Archive

Archive for the ‘Microsoft’ Category

Windows 10 Fall Creators Update is now available to all users

CES 2018 News

Cumulative Update 3 for SQL Server 2017

Categories: MS: SQL Tags: ,

Cloud Platform Release Announcements for January 10, 2018

Categories: Azure Tags:

PowerShell Core 6.0: Generally Available (GA) and Supported!

Microsoft: Meltdown / Spectre – additional information – Performance

Guidance on how to check and enable or disable these mitigations can be found here:

Windows Server, version 1709 (Server Core Installation): 4056892

Windows Server 2016: 4056890

Windows Server 2012 R2: 4056898

Windows Server 2012: Not available

Windows Server 2008 R2: 4056897

Windows Server 2008: Not available

Windows 10 (RTM, 1511, 1607, 1703, 1709): available with 01/2018 CU

Windows 8.1: available with 01/2018 CU

Windows 7 SP1: available with 01/2018 CU

    Understanding the performance impact of Spectre and Meltdown mitigations on Windows Systems:

    https://cloudblogs.microsoft.com/microsoftsecure/2018/01/09/understanding-the-performance-impact-of-spectre-and-meltdown-mitigations-on-windows-systems/

    Protect your Windows devices against Spectre and Meltdown:

    https://support.microsoft.com/en-us/help/4073757/protect-your-windows-devices-against-spectre-meltdown

    Windows operating system security update block for some AMD based devices

    https://support.microsoft.com/en-us/help/4073707/windows-os-security-update-block-for-some-amd-based-devices

    Additional guidance to mitigate speculative execution side-channel vulnerabilities:

    https://blogs.technet.microsoft.com/configurationmgr/2018/01/08/additional-guidance-to-mitigate-speculative-execution-side-channel-vulnerabilities/

    ConfigMgr Speculation Control Baseline FTW!

    https://blogs.technet.microsoft.com/configmgr_geek_speak/2018/01/09/configmgr-speculation-control-baseline-ftw/

    Performance:

    Here is the summary of what we have found so far:

    • With Windows 10 on newer silicon (2016-era PCs with Skylake, Kabylake or newer CPU), benchmarks show single-digit slowdowns, but we don’t expect most users to notice a change because these percentages are reflected in milliseconds.
    • With Windows 10 on older silicon (2015-era PCs with Haswell or older CPU), some benchmarks show more significant slowdowns, and we expect that some users will notice a decrease in system performance.
    • With Windows 8 and Windows 7 on older silicon (2015-era PCs with Haswell or older CPU), we expect most users to notice a decrease in system performance.
    • Windows Server on any silicon, especially in any IO-intensive application, shows a more significant performance impact when you enable the mitigations to isolate untrusted code within a Windows Server instance. This is why you want to be careful to evaluate the risk of untrusted code for each Windows Server instance, and balance the security versus performance tradeoff for your environment.

    Analyse zur Prozessorlücke: Meltdown und Spectre sind ein Security-Supergau:

    https://www.heise.de/newsticker/meldung/Analyse-zur-Prozessorluecke-Meltdown-und-Spectre-sind-ein-Security-Supergau-3935124.html

    Meltdown und Spectre: Die Sicherheitshinweise und Updates von Hardware- und Software-Herstellern:

    https://www.heise.de/newsticker/meldung/Meltdown-und-Spectre-Die-Sicherheitshinweise-und-Updates-von-Hardware-und-Software-Herstellern-3936141.html

    Patch gegen Spectre: Aktualisierte Nvidia-Grafiktreiber für GeForce und Quadro, Tesla-Treiber später

    https://www.heise.de/newsticker/meldung/Patch-gegen-Spectre-Aktualisierte-Nvidia-Grafiktreiber-fuer-GeForce-und-Quadro-Tesla-Treiber-spaeter-3937247.html

    Apple fixt Spectre in iOS 11 und macOS 10.13:

    https://www.heise.de/mac-and-i/meldung/Apple-fixt-Spectre-in-iOS-11-und-macOS-10-13-3936383.html

    Weißes Haus: NSA wusste nichts von Computerchip-Schwachstelle

    https://www.heise.de/security/meldung/Weisses-Haus-NSA-wusste-nichts-von-Computerchip-Schwachstelle-3935329.html

    [Service Fabric] How to troubleshoot deployment errors in Service Fabric Windows cluster