System
    Windows 10 Insider Preview (current)
    Manufacturer/Model
    Lenovo ThinkPad E545
    CPU
    AMD A6-5350M APU
    Motherboard
    Lenovo
    Memory
    8 GB
    Graphics card(s)
    Radeon HD (Embedded)
    Sound Card
    Conextant 20671 SmartAudio HD
    Monitor(s) Displays
    Lenovo 15"
    Screen Resolution
    1680 * 1050
    Hard Drives
    INTEL SSDSC2CW180A
    PSU
    Lenovo
    Case
    Lenovo
    Cooling
    Lenovo
    Mouse
    Logitech MX Master | Synaptics TouchPad
    Keyboard
    Lenovo
    Internet Speed
    330+ Mbps downstream | 30+ Mbps upstream

Vistaar

Vista Guru
...there are new Spectre and Meltdown patches for March 2018 (for Server 2008). There ARE installable on to Vista. I have avoided installing them because I'm not sure that I want to endure the performance degradation that likely accompanies these updates. But they are available...
Those patches may break Sandboxie (not that it officially supports Vista anymore: see Vista with latest Server 2008 updates break SB - Sandboxie Support), and who knows how many other old programs that can no longer be updated on Vista?
 

My Computer

System One

  • Operating System
    Vista Home Premium x86 SP2
    Manufacturer/Model
    HP Pavilion Elite m9150f
    CPU
    Intel Q6600
    Memory
    3 GB
    Graphics Card(s)
    NVIDIA GeForce 8500 GT

erpster4

Member
MAJOR NEWS - there are new Spectre and Meltdown patches for March 2018 (for Server 2008). There ARE installable on to Vista. I have avoided installing them because I'm not sure that I want to endure the performance degradation that likely accompanies these updates. But they are available.

KB4090450 - Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008 (SPECTRE)
https://support.microsoft.com/en-us/help/4090450
http://catalog.update.microsoft.com/v7/site/search.aspx?q=4090450

KB4089229 - Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008 (MELTDOWN)
https://support.microsoft.com/en-us/help/4089229
http://catalog.update.microsoft.com/v7/site/search.aspx?q=4089229
URL links to KB4089229 are incorrect, Jody. they actually point to KB4034044 (fix your mistake and edit the links, man)
also KB4089229 lists a bunch of "known issues" (problems) in that article when installing that update.

And running GRC's InSpectre tool on Vista/Server 2008 with those updates installed will still think the OS is not Meltdown aware or protected.
 

My Computer

System One

  • Operating System
    Windows 7 SP1 Ultimate x64
    Manufacturer/Model
    Dell Inspiron 640m/e1405 laptop
    CPU
    Intel Core 2 Duo T7600 2.33Ghz
    Memory
    4Gb (3.24Gb usable to OS)
    Sound Card
    Sigmatel/IDT STAC9200
    Internet Speed
    Spectrum Cable Internet up to 100Mbps

wither 3

Vista Guru
Gold Member
Just a comment but will probably stir things up a little-

The Meltdown and Spectre problems only occur for certain CPUs. Not sure anyone would be running Vista on such a system.
 

My Computer

System One

  • Operating System
    Vista Home Premium 64 bit SP2
    Manufacturer/Model
    Cyberpower
    CPU
    Intel Quad CPU Q6700 2.67 GHZ
    Motherboard
    NVIDIA 780i
    Memory
    4 GB
    Graphics Card(s)
    MSI GTX 560 TI Twin Frozr
    Sound Card
    Sound Blaster SB Audigy
    Monitor(s) Displays
    Viewsonic VG2436
    Screen Resolution
    1920x1080p
    Hard Drives
    Samsung HD 105SI
    WDC WD20
    Case
    Apevia XJupiter
    Cooling
    air
    Mouse
    Logitech MX 600
    Keyboard
    Logitech MX 3200
    Internet Speed
    30 Mbps

Jody Thornton

Power User
URL links to KB4089229 are incorrect, Jody. they actually point to KB4034044 (fix your mistake and edit the links, man)
Calm yourself buddy - I posted this almost a year ago. Vista isn't even on my radar any more. Besides, Windows Update Catalog may have changed something too.

You can go to MSFN and view a thread on Server 2008 Updates on Vista. Go find it.
 

My Computer

System One

  • Operating System
    Windows 8 Pro x64
    Manufacturer/Model
    HP xw8600 Workstation
    CPU
    Two Intel Xeon Core2 Quad 3.2 GHz Processors
    Motherboard
    Proprietary
    Memory
    16 GB DDR2 800 MHz
    Graphics Card(s)
    nVidia Quadro FX 3800 PCI-E
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    Samsung SyncMaster 213T 21" 4x3 Flat Screen
    Screen Resolution
    1600x1200
    Hard Drives
    Two Seagate Cheetah 300 GB SAS Disks
    PSU
    Proprietary
    Case
    HP xw8600 Workstation Case
    Cooling
    Two CPU Fans and One Larger Cooling Fan
    Mouse
    Microsoft USB Optical Mouse
    Keyboard
    PS/2 Keyboard
    Internet Speed
    7 mbps
    Other Info
    Storage Interface: Two LSI 3000 SAS Adapters
    Browser: Firefox Quantum ESR 60.2.0
Top