Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




385 posts

Ultimate Geek
+1 received by user: 52


Topic # 226356 3-Jan-2018 21:58
One person supports this post
Send private message quote this post

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

 

Full details are not available as the circumstances surrounding the exploit are currently under embargo

 

Article here

 

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

 

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

 

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
Meow
7280 posts

Uber Geek
+1 received by user: 3481

Moderator
Trusted
Lifetime subscriber

  Reply # 1928714 3-Jan-2018 22:04
2 people support this post
Send private message quote this post

The AMD side of things should be patched already: https://lkml.org/lkml/2017/12/27/2

 

But yes, pretty bad considering all my machines are Intel based. Also what is worse is the CEO selling all his shares which sounds like some insider trading was going on.





TLD

631 posts

Ultimate Geek
+1 received by user: 139


  Reply # 1928752 3-Jan-2018 23:07
Send private message quote this post

Is this the same issue?  Puget Systems has some fixes if it is.

 

https://www.pugetsystems.com/labs/support-hardware/Intel-Security-Flaw---Severe---ASUS-Gigabyte-ASRock-fixes-identified-1074/





Trevor Dennis
Rapaura (near Blenheim)

 
 
 
 


Try Wrike: fast, easy, and efficient project collaboration software
Meow
7280 posts

Uber Geek
+1 received by user: 3481

Moderator
Trusted
Lifetime subscriber

  Reply # 1928790 4-Jan-2018 05:02
Send private message quote this post

The Intel press conference at CES is also going to be quite interesting...




2793 posts

Uber Geek
+1 received by user: 677

Trusted
Lifetime subscriber

  Reply # 1928792 4-Jan-2018 05:33
One person supports this post
Send private message quote this post

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit).  Tablet is only 3 weeks old as well :(

 

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

 

 

 

 

 

 

 

 


Meow
7280 posts

Uber Geek
+1 received by user: 3481

Moderator
Trusted
Lifetime subscriber

  Reply # 1928795 4-Jan-2018 05:41
Send private message quote this post

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.





2793 posts

Uber Geek
+1 received by user: 677

Trusted
Lifetime subscriber

  Reply # 1928796 4-Jan-2018 05:49
Send private message quote this post

michaelmurfy:

 

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.

 

 

I'm using a samsung Galaxy Tabpro S (M3 wih 4gig of ram).  Only use it for onenote, emails etc.

 

It does leave the door open to see what happens however, might need a test case, 30% hit is big and it's not like it's only going to effect low end machines, the higher the Ghz the greater the hit.  

 

I guess they could say that it is still running at the design speed but its the OS now slowing it down, but that is because of a design flaw in the CPU that could not be patched and a work around was done.

 

 

 

Interesting times, would not like to work for intel at the moment.


817 posts

Ultimate Geek
+1 received by user: 152


  Reply # 1928797 4-Jan-2018 06:43
Send private message quote this post

Probably less likely to affect normal desktop use and more likely data centers. Rc6 4.15 of the Linux kernel is supposed to remove AMD CPU performance hit hope windows is the same. really not a good time for Intel coming off a year where AMD came back in a big way.

3048 posts

Uber Geek
+1 received by user: 901

Trusted
Subscriber

  Reply # 1928799 4-Jan-2018 06:50
Send private message quote this post

Reading the articles, Linux machines seen to averaging a 17-18% hit but the blanket approach they've taken means AMD CPUs (which don't have the vulnerability) are also being affected.

I wonder if Microsoft will [be able to] factor CPU recognition into their patch.

Hopefully the US Securities Commission is taking a long, hard look at the Intel CEO's actions.

Edit: cheers for the update re Linux @stan

817 posts

Ultimate Geek
+1 received by user: 152


  Reply # 1928841 4-Jan-2018 09:03
Send private message quote this post

I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

2770 posts

Uber Geek
+1 received by user: 146

Trusted

  Reply # 1928873 4-Jan-2018 09:52
Send private message quote this post

Stan: I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

 

 

 

Yeah the next Kernel release will not affect AMD processors





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


2770 posts

Uber Geek
+1 received by user: 146

Trusted

  Reply # 1928874 4-Jan-2018 09:53
One person supports this post
Send private message quote this post

firefuze:

 

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

 

Full details are not available as the circumstances surrounding the exploit are currently under embargo

 

Article here

 

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

 

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

 

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?

 

 

 

 

There is a good article explaining the issue at Arstechnica: https://arstechnica.com/gadgets/2018/01/whats-behind-the-intel-design-flaw-forcing-numerous-patches/





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


2770 posts

Uber Geek
+1 received by user: 146

Trusted

  Reply # 1928875 4-Jan-2018 09:54
Send private message quote this post

tripp:

 

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit).  Tablet is only 3 weeks old as well :(

 

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

 

 

 

 

 

 

 

 

 

 

 

 

I wouldn't worry too much, its not likely to affect regular desktop performance or gaming much. Check out this article (should automatically translate): https://www.computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


BDFL - Memuneh
60038 posts

Uber Geek
+1 received by user: 11123

Administrator
Trusted
Geekzone
Lifetime subscriber

BDFL - Memuneh
60038 posts

Uber Geek
+1 received by user: 11123

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1928949 4-Jan-2018 11:30
Send private message quote this post

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

 

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.





2793 posts

Uber Geek
+1 received by user: 677

Trusted
Lifetime subscriber

  Reply # 1928967 4-Jan-2018 12:01
One person supports this post
Send private message quote this post

freitasm:

 

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

 

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.

 

 

 

 

Well sh** welcome to 2018 everyone :P


 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

TCF and Telcos Toughen Up on Scam Callers
Posted 23-Apr-2018 09:39


Amazon launches the International Shopping Experience in the Amazon Shopping App
Posted 19-Apr-2018 08:38


Spark New Zealand and TVNZ to bring coverage of Rugby World Cup 2019
Posted 16-Apr-2018 06:55


How Google can seize Microsoft Office crown
Posted 14-Apr-2018 11:08


How back office transformation drives IRD efficiency
Posted 12-Apr-2018 21:15


iPod laws in a smartphone world: will we ever get copyright right?
Posted 12-Apr-2018 21:13


Lightbox service using big data and analytics to learn more about customers
Posted 9-Apr-2018 12:11


111 mobile caller location extended to iOS
Posted 6-Apr-2018 13:50


Huawei announces the HUAWEI P20 series
Posted 29-Mar-2018 11:41


Symantec Internet Security Threat Report shows increased endpoint technology risks
Posted 26-Mar-2018 18:29


Spark switches on long-range IoT network across New Zealand
Posted 26-Mar-2018 18:22


Stuff Pix enters streaming video market
Posted 21-Mar-2018 09:18


Windows no longer Microsoft’s main focus
Posted 13-Mar-2018 07:47


Why phone makers are obsessed with cameras
Posted 11-Mar-2018 12:25


New Zealand Adopts International Open Data Charter
Posted 3-Mar-2018 12:48



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.