Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


389 posts

Ultimate Geek
+1 received by user: 55


Topic # 226356 3-Jan-2018 21:58
One person supports this post
Send private message

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

 

Full details are not available as the circumstances surrounding the exploit are currently under embargo

 

Article here

 

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

 

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

 

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
Meow
7528 posts

Uber Geek
+1 received by user: 3640

Moderator
Trusted
Lifetime subscriber

  Reply # 1928714 3-Jan-2018 22:04
2 people support this post
Send private message

The AMD side of things should be patched already: https://lkml.org/lkml/2017/12/27/2

 

But yes, pretty bad considering all my machines are Intel based. Also what is worse is the CEO selling all his shares which sounds like some insider trading was going on.





TLD

659 posts

Ultimate Geek
+1 received by user: 146


  Reply # 1928752 3-Jan-2018 23:07
Send private message

Is this the same issue?  Puget Systems has some fixes if it is.

 

https://www.pugetsystems.com/labs/support-hardware/Intel-Security-Flaw---Severe---ASUS-Gigabyte-ASRock-fixes-identified-1074/





Trevor Dennis
Rapaura (near Blenheim)

Meow
7528 posts

Uber Geek
+1 received by user: 3640

Moderator
Trusted
Lifetime subscriber

  Reply # 1928790 4-Jan-2018 05:02
Send private message

The Intel press conference at CES is also going to be quite interesting...




2907 posts

Uber Geek
+1 received by user: 731

Trusted
Lifetime subscriber

  Reply # 1928792 4-Jan-2018 05:33
One person supports this post
Send private message

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit).  Tablet is only 3 weeks old as well :(

 

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

 

 

 

 

 

 

 

 


Meow
7528 posts

Uber Geek
+1 received by user: 3640

Moderator
Trusted
Lifetime subscriber

  Reply # 1928795 4-Jan-2018 05:41
Send private message

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.





2907 posts

Uber Geek
+1 received by user: 731

Trusted
Lifetime subscriber

  Reply # 1928796 4-Jan-2018 05:49
Send private message

michaelmurfy:

 

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.

 

 

I'm using a samsung Galaxy Tabpro S (M3 wih 4gig of ram).  Only use it for onenote, emails etc.

 

It does leave the door open to see what happens however, might need a test case, 30% hit is big and it's not like it's only going to effect low end machines, the higher the Ghz the greater the hit.  

 

I guess they could say that it is still running at the design speed but its the OS now slowing it down, but that is because of a design flaw in the CPU that could not be patched and a work around was done.

 

 

 

Interesting times, would not like to work for intel at the moment.


930 posts

Ultimate Geek
+1 received by user: 183
Inactive user


  Reply # 1928797 4-Jan-2018 06:43
Send private message

Probably less likely to affect normal desktop use and more likely data centers. Rc6 4.15 of the Linux kernel is supposed to remove AMD CPU performance hit hope windows is the same. really not a good time for Intel coming off a year where AMD came back in a big way.

3080 posts

Uber Geek
+1 received by user: 918

Trusted
Lifetime subscriber

  Reply # 1928799 4-Jan-2018 06:50
Send private message

Reading the articles, Linux machines seen to averaging a 17-18% hit but the blanket approach they've taken means AMD CPUs (which don't have the vulnerability) are also being affected.

I wonder if Microsoft will [be able to] factor CPU recognition into their patch.

Hopefully the US Securities Commission is taking a long, hard look at the Intel CEO's actions.

Edit: cheers for the update re Linux @stan

930 posts

Ultimate Geek
+1 received by user: 183
Inactive user


  Reply # 1928841 4-Jan-2018 09:03
Send private message

I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

2777 posts

Uber Geek
+1 received by user: 152

Trusted

  Reply # 1928873 4-Jan-2018 09:52
Send private message

Stan: I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

 

 

 

Yeah the next Kernel release will not affect AMD processors





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


2777 posts

Uber Geek
+1 received by user: 152

Trusted

  Reply # 1928874 4-Jan-2018 09:53
One person supports this post
Send private message

firefuze:

 

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

 

Full details are not available as the circumstances surrounding the exploit are currently under embargo

 

Article here

 

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

 

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

 

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?

 

 

 

 

There is a good article explaining the issue at Arstechnica: https://arstechnica.com/gadgets/2018/01/whats-behind-the-intel-design-flaw-forcing-numerous-patches/





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


2777 posts

Uber Geek
+1 received by user: 152

Trusted

  Reply # 1928875 4-Jan-2018 09:54
Send private message

tripp:

 

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit).  Tablet is only 3 weeks old as well :(

 

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

 

 

 

 

 

 

 

 

 

 

 

 

I wouldn't worry too much, its not likely to affect regular desktop performance or gaming much. Check out this article (should automatically translate): https://www.computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/





Lead Consultant @Intergen
All comments are my own opinion, and not that of my employer unless explicitly stated.


BDFL - Memuneh
60801 posts

Uber Geek
+1 received by user: 11681

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1928922 4-Jan-2018 11:05
Send private message
BDFL - Memuneh
60801 posts

Uber Geek
+1 received by user: 11681

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1928949 4-Jan-2018 11:30
Send private message

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

 

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.





2907 posts

Uber Geek
+1 received by user: 731

Trusted
Lifetime subscriber

  Reply # 1928967 4-Jan-2018 12:01
One person supports this post
Send private message

freitasm:

 

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

 

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.

 

 

 

 

Well sh** welcome to 2018 everyone :P


 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Microsoft Dynamics 365 Business Central launches
Posted 10-Jul-2018 10:40


Spark completes first milestone in voice platform upgrade
Posted 10-Jul-2018 09:36


Microsoft ices heated developers
Posted 6-Jul-2018 20:16


PB Technologies charged for its extended warranties and warned for bait advertising
Posted 3-Jul-2018 15:45


Almost 20,000 people claim credits from Spark
Posted 29-Jun-2018 10:40


Cove sells NZ's first insurance policy via chatbot
Posted 25-Jun-2018 10:04


N4L helping TAKA Trust bridge the digital divide for Lower Hutt students
Posted 18-Jun-2018 13:08


Winners Announced for 2018 CIO Awards
Posted 18-Jun-2018 13:03


Logitech Rally sets new standard for USB-connected video conference cameras
Posted 18-Jun-2018 09:27


Russell Stanners steps down as Vodafone NZ CEO
Posted 12-Jun-2018 09:13


Intergen recognised as 2018 Microsoft Country Partner of the Year for New Zealand
Posted 12-Jun-2018 08:00


Finalists Announced For Microsoft NZ Partner Awards
Posted 6-Jun-2018 15:12


Vocus Group and Vodafone announce joint venture to accelerate fibre innovation
Posted 5-Jun-2018 10:52


Kogan.com to launch Kogan Mobile in New Zealand
Posted 4-Jun-2018 14:34


Enable doubles fibre broadband speeds for its most popular wholesale service in Christchurch
Posted 2-Jun-2018 20:07



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.