{"id":8101,"date":"2018-01-08T07:00:19","date_gmt":"2018-01-08T15:00:19","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=8101"},"modified":"2018-01-05T07:45:50","modified_gmt":"2018-01-05T15:45:50","slug":"the-spectre-and-meltdown-chip-security-how-bad-is-it","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/the-spectre-and-meltdown-chip-security-how-bad-is-it\/","title":{"rendered":"The Spectre and Meltdown Chip Security: How Bad is it?"},"content":{"rendered":"<p>Insecure software is usually the root of security vulnerabilities, but last week two serious hardware vulnerabilities were announced: Spectre and Meltdown.<\/p>\n<p><strong>What is Spectre?<\/strong><\/p>\n<p><a href=\"https:\/\/en.wikipedia.org\/wiki\/Spectre_(security_vulnerability)\">Spectre<\/a> is a computer chip flaw that can allow hackers to steal information from otherwise error-free applications.\u00a0Many types of computing devices are affected:\u00a0laptops, desktops, tablets, smartphones and even cloud computing systems.<\/p>\n<p>The <a href=\"https:\/\/meltdownattack.com\/\">Meltdown and Spectre FAQ<\/a> says that Spectre &#8220;is not easy to fix, it will haunt us for quite some time.&#8221;<\/p>\n<p><strong>What is MeltDown?<\/strong><\/p>\n<p>Meltdown is a computer chip flaw that allows direct access to data stored in a computer&#8217;s core memory.\u00a0 Any software that runs on the computer could gain access to the information.\u00a0<a href=\"https:\/\/gruss.cc\/\">Daniel Gruss<\/a>, researcher at Graz University of Technology,<a href=\"https:\/\/www.reuters.com\/article\/us-cyber-intel\/security-flaws-put-virtually-all-phones-computers-at-risk-idUSKBN1ES1BO?il=0\"> said that Meltdown<\/a> is &#8220;probably one of the worst CPU bugs ever found.&#8221; The flaw dates back to Intel chips manufactured as early as 1995.<\/p>\n<p>Analysts suggest that computers. especially those running high-value applications like bitcoin servers, may be targeted by hackers seeking to exploit the Meltdown vulnerability.<\/p>\n<p><a href=\"http:\/\/www.bizstats.co.uk\/ltd\/insinia-cdc-limited-11052688\/\">Matt Carr<\/a>, security consultant, <a href=\"http:\/\/www.telegraph.co.uk\/technology\/2018\/01\/04\/meltdown-spectre-chip-flaws-leave-bitcoin-exchanges-open-heists\/\">told the Telegraph<\/a> that &#8220;the most obvious use of Spectre and Meltdown is to dump cryptocurrency private keys and steal wallet passwords without having to send out ransomware, thus gaining instant profit. I think we will see people exploiting this to steal Bitcoins.&#8221;<\/p>\n<p><a href=\"https:\/\/en.wikipedia.org\/wiki\/Dmitri_Alperovitch\"> Dmitri Alperovitch<\/a>, CTO of CrowdStrike, <a href=\"http:\/\/money.cnn.com\/2018\/01\/04\/technology\/spectre-meltdown-chip-bugs-businesses\/index.html\">said that<\/a> &#8220;the reality is it&#8217;s going to take years before new chips are on the market that are able to bring back the functionality in a safe way.&#8221;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fthe-spectre-and-meltdown-chip-security-how-bad-is-it%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Insecure software is usually the root of security vulnerabilities, but last week two serious hardware vulnerabilities were announced: Spectre and Meltdown. What is Spectre? Spectre is a computer chip flaw that can allow hackers to steal information from otherwise error-free<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/the-spectre-and-meltdown-chip-security-how-bad-is-it\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-8101","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/8101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=8101"}],"version-history":[{"count":2,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/8101\/revisions"}],"predecessor-version":[{"id":8103,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/8101\/revisions\/8103"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=8101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=8101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=8101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}