forecasting critical understanding formulating predictive predictions delivering critical wisdom delivering accurate understanding aggregating critical estimations mapping the future delivering predictive understanding modeling contingent understanding exploring probable futures delivering calibrated futures delivering quantitative understanding generating precise forecasts modeling definitive predictions forecasting calibrated futures


Metaculus Help: Spread the word

If you like Metaculus, tell your friends! Share this question via Facebook, Twitter, or Reddit.

Will security patches against "Specter-NG" vulnerabilities be available for end-users by September 2018?

Last year security researches succeeded in extracting data across presumed secure boundaries -- using side-channel attacks with creative use of speculative execution. Those vulnerabilities even hit the mass media, by the names of Spectre and Meltdown.

The German technology magazine c't has just released an article that new vulnerabilities similar to Spectre (original German) and comparable or stronger impact will soon be announced.

Intel would like to promise patches for May and August, and given that one of the vulnerabilities has been reported by Google Zero -- which uses a rather strict deadline for public reports -- Intel would do well to fulfill such promises.

However, their track-record is rather sad: Even the patches for the previous round of speculative-execution attacks are, de-facto, not available to the public. But patches only work when deployed; in that spirit:

Will patches fixing this round of Specter-NG vulnerabilities be available for end-user via automatic Windows 10 updates by the end of August, for the most recent micro-architecture?

  • Performance penalties are immaterial to whether a patch counts for question resolution.
  • All vulnerabilities with an impact similar to Meltdown and Spectre must be fixed; smaller issues (like only theoretically possible, but no working PoC, or strictly more limited impact) may be patched later. Given that the list of issues is not yet known, this is more in line with the headlines use of "Spectre-NG".
  • The patches should install themselves via automatic Windows Update if used in default configuration.
  • The patches must be available for at least the last affected CPU microarchitecture from Intel, Skylake.
  • The patches must be available for at least two major motherboard makers (either 1 Top plus 3 others, or at least 2 Top)
  • This question is about end-user systems; ergo servers, manually downloaded hotfixes etc. are outside of the scope of this question.

In case Specter-NG is a dud (i.e. gets demoted in importance to a low level), this question resolves ambiguous.


Metaculus help: Predicting

Predictions are the heart of Metaculus. Predicting is how you contribute to the wisdom of the crowd, and how you earn points and build up your personal Metaculus track record.

The basics of predicting are very simple: move the slider to best match the likelihood of the outcome, and click predict. You can predict as often as you want, and you're encouraged to change your mind when new information becomes available. With tachyons you'll even be able to go back in time and backdate your prediction to maximize your points.

The displayed score is split into current points and total points. Current points show how much your prediction is worth now, whereas total points show the combined worth of all of your predictions over the lifetime of the question. The scoring details are available on the FAQ.

Note: this question resolved before its original close time. All of your predictions came after the resolution, so you did not gain (or lose) any points for it.

Note: this question resolved before its original close time. You earned points up until the question resolution, but not afterwards.

This question is not yet open for predictions.

Thanks for predicting!

Your prediction has been recorded anonymously.

Want to track your predictions, earn points, and hone your forecasting skills? Create an account today!

Track your predictions
Continue exploring the site

Community Stats

Metaculus help: Community Stats

Use the community stats to get a better sense of the community consensus (or lack thereof) for this question. Sometimes people have wildly different ideas about the likely outcomes, and sometimes people are in close agreement. There are even times when the community seems very certain of uncertainty, like when everyone agrees that event is only 50% likely to happen.

When you make a prediction, check the community stats to see where you land. If your prediction is an outlier, might there be something you're overlooking that others have seen? Or do you have special insight that others are lacking? Either way, it might be a good idea to join the discussion in the comments.