Live data from Hacker News

CPU Usage Differences After Applying Meltdown Patch at Epic Games

epicgames.com

1–10 of 296 posts

Re: CPU Usage Differences After Applying Meltdown Patch at Epic Games

#3
Surprise, surprise, Intel’s Meltdown patch has significant and serious performance impacts for specific kinds of workloads.

All because Intel decided to “optimise” by checking for permissions after speculative retirement, instead of before like AMD.

Re: CPU Usage Differences After Applying Meltdown Patch at Epic Games

#6
post #4
post #2

Wow that's a huge jump. Scared for my web servers now

Not entirely sure why we need to update/protect most servers, since generally they won't be running untrusted code, right?

The reason for doing so is minimising the risk if an attacker breaks into a server. This is also why systems like ATMs should be patched. Untrusted code execution on servers and ATMs may not be the norm, but it's far from impossible.

Re: CPU Usage Differences After Applying Meltdown Patch at Epic Games

#7
post #4
post #2

Wow that's a huge jump. Scared for my web servers now

Not entirely sure why we need to update/protect most servers, since generally they won't be running untrusted code, right?

If they're operating on data supplied by the attacker, they're potentially a single hop away from executing untrusted code.

Re: CPU Usage Differences After Applying Meltdown Patch at Epic Games

#8

Considering the performance impact, I wonder how console manufacturers are going to handle this (assuming that the processors they used are vulnerable to Spectre/Meltdown).

Console manufacturers don't run unsigned code, so I expect they'll just sit still until the next hardware refresh.

Re: CPU Usage Differences After Applying Meltdown Patch at Epic Games

#9
post #8

Considering the performance impact, I wonder how console manufacturers are going to handle this (assuming that the processors they used are vulnerable to Spectre/Meltdown).

Console manufacturers don't run unsigned code, so I expect they'll just sit still until the next hardware refresh.

Modern consoles now come with web browsers, and the researchers proved that the attacks could be performed via web browsers, did they not?

Re: CPU Usage Differences After Applying Meltdown Patch at Epic Games

#10
post #7
post #4

Earlier quoted context omitted.

Not entirely sure why we need to update/protect most servers, since generally they won't be running untrusted code, right?

If they're operating on data supplied by the attacker, they're potentially a single hop away from executing untrusted code.

...at which point that untrusted code gains full access to the only userspace process that matters on that node. If you gain access to run code on a server process why escalate further, you already have access to everything that matters?...

Assuming bare metal. In shared hosting / cloud / VMs it is different.

Post reply on HN