i have a intel broadwell(NUC). i am, till now, fully patched (firmware+OS(W10 1809)). powershell script outputs, smooth as silk, all "trues" (in the right places) i was waiting, with anxiety, for these new settings for retpoline: well, i applied those and...they destroy the protection for SSB(CVE-2018-3639). because retpoline and SSB keys in the registry are the same: FeatureSettingsOverride and FeatureSettingsOverrideMask these two keys are set to "8" and "3" to have all "trues" at SSB section of powershell script output if you set both keys to "400" ,as you need to cover retpoline, you disrupt protection for SSB (that is not "true" anymore in powershell script) how to solve? these are two screenshots with the output of powershell script, the first with "8" and "3" inside "FeatureSettingsOverride" and "FeatureSettingsOverrideMask" keys. the second with "400" and "400" note the variations of "true" and "false" across the sections of powershell script outputs https://imgur.com/a/fWB9Hzj
Microsoft