Ignite: Microcode Updates as Protection Against Spectre & Co.

on YouTube ↗05m

" summary

Describes how CPU vendor microcode updates are packaged and delivered via Linux software updates, and how BIOS and Intel Management Engine affect whether microcode can be deployed. Covers which Spectre variants are mitigated by these microcode patches, tools and steps to flash and verify microcode, a simple microbenchmark to measure performance overhead, and practical deployment caveats (required firmware updates, rollback risk) with results from real machines and reproduction steps.

AI-written summary · about

" related talks

• 30mSpectre, Meltdown, & LinuxGreg Kroah-Hartman · LinuxCon + ContainerCon + CloudOpen China 2018
• 20mKeynote: MDS, Fallout, Zombieland & LinuxGreg Kroah-Hartman · Open Source Summit Europe + Embedded Linux Conference Europe 2019
• 50mPractical Ghostbusting: Meltdown, Spectre and YouIan Coldwater · NDC Minnesota 2018
• 26mReverse Engineering x86 Processor MicrocodeThorsten Holz, Benjamin Kollenda, Robert Gawlik, Christof Paar, Philipp Koppe, Marc Fyrbiak, Christian Kison · 26th USENIX Security Symposium (USENIX Security '17)
• 25mThe Memory of a MeltdownShane Cota, Chris Magistrado · BSidesSF 2018
• 19mKeynote: MDS, Fallout, Zombieland & LinuxGreg Kroah-Hartman · Open Source Summit + Embedded Linux Conference North America 2019
• 43m“Closing Panel: Spectre”Chandler Carruth, Matt Miller · CppCon 2018
• 17mThe Silent Performance Killers: BIOS and Firmware UpdatesDarin E. Langone · SREcon24 Europe/Middle East/Africa