4 ms·
HPE is like that too. I see lots of their servers show up on Craigslist, but hell if I would buy one when I can't get BIOS updates, especially in the post-Meltd
by flyinghamster 8y ago
HPE is like that too. I see lots of their servers show up on Craigslist, but hell if I would buy one when I can't get BIOS updates, especially in the post-Meltdown/Spectre world.
- monocasa 8y agoThe kernel will patch the microcode well before any untrusted code is run too.
- NullPrefix 8y agoUntil the "untrusted code" patches the kernel.
- monocasa 8y agoAll of the meltdown/spectre mitigations will be added by un up to date kernel even without the BIOS doing it, during the normal boot up process. If untrusted code can patch the kernel after that, then it's already ten kinds of game over. Also, if this attacker can patch the kernel, then it can patch firmware, as they run at the same security context.