Home / Software & Service News / CERT: Only way to fix Meltdown and Spectre vulnerabilities is to replace CPU

CERT: Only way to fix Meltdown and Spectre vulnerabilities is to replace CPU

As word of the massive security flaw in computer processing units spread yesterday, companies responded to reassure customers and explain the steps they are taking to deliver software patches to address the issues.

But the Computer Emergency Response Team, or CERT, has issued a statement saying there is only one way to fix the vulnerability: replace the CPU. CERT is based at Carnegie Mellon University and is officially sponsored by the U.S. Department of Homeland Security’s Office of Cybersecurity and Communications.

“The underlying vulnerability is primarily caused by CPU architecture design choices,” CERT researchers wrote. “Fully removing the vulnerability requires replacing vulnerable CPU hardware.”

They also advise users to apply the various software patches but note that this will only “mitigate the underlying hardware vulnerability.”

The pronouncement from CERT doesn’t carry any regulatory obligation for the companies whose CPUs are affected. But the vendors that CERT lists as being affected include many of the biggest names in tech: AMD, Apple, ARM, Google, Intel, Microsoft, and Mozilla.

Together, those companies account for a massive portion of the chips used in computers and smartphones. Were they to come under legal or public pressure to provide replacement CPUs, the costs would be almost impossible to calculate.

For now, the companies have to hope that the software patches reduce security risk sufficiently to avoid widespread legal actions and further public backlash.

Click Here For Original Source Of The Article

About Ms. A. C. Kennedy

Ms. A. C. Kennedy
My name is Ms A C Kennedy and I am a Health practitioner and Consultant by day and a serial blogger by night. I luv family, life and learning new things. I especially luv learning how to improve my business. I also luv helping and sharing my information with others. Don't forget to ask me anything!

Check Also

Bidgely Closes $27 Million Series C to Grow Disaggregation Solutions for Utilities

Bidgely announced today that it has closed a $27 million Series C round of financing - the largest round of investment to date for energy disaggregation technology. Georgian Partners, an investment fund known for its focus on high-growth...

Leave a Reply

Your email address will not be published. Required fields are marked *