La mayor vulnerabilidad de la historia de la Informática Spectre y Meltdown, tiene nuevas aristas que le dan un dolor de cabeza, tanto a las empresas de manufactura de procesadores, como a las personas que utilizan esos Chips.
Esta de mas decir que esta vulnerabilidad ha afectado tanto a equipos de escritorio, equipos portatiles, servidores, Router, Firewall, Switches, tablets celulares entre otros... por eso se le denomina como la mayor vulnerabilidad de toda la historia de la informática.
Lamentablemente Intel hizo un llamado a no parchar las vulnerabilidades, ya que esta provocando síntomas adversos en los clientes que la han instalado.
El problema es el siguiente.... una gran cantidad de usuarios que han instalado los parches emitidos para subsanar la vulnerabilidad, han tenido reinicios repentinos y comportamiento anomalo de los sistemas, lamentablemente estos no han sido aclarados por Intel y tampoco conocen la causa raiz del problema.
Intel en su comunicado indico lo siguiente: Articulo Completo Aquí
As we start the week, I want to provide an update on the reboot issues we reported Jan. 11. We have now identified the root cause for Broadwell and Haswell platforms, and made good progress in developing a solution to address it. Over the weekend, we began rolling out an early version of the updated solution to industry partners for testing, and we will make a final release available once that testing has been completed.
Based on this, we are updating our guidance for customers and partners:
- We recommend that OEMs, cloud service providers, system manufacturers, software vendors and end users stop deployment of current versions, as they may introduce higher than expected reboots and other unpredictable system behavior. For the full list of platforms, see the Intel.com Security Center site.
- We ask that our industry partners focus efforts on testing early versions of the updated solution so we can accelerate its release. We expect to share more details on timing later this week.
- We continue to urge all customers to vigilantly maintain security best practice and for consumers to keep systems up-to-date.
I apologize for any disruption this change in guidance may cause. The security of our products is critical for Intel, our customers and partners, and for me, personally. I assure you we are working around the clock to ensure we are addressing these issues.
I will keep you updated as we learn more and thank you for your patience.
Mientras tanto en una conversación por correo publica, Linus Torvald menciono que no esta feliz en como Intel a manejado las vulnerabilidades, indicando que los parches lanzados deberian estar en la basura.
Esto va de mal en peor.
