Meltdown & Spectre

[speedlnx 1]

Hello, what about an os patch for meltdown and spectre bug? I bet is really a priority right now!

[I.Srodka 4]

Hello @speedlnx!

 

I'm glad you've asked!

 

According to the Intel response:

Please login or register to see this link.

 

Quote

as published by Intel.

• Intel Core i3 processor (45nm and 32nm)
• Intel Core i5 processor (45nm and 32nm)
• Intel Core i7 processor (45nm and 32nm)
• Intel Core M processor family (45nm and 32nm)
• 2nd generation Intel Core processors
• 3rd generation Intel Core processors
• 4th generation Intel Core processors
• 5th generation Intel Core processors
• 6th generation Intel Core processors
• 7th generation Intel Core processors
• 8th generation Intel Core processors
• Intel Core X-series Processor Family for Intel X99 platforms
• Intel Core X-series Processor Family for Intel X299 platforms
• Intel Xeon processor 3400 series
• Intel Xeon processor 3600 series
• Intel Xeon processor 5500 series
• Intel Xeon processor 5600 series
• Intel Xeon processor 6500 series
• Intel Xeon processor 7500 series
• Intel Xeon Processor E3 Family
• Intel Xeon Processor E3 v2 Family
• Intel Xeon Processor E3 v3 Family
• Intel Xeon Processor E3 v4 Family
• Intel Xeon Processor E3 v5 Family
• Intel Xeon Processor E3 v6 Family
• Intel Xeon Processor E5 Family
• Intel Xeon Processor E5 v2 Family
• Intel Xeon Processor E5 v3 Family
• Intel Xeon Processor E5 v4 Family
• Intel Xeon Processor E7 Family
• Intel Xeon Processor E7 v2 Family
• Intel Xeon Processor E7 v3 Family
• Intel Xeon Processor E7 v4 Family
• Intel Xeon Processor Scalable Family
• Intel Xeon Phi Processor 3200, 5200, 7200 Series
• Intel Atom Processor C Series
• Intel Atom Processor E Series
• Intel Atom Processor A Series
• Intel Atom Processor x3 Series
• Intel Atom Processor Z Series
• Intel Celeron Processor J Series
• Intel Celeron Processor N Series
• Intel Pentium Processor J Series
• Intel Pentium Processor N Series

 

The heart of Home Center 2 is an Intel processor which is safe from those vulnerabilities.

 

 

[Alex 31]

Besides this it does not matter. HC(2|L) is an appliance, a standalone system and nobody else besides you is having access to this.

[Al3x 2]

Alex is the HC2 is on the web or if you have remote access the system is public!

[Alex 31]

2 hours ago, Al3x said:

Alex is the HC2 is on the web or if you have remote access the system is public!

If the HC2 is reachable via internet there are easier ways to hack the system instead using M or S.

 

[speedlnx 1]

Hello Alex, please, don’t be vague! Give us a technical reason to worry about exposing fibaro to the internet or a good reason to don’t worry for m and s if you can. 

[Al3x 2]

I do not believe a HC2 should be on any public externally accessible network. Why would you put a home automation system on a network like that without any protection? separate VLAN, ACL and VPN. 

[speedlnx 1]

Of course, I'm a sys admin.. I know that! What I'm trying to say is that it's too easy to say "it's not safe to" without a technical reason in a forum where the readers are so different. Every security expert, sys admin and IT guy know how to play with patch, firewall etc.. but when we say something like "there are easier ways to hack the system instead using M or S" we are just incite fear in the less skilled people. As I wrote, there are a lot of people not skilled enough to play with security so it's really easy to find an open wifi network with hc installed! Anyway, is a good news that the HC cpu is not affected by spectre and meltdown but, it's not true that fibaro is not exposed to security issue!

[Alex 31]

M or S is still no problem for the HC2, even if it is reachable via internet.

Only software by Fibaro is running at this box. M/S is a problem for your own computer or cloud/shared server mainly because you have to do measurements running on this computer and this cannot be done easily (!) without running your own software at it (locally or by using javascript).

 

Besides this of course HC2 has some security bugs so it should not be connected to the internet directly (VPN or remote access should be used). But I think Fibaro also writes somewhere that there should be no direct connection to their controller via internet.

I would like to have a more secure system too but in my opinion that is not first priority for this controller. I hope less skilled person are not able to connect it directly to the internet

[BOT 1]

The topic has been moved from "

Please login or register to see this link.

" to "

Please login or register to see this link.

".

 

Temat został przeniesiony z "

Please login or register to see this link.

" do "

Please login or register to see this link.

".