Page 3 of 11
#31 RE: Microcodes for branch target injection. by mbk1969 10.01.2018 09:42

Zitat von tiliarou im Beitrag #8
Do you recommend updating microcode with Vmare tool under windows ?
https://labs.vmware.com/flings/vmware-cp...e-update-driver


It depends on the CPU. My IB-E has no HW support for mitigation against BTI, but new microcode brings that HW support, and it happens that Windows kernel is loaded before VMware driver and it sees that there is no HW support and disables the mitigation. Only after I patched the BIOS file and flashed it Windows enabled the mitigation. So if your CPU has HW support for BTI mitigation (with current microcode) then you can use VMware driver.

#32 RE: Microcodes for branch target injection. by Margus 10.01.2018 10:35

Microcode r23 works perfictly on maximus hero VII with devils cpu i can even oc to 4.8 with no issues and its more stable. MIX with windows updates. I have Me firmware updated to latest so no issues.

#33 RE: Microcodes for branch target injection. by ms178 10.01.2018 11:07

It seems that Westmere will also get a microcode update on January 26 (or earlier) - as the HP Z400 Workstation uses it and will get a BIOS update on that date according to: https://support.hp.com/de-de/document/c05869091

#34 RE: Microcodes for branch target injection. by ms178 10.01.2018 11:08

It seems that Westmere will also get a microcode update on January 26 (or earlier) - as the HP Z400 Workstation uses it and will get a BIOS update on that date according to: https://support.hp.com/de-de/document/c05869091

#35 RE: Microcodes for branch target injection. by ms178 10.01.2018 11:11

Computerbase reports, that the VMWare driver method actually doesn't work on Windows because the driver gets loaded too late for the Windows Kernel check to enable the mitigations.

#36 RE: Microcodes for branch target injection. by propergol 10.01.2018 11:57

I am confused : on Intel website I can find CPU microcode update for my i7 2600k dated 20180108 but it is taged as a Linux thing.
https://downloadcenter.intel.com/downloa...e?product=52214
Can I use that inside UBU to update my cpu microcode ?

#37 RE: Microcodes for branch target injection. by mbk1969 10.01.2018 12:22

Zitat von propergol im Beitrag #11
I am confused : on Intel website I can find CPU microcode update for my i7 2600k dated 20180108 but it is taged as a Linux thing.
https://downloadcenter.intel.com/downloa...e?product=52214
Can I use that inside UBU to update my cpu microcode ?


You can. File "microcode.dat" is a container with microcodes. Microcodes can be extracted as bin-files and used with UBU. If UBU supports the platform (socket) of your CPU then you can just select freshly bin-file (UBU offers menu item for that) and it will be written into BIOS file.

Zitat von ms178 im Beitrag #10
Computerbase reports, that the VMWare driver method actually doesn't work on Windows because the driver gets loaded too late for the Windows Kernel check to enable the mitigations.


I can confirm that. But this is a problem only if CPU has not HW support for mitigation. So for such CPUs UBU is the way.

#38 RE: Microcodes for branch target injection. by Ubro92 10.01.2018 15:17

avatar

There is no new microcode for ivy and sandy, in the .dat file the microcodes are 1C (2015-ivy) and 29 (2013-sandy) ... :(

#39 RE: Microcodes for branch target injection. by propergol 10.01.2018 21:52

Zitat von Ubro92 im Beitrag #13
There is no new microcode for ivy and sandy, in the .dat file the microcodes are 1C (2015-ivy) and 29 (2013-sandy) ... :(


yep, I have discovered that too...

The big winners in the end : Intel, AMD, Google...

#40 RE: Microcodes for branch target injection. by Leo 10.01.2018 21:54

hi, i have an i7 6700k on an asus z170 sabertooth s. can you make a download for my system, i know how to use ubu but nit how to update the microcode, last ubu microcode is ba and i need it to be c1. hope you understand what i need. thanks.

#41 RE: Microcodes for branch target injection. by davidm71 11.01.2018 16:52

avatar

Hi,
I kind of have a healthcare related question regarding the Spectre Meltdown flaws such that I wonder if the patches out there are secure enough for privacy healthcare concerns?

#42 RE: Microcodes for branch target injection. by mbk1969 11.01.2018 17:21

Zitat von davidm71 im Beitrag #15
Hi,
I kind of have a healthcare related question regarding the Spectre Meltdown flaws such that I wonder if the patches out there are secure enough for privacy healthcare concerns?


If you use program or site for healthcare just be sure you don`t have 100500+ tabs opened in browser (especially tabs for porn, torrents and other shady stuff) at the same time. Made sessions with this healthcare thing standalone (i.e. isolated).

#43 RE: Microcodes for branch target injection. by 100PIER 12.01.2018 00:38

@mbk1969
I have seen and downloaded from Intel site the "microcode.dat" file you refer (dated on 8th January 2018).
I understand that folder named "intel-ucode" is unuseful for Windows users.

How do you extract from the "microcode.dat" file the proper bin-files for a given CPU to be used with UBU ?
Any guide lines and specific tool will be helpful ?

For instance, I have a CPUID "0306F2" (Haswell-E Intel Core-i7-5930K, Socket 2011-v3), HWINFO64 told me (under W10 x64) the current applied Microcode Update Version is "3A" and I would like update it (with UBU Tool for my Sabertooth X99 UEFI Bios v3801), if possible , with a new microcode (if available) which does fix the Meltdown/Spectre issues.

I have checked that UBU Tool v1.69.7 does support the socket (platform ID) of this CPU because applying the "3A" Microcode update does not provide any error message (BIOS version is Aptio 5 format compliant).

#44 RE: Microcodes for branch target injection. by The Master 12.01.2018 03:08

If this is happening there should be come a Sandy and Ivy Bridge Microcode update *dream*.

#45 RE: Microcodes for branch target injection. by mbk1969 12.01.2018 11:28

@100PIER

Tool would be MC Extractor Intel, AMD, VIA & Freescale Microcode Extraction Tool Discussion by plutomaniac. He explains the bin-file name pattern here https://github.com/platomav/CPUMicrocodes
Bin-file name contains CPUID, but truncated to 5 digits.
And after you locate proper bin-file you can select it in UBU with menu item "m".

Or you just download updated UBU with microcode for your CPU
[Tool Guide+News] "UEFI BIOS Updater" (UBU) (15)

Xobor Forum Software von Xobor
Datenschutz