(That’s Meltdown on the left, Spectre on the right.)
From the New York Times:
Computer security experts have discovered two major security flaws in the microprocessors inside nearly all of the world’s computers. The two problems, called Meltdown and Spectre, could allow hackers to steal the entire memory contents of computers, including mobile devices, personal computers and servers running in so-called cloud computer networks.
There is no easy fix for Spectre, which could require redesigning the processors, according to researchers. As for Meltdown, the software patch needed to fix the issue could slow down computers by as much as 30 percent — an ugly situation for people used to fast downloads from their favorite online services. “What actually happens with these flaws is different and what you do about them is different,” said Paul Kocher, a researcher who was an integral member of a team of researchers at big tech companies like Google and Rambus and in academia that discovered the flaws.
Meltdown is a particular problem for the cloud computing services run by the likes of Amazon, Google and Microsoft. By Wednesday evening, Google and Microsoft said they had updated their systems to deal with the flaw.
Here’s the best part:
“Amazon told customers of its Amazon Web Services cloud service that the vulnerability “has existed for more than 20 years in modern processor architectures.”
We trust the tech giants and computer manufacturers to give us secure devices. We then entrust our businesses and lives to these devices.
That there were such massive “flaws” in every computer, and that it took 20 years for those whom we trusted to discover them, is an unprecedented breach of competence, trust and and responsibility. Imagine auto manufacturers announcing that every car in the world had a “flaw” that might cause a fatal crash. I see no difference ethically.
And why is this story buried in the Times’ Business Section, and not on the front page, not just of the Times, but of every newspaper?
At a government legal ethics seminar a week ago, one of my attendees told me of the nightmare he and his family were going through because all of his personal data, including confidential information from his FBI background check,and his fingerprints, were now available to those hostile to the US, and potentially hostile to him. He was furious. He trusted his government, and it proved incompetent…as usual, under this President
The data stolen from the Office of Personnel Management affected 22 million Americans directly, and indirectly many more, through their now imperiled families. It took an almost unimaginable amount of pure gall, as well as a complicity and incompetent news media, for President Obama and his supporters to be claiming status a transformational leader because of a Supreme Court decision that was inevitable and that he had no hand in at all, while two more federal agencies run by his appointees—Homeland Security is supposed to prevent such attacks— had failed the American people in epic fashion. Continue reading
Ethics Alarms 
The comments on this post about the sudden discovery that every computer extant was vulnerable to hacking thanks to two 20-year-old “flaws” were so detailed, informative and excellent that I had the unenviable choice of posting one representative Comment of the Day, or eight. Having just posted eight COTDs on another post last weekend, I opted for one, but anyone interested in the topic—or in need of education about the issues involved— should go to the original post and read all the comments. Forget the post itself—the comments are better.
Here is Extradimensional Cephalopod‘s Comment of the Day on the post, Wait, WHAT? NOW They Tell There Are “Two Big Flaws” in Every Computer?