About Us

IT Services

Understanding IT

News & Events



Contact Us

  • Register

Exclusive Technologies, Inc. Blog

Exclusive Technologies, Inc. has been serving the Bakersfield area since 2004, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Meltdown and Spectre?

You have probably heard the news of new vulnerabilities that affect most major chipsets, including Intel, Arm, and AMD. This means that the vulnerability affects nearly everyone who owns a computing device.

What is the vulnerability?

The vulnerability affects how systems isolate sensitive data in memory. Exploiting the vulnerability could allow an attacker to gain access to data such as passwords, encryption keys, or potentially data from other virtual systems on the same server.

Right now there are two specific vulnerabilities being dubbed Meltdown and Spectre.

Meltdown: This vulnerability is the easiest to exploit and the one getting the most attention. It primarily affects the Intel chipset and is current being addressed with operating system level patches from Microsoft, Apple and various Linux distributions. It works by using a method called "speculative execution" to infer values in protected memories. This vulnerability has been assigned CVE-2017-5754.

Spectre: This is a more generalized attack based on concepts similar to Meltdown and affect Arm and AMD processors in ways that the Meltdown attack can't. This also means that fixes and work arounds for Meltdown will not protect against Spectre attacks. Spectre covers two separate attack vectors which have been assigned CVE-2017-5715 and CVE-2017-5753.

Who is affected?

Basically anyone with a computer. This would include local devices you use like laptop and desktop computers, but also potentially your phones and tablets, as well as IoT devices. It also includes servers and services you may visit as well, most notably cloud systems that offer virtualization. The vulnerability has been verified to work on chipsets going back to at least 2011 and likely affect CPUs going back as far as 1995.

Most at risk right now are systems using the Intel chipset as they are the easiest to exploit, and the first proof-of-concept exploits are being released target Intel. This means that your laptop is probably more at risk than your phone, for now.

How can this be attacked?

To exploit these vulnerabilities, an attacker would need to execute code on a local system. This could be performed in a variety of ways. Being locally logged in, even as a low-level or nearly unprivileged user, would allow the attacker to launch the attack. Attackers could also launch the attack remotely if they can get malicious code executed on a local system. This could take the form of downloaded malware and malware pushed via malicious websites or even through malicious documents.

Has it been attacked "in the wild"?

Nothing has been detected as being exploited in the wild so far. Since these vulnerabilities have been disclosed by security researchers rather than being discovered in an active attack, it's likely that attackers were not aware of these vulnerabilities until everyone else. This will quickly change however, as proof-of-concept exploits are already being written and floated around the internet. It is probably only a matter of time until we see these vulnerabilities exploited in malware and local attacks.

What is the solution?

Since these issues are hardware related and vary widely dependent on specific software, complete fixes will be complex and likely take a while to get here. Luckily while Meltdown is easier to exploit, it's also easier to address. And while Spectre is a harder problem to patch, it is also much harder to exploit (right now).

Currently OS vendors like Microsoft, Apple and Linux are releasing patches that will provide protection against Meltdown attacks. These patches work by removing shared kernel mapping which prevents the ability to predict values in protected memory. Unfortunately, by removing this feature, a lot of processing efficiency is removed as well. This will result in some performance decrease for those systems. What that decrease is will depend on how heavily software relies on this memory access, but current estimates suggest anywhere from a 5%-30% decrease in overall software performance.

Intel has released firmware updates, but some people seem to have a misconception that firmware updates occur as a simple, generic patch that anyone can download. This is far from the truth. The biggest problem with the firmware updates that are being released is that firmware will be vendor and model specific. Intel develops multiple firmware updates for each different chip. These firmware updates are then distributed to the computer vendors like HP and Dell who, in turn, have to test and release them to their customers for each model of computer they sell.
For instance, here's Intel's page on how to get their firmware updates. It basically provides links to the individual computer vendor's site: https://www.intel.com/content/www/us/en/support/articles/000025619/software.html
If you look at Dell's linked page, as an example, you can see dozens of updates that are model dependent:
Adding insult to injury, most firmware updates need to be installed directly on the system requiring a person physically in front of the machine. Whether you send every user a USB stick with instructions for installation (and lots of prayer) or you send an IT person to every terminal, you can see how burdensome and complex the process can become. Even figuring out which updates are needed for an enterprise fleet of computers of different vendors and models can be an overwhelming task. Pair this with the need for software patches, like those from MS, Apple and Linux and every company's IT will be in overdrive for the foreseeable future over this issue.

In the meantime, all the things we currently recommend to prevent malware apply here. Avoid suspicious email attachments, documents and websites. Make sure you use long and complex passwords to prevent unauthorized users from accessing your system and keep your software up to date with patches.

Continue reading

Tip of the Week: Protect Your Online Identity With These 8 Tips

Tip of the Week: Protect Your Online Identity With These 8 Tips

The Internet has long been a great tool for business, but you can’t take advantage of it without putting your sensitive data at risk of threats, like hackers and malware. Granted, when it comes to cyber security, even the most cautious business will have a lot on their plate. We’ll go over eight of the most important security best practices, and how you can implement them for your business.

Continue reading

Disaster Recovery and Why it Matters to Bakersfield Businesses


When you mention the term 'disaster recovery,' most people think about the big ground-shattering events like earthquakes, fires, floods, tropical storms, etc. While these natural events are certainly disasters and devastating in their own right, smaller things can constitute as a disaster for your business, and they aren't seasonal.

Continue reading

What is your Identity Worth to You?


Your identity has quite a lot of value, especially in the wrong hands. Security firm ZoneAlarm put together some numbers in 2011 concerning identity fraud, and it even shocked us. Let's talk about a few of these statistics and what it means.

Continue reading

Slow Computer? Increase your memory to boost computer Speeds


Sometimes when your workstation feels bogged down, a relatively cheap and simply hardware update can make a huge difference in performance. Adding more RAM (Random Access Memory, often just referred to as memory) can be a game changer for your bogged down PC.

Continue reading

Latest News & Events

Exclusive Technologies is proud to announce the launch of our new website at https://www.exclusivetechs.com. The goal of the new website is to make it easier for our existing clients to submit and manage support requests, and provide more information about our ser...

Contact Us

Learn more about what Exclusive Technologies can do for your business.

Call Us Today
Call us today
(661) 589-2911

9530 Hageman Rd.
Ste. B227

Bakersfield, California 93312

Licence # 1037521 C-7