Why? The real performance impact is close to zero but the risk of these vulnerabilities is too high.

There will not be patch for Intel 2nd Gen CPUs in .20 ThinkPad series https://support.lenovo.com/cz/cs/solutions/len-18282

Firefox 57.0.4 update https://www.mozilla.org/en-US/security/ ... sa2018-01/

BTW VirtualBox forum pointed to this article http://pythonsweetness.tumblr.com/post/169166980422/the-mysterious-case-of-the-linux-page-table that links another one https://arxiv.org/abs/1710.00551 stating the Rowhammer DRAM bug is still possible to exploit. It looks like 2018 is year of vulnerabilit...

The Windows Update Catalog site seems to be under high load and down.

EDIT, if you change the links to https://..., it works

There is another one for IE11/Edge https://portal.msrc.microsoft.com/en-US ... /ADV180002

Intel was aware of the chip vulnerability when its CEO sold off $24 million in company stock
https://www.businessinsider.com.au/inte ... law-2018-1

thinkpadcollection wrote: ↑

Thu Jan 04, 2018 2:52 pm

needs to be patched and problem is this does not include XP

I still run R51 with the XP patches POS trick, let's see whether there is the update available or not.

It is also unknown how it affects virtualization (VirtualBox) that is very important for me.

Yeah, but specifics matter. How easy is it to craft an exploit? How easy is it to get practical information from it? Check the twitter link in my last reply. My understanding is that these new exploits (well, not really new, just newly discussed) are considered especially bad because they break the...

Some sources indicates the bug is already being exploited on web sites.

Video demonstration of the issue https://twitter.com/misc0110/status/948706387491786752

More info regarding possible JavaScript attack in browsers

Firefox 57: https://blog.mozilla.org/security/2018/ ... ng-attack/
IE11/Edge: https://blogs.windows.com/msedgedev/201 ... -explorer/

Nothing can be more untrustworthy than Google (or Facebook). The page https://meltdownattack.com/ credits more sources that independently discovered the issue. For me, the Rambus source makes the most sense.

Lenovo preempts CES with new ThinkPads, Yoga, monitors https://www.techrepublic.com/article/lenovo-preempts-ces-with-new-thinkpads-yoga-monitors/ Notice the first picture on the left. it is looks like it had more square than 16:9 display but it is just badly resized. Lenovo’s latest ThinkPads have U...

shawross wrote: ↑

Wed Jan 03, 2018 8:03 pm

Seems like disabling Javascript for everything except trusted sites wasn't a bad idea.

Yes, time to install the pesky NoScript addon for a while

Given the state of panic everyone seems to be in, I would assume that there must be some really easy ways to exploit the flaw, and the only reason it hasn't been so far is that no one really realized it? There are two different issues Meltdown and Spectre https://meltdownattack.com/ Meltdown can be...

Microsoft issues emergency Windows update for processor security bugs Microsoft is issuing a rare out-of-band security update to supported versions of Windows today. The software update is part of a number of fixes that will protect against a newly-discovered processor bug in Intel, AMD, and ARM ch...

https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/ A fundamental design flaw in Intel's processor chips has forced a significant redesign of the Linux and Windows kernels to defang the chip-level security bug. Crucially, these updates to both Linux and Windows will incur a performance h...

ThinkPad 13 seems to be replaced by L380. Othwerwise I don't expect anything positive. Just ordinary laptops similar to HP, Dell, Acer ... no single attempt to be the ThinkPad.

Intel to slap hardware lock on Management Engine code to thwart downgrade attacks
https://www.theregister.co.uk/2017/12/1 ... ased_lock/

From version 12 onward, ME-equipped chips will defend against patch rollbacks

AMD to the rescue?

https://www.notebookcheck.net/Lenovo-The-ThinkPad-T470p-likely-won-t-get-a-successor-in-form-of-a-T480p.271888.0.html A recently released blog-post of a Polish Lenovo-partner confirms this assumption. According to digitmedia.pl, the new models ThinkPad T480, ThinkPad T580 and ThinkPad T480s will be ...

Overpriced laptop with outdated CPU generation, not a big deal anyway.

No, it does not work for last post in the thread. It looks like that right after I posted it. It looks like the [X] button is enabled in this forum only but not in the others.

Review of different monitor that use the same panel https://pcmonitors.info/reviews/aoc-u3277pwqu/

The X31 layout is awkward indeed, simply because the keys are smaller, more cramped and a little offset. I feel this myself. For me, having smaller hands, the X31 is the best laptop keyboard ever. Layout, mechanics, colors ... everything perfect. A 12" 3:2 laptop having such keyboard would be a win...

RealBlackStuff wrote: ↑

Sat Dec 09, 2017 8:24 am

last post in a thread can only be deleted, as long as you stay in that thread.

I see, it makes sense.

RealBlackStuff wrote: ↑

Sat Dec 09, 2017 7:13 am

No time limits.

Ok. I can see the [X] button here but can't see it in other forums. For example my last reply here looks like that, no [X] button.

Is there a timeout for it? That it is not available after period of time? (testing by this post).

My next "ThinkPad" will be small desktop PC. Just waiting for AMD Ryzen with integrated GPU. Currently I use my X220 in dock most of the time anyway. As for possible laptop, I am waiting for Intel 8th Gen refresh of Huawei MateBook X . Or get the 7th Gen if there will be an interesting discount (cur...

Could you please allow to delete your own last post?

Would IT departments of large companies object to purchasing trackpoint-less laptops in the future? I'd expect it because: MacBook doesn't have it People want bigger touchpad People don't like the trackpoint on the keyboard Removing can save at least $1 and can be promoted as innovation Note that t...