Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




377 posts

Ultimate Geek
+1 received by user: 51


Topic # 226356 3-Jan-2018 21:58
One person supports this post
Send private message quote this post

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

 

Full details are not available as the circumstances surrounding the exploit are currently under embargo

 

Article here

 

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

 

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

 

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
6935 posts

Uber Geek
+1 received by user: 3231

Moderator
Trusted
Lifetime subscriber

  Reply # 1928714 3-Jan-2018 22:04
2 people support this post
Send private message quote this post

The AMD side of things should be patched already: https://lkml.org/lkml/2017/12/27/2

 

But yes, pretty bad considering all my machines are Intel based. Also what is worse is the CEO selling all his shares which sounds like some insider trading was going on.





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


TLD

603 posts

Ultimate Geek
+1 received by user: 123


  Reply # 1928752 3-Jan-2018 23:07
Send private message quote this post

Is this the same issue?  Puget Systems has some fixes if it is.

 

https://www.pugetsystems.com/labs/support-hardware/Intel-Security-Flaw---Severe---ASUS-Gigabyte-ASRock-fixes-identified-1074/





Trevor Dennis
Rapaura (near Blenheim)

 
 
 
 


6935 posts

Uber Geek
+1 received by user: 3231

Moderator
Trusted
Lifetime subscriber

  Reply # 1928790 4-Jan-2018 05:02
Send private message quote this post

The Intel press conference at CES is also going to be quite interesting...




Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


2655 posts

Uber Geek
+1 received by user: 597

Trusted
Lifetime subscriber

  Reply # 1928792 4-Jan-2018 05:33
One person supports this post
Send private message quote this post

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit).  Tablet is only 3 weeks old as well :(

 

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

 

 

 

 

 

 

 

 


6935 posts

Uber Geek
+1 received by user: 3231

Moderator
Trusted
Lifetime subscriber

  Reply # 1928795 4-Jan-2018 05:41
Send private message quote this post

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


2655 posts

Uber Geek
+1 received by user: 597

Trusted
Lifetime subscriber

  Reply # 1928796 4-Jan-2018 05:49
Send private message quote this post

michaelmurfy:

 

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.

 

 

I'm using a samsung Galaxy Tabpro S (M3 wih 4gig of ram).  Only use it for onenote, emails etc.

 

It does leave the door open to see what happens however, might need a test case, 30% hit is big and it's not like it's only going to effect low end machines, the higher the Ghz the greater the hit.  

 

I guess they could say that it is still running at the design speed but its the OS now slowing it down, but that is because of a design flaw in the CPU that could not be patched and a work around was done.

 

 

 

Interesting times, would not like to work for intel at the moment.


780 posts

Ultimate Geek
+1 received by user: 147


  Reply # 1928797 4-Jan-2018 06:43
Send private message quote this post

Probably less likely to affect normal desktop use and more likely data centers. Rc6 4.15 of the Linux kernel is supposed to remove AMD CPU performance hit hope windows is the same. really not a good time for Intel coming off a year where AMD came back in a big way.

2986 posts

Uber Geek
+1 received by user: 865

Trusted
Subscriber

  Reply # 1928799 4-Jan-2018 06:50
Send private message quote this post

Reading the articles, Linux machines seen to averaging a 17-18% hit but the blanket approach they've taken means AMD CPUs (which don't have the vulnerability) are also being affected.

I wonder if Microsoft will [be able to] factor CPU recognition into their patch.

Hopefully the US Securities Commission is taking a long, hard look at the Intel CEO's actions.

Edit: cheers for the update re Linux @stan

780 posts

Ultimate Geek
+1 received by user: 147


  Reply # 1928841 4-Jan-2018 09:03
Send private message quote this post

I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

2737 posts

Uber Geek
+1 received by user: 141

Trusted

  Reply # 1928873 4-Jan-2018 09:52
Send private message quote this post

Stan: I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

 

 

 

Yeah the next Kernel release will not affect AMD processors





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


2737 posts

Uber Geek
+1 received by user: 141

Trusted

  Reply # 1928874 4-Jan-2018 09:53
One person supports this post
Send private message quote this post

firefuze:

 

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

 

Full details are not available as the circumstances surrounding the exploit are currently under embargo

 

Article here

 

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

 

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

 

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?

 

 

 

 

There is a good article explaining the issue at Arstechnica: https://arstechnica.com/gadgets/2018/01/whats-behind-the-intel-design-flaw-forcing-numerous-patches/





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


2737 posts

Uber Geek
+1 received by user: 141

Trusted

  Reply # 1928875 4-Jan-2018 09:54
Send private message quote this post

tripp:

 

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit).  Tablet is only 3 weeks old as well :(

 

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

 

 

 

 

 

 

 

 

 

 

 

 

I wouldn't worry too much, its not likely to affect regular desktop performance or gaming much. Check out this article (should automatically translate): https://www.computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


BDFL - Memuneh
59418 posts

Uber Geek
+1 received by user: 10626

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1928922 4-Jan-2018 11:05
Send private message quote this post

Intel CEO sold all his shares (which he purchased at below market, as his right), keeping only the minimum required by company bylaws, a couple of weeks before announcement https://www.fool.com/investing/2017/12/19/intels-ceo-just-sold-a-lot-of-stock.aspx

 

PC World Intel Processor Kernel Bug FAQ - how it affects Windows/Mac.





BDFL - Memuneh
59418 posts

Uber Geek
+1 received by user: 10626

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1928949 4-Jan-2018 11:30
Send private message quote this post

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

 

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.





2655 posts

Uber Geek
+1 received by user: 597

Trusted
Lifetime subscriber

  Reply # 1928967 4-Jan-2018 12:01
One person supports this post
Send private message quote this post

freitasm:

 

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

 

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.

 

 

 

 

Well sh** welcome to 2018 everyone :P


 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New Zealand hits peak broadband data
Posted 18-Jan-2018 12:21


Amazon Echo devices coming to New Zealand early February 2018
Posted 18-Jan-2018 10:53


$3.74 million for new electric vehicles in New Zealand
Posted 17-Jan-2018 11:27


Nova 2i: Value, not excitement from Huawei
Posted 17-Jan-2018 09:02


Less news in Facebook News Feed revamp
Posted 15-Jan-2018 13:15


Australian Government contract awarded to Datacom Connect
Posted 11-Jan-2018 08:37


Why New Zealand needs a chief technology officer
Posted 6-Jan-2018 13:59


Amazon release Silk Browser and Firefox for Fire TV
Posted 21-Dec-2017 13:42


New Chief Technology Officer role created
Posted 19-Dec-2017 22:18


All I want for Christmas is a new EV
Posted 19-Dec-2017 19:54


How clever is this: AI will create 2.3 million jobs by 2020
Posted 19-Dec-2017 19:52


NOW to deploy SD-WAN to regional councils
Posted 19-Dec-2017 19:46


Mobile market competition issues ComCom should watch
Posted 18-Dec-2017 10:52


New Zealand government to create digital advisory group
Posted 16-Dec-2017 08:47


Australia datum changes means whole country moving 1.8 metres north-east
Posted 16-Dec-2017 08:39



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.