جدیداً دو آسیبپذیری جدید به نامهای Meltdown و Spectre روی پردازندههای اینتل توسط تیم Google Project Zero کشف شدهاند. آسیبپذیری Meltdown تقریباً همه پردازندههای اینتل که بعد از ۱۹۹۵ ساخته شدهاند را متأثر میکند.
اطلاعات تکمیلی:
یک تشبیه جالب در یکی از نظرات ذیل https://linux.slashdot.org/story/18/01/22/0648227/linus-torvalds-calls-intel-patches-complete-and-utter-garbage:
Imagine all cars have two bugs in the gearbox that trigger on putting it in reverse certain ways.
But 1 makes a dashboard light blink one time.
All car manufacturers have this bug, and they all fixed it when found.
Bug 2 makes your car explode.
AMD and ARM knew about this and fixed it. It made their cars a bit slower, but atleast it wouldn't explode.
Intel knew about it too, but they choose to ignore it. Their cars are a bit faster because of this.
Intel fixed this by sending out a widget that stops the car from exploding, this widget does make Intel cars go slower.
The widget doesn't fix it automatically, though! The driver has to switch the widget on every time he starts the car. If the driver doesn't switch the widget on, putting the car in reverse will still make it explode.
Intel also says that this is how all future cars will be prevented from exploding; by adding this widget to every future car and requiring the driver to switch it on; it'll always be in "explode-on-reverse" mode by default.
Intel does get to claim their car is faster by default though. Just don't put it in reverse.
As a bonus analogy; Intel claims both bugs are the same because they are both triggered by the same action, so therefore all car manufacturers are vulnerable to the exploding car bug.