History and stories
Meltdown and Spectre: the flaws inside the processor
Most security flaws are in software. Meltdown and Spectre were in the chips almost every computer and phone used.
1 min readStory
The short version
In January 2018, researchers revealed that the way modern processors speed themselves up could let programs read memory they should not see.
The story
To run faster, modern processors guess what work will be needed next and start on it early. If the guess is wrong, the results are thrown away. In January 2018, researchers announced that traces of that discarded work could be read.
The flaws were named Meltdown and Spectre. They could let a program read memory belonging to other programs, including passwords and other sensitive data. Meltdown affected most Intel processors and some others. Spectre was broader still, affecting processors from several makers. Computers, servers, cloud services and phones were all exposed.
Because the problem was in the hardware design, the fixes had to come through several layers: operating system updates, browser updates and firmware updates for the processors themselves. Some early fixes slowed certain workloads down.
Why it mattered
Meltdown and Spectre showed that even the processor, the part of a computer everyone takes for granted, can have security flaws. Because the hardware itself could not be changed, protection depended on keeping every layer of software and firmware up to date.
The lesson today
There was no single update that fixed everything. Computers needed operating system, browser and firmware fixes, and older machines sometimes got none. Keeping devices patched at every layer, and replacing them once their makers stop supporting them, is how you stay covered when the next flaw like this appears.
Talk to us about your technology
Tell us what you run today and what is getting in the way. We will get back to you about how we can help.