Intel has released new CPU microcode for download • Hacker News Board

Re: Intel has released new CPU microcode for download

#81

Post by fred_is_fred » Wed, Jan 10, 2018, 6:32 AM UTC

chrisper wrote: post #74

transpute wrote: post #11

Intel, AMD and Via microcode is being archived by CPUID, by the user community: https://www.win-raid.com/t3355f47-Intel-AMD-amp-VIA-CPU-Micr... "Collecting all available Production CPU microcodes is important for upgrading/downgrading purposes, for creating universal tools that can help people understand what microcode they use, for research on how the general technology works, for developers with no vendor represent…

For Windows there is also this: https://labs.vmware.com/flings/vmware-cpu-microcode-update-d... I have never tried it though.

Wouldn't a live CD/USB also work?

Re: Intel has released new CPU microcode for download

#82

Post by djsumdog » Wed, Jan 10, 2018, 6:39 AM UTC

kev009 wrote: post #76

djsumdog wrote: post #59

Earlier quoted context omitted.

A microcode update is applied directly to the processor, typically during the boot process, and is a common practice to fix CPU bugs. It changes the microcode running on the hardware itself. This is totally different from the kernel PTI fixes, which attempt to deal with Meltdown by changing the way the operating systems for Linux/Mac/Windows/DragonFly (and hopefully soon *BSD) interacts with the hardware and page tab…

What he said isn't wrong, this new ucode changes fencing and branching prediction semantics regardless of using the instructions added for spectre. The problem is varied. While most people should run the new ucode and pending kernel and toolchain fixes, not all must. Most businesses buy computers on rated performance, and they are about to take an unexpected performance haircut. Intel ucode isn't really optional, as…

I wonder if this will end with Intel selling a lot of new chips, or Intel having to issue massive recalls. I doubt Intel will be able to be able to get away with discount/trade-ins without some serious legal complications.

I doubt we'll see entire data centers move to AMD as that would get stupid expensive. For the short term, we might see data centers order extra AMD blades and changing their provisioning systems to pin high IO tasks to those machines. And that's for people who co-locate or host their own stuff.

I'm interested to see how this affects Infrastructure providers who abstract a lot of that away, like AWS, DigitalOcean, Rackspace and others.

They might even be working on analysis and auto-migration to move high IO nodes to higher performance machines transparently. It will be interesting to see what hosting providers start blogging about in the next few weeks.

Re: Intel has released new CPU microcode for download

#83

Post by [deleted] » Wed, Jan 10, 2018, 6:39 AM UTC

[deleted]

Re: Intel has released new CPU microcode for download

#84

Post by vbernat » Wed, Jan 10, 2018, 6:40 AM UTC

phire wrote: post #75

Looks like they updated the microcode for every single processor they ever released, going all the way back to the Pentium. The list includes: The Pentium 4, Pentium III, Pentium II, Pentium Pro and the original Pentium. I didn't even know the Pentium had upgradable microcode.

Not all listed processors got an update. If you look at SandyBridge E, the associated microcode is still from 2013.

Re: Intel has released new CPU microcode for download

#85

Post by chrisper » Wed, Jan 10, 2018, 6:41 AM UTC

fred_is_fred wrote: post #81

chrisper wrote: post #74

Earlier quoted context omitted.

For Windows there is also this: https://labs.vmware.com/flings/vmware-cpu-microcode-update-d... I have never tried it though.

Wouldn't a live CD/USB also work?

I believe the one from my link is lost between reboots.

Windows does not seem to deliver microcode fixes except for the Surface.

Re: Intel has released new CPU microcode for download

#86

Post by ce4 » Wed, Jan 10, 2018, 6:42 AM UTC

kiwijamo wrote: post #79

phire wrote: post #75

Looks like they updated the microcode for every single processor they ever released, going all the way back to the Pentium. The list includes: The Pentium 4, Pentium III, Pentium II, Pentium Pro and the original Pentium. I didn't even know the Pentium had upgradable microcode.

I thought you were joking and had a close look at the list. Turns out you're absolutely right! Intel® Pentium® Processor 100 MHz, 50 MHz FSB Intel® Pentium® Processor 120 MHz, 60 MHz FSB Intel® Pentium® Processor 150 MHz, 60 MHz FSB Intel® Pentium® Processor 75 MHz, 50 MHz FSB Intel® Pentium® Processor 90 MHz, 60 MHz FSB

I wouldn't be so quick to say that.

it's the cumulatively package including all microcodes. Thus it applies to the listed CPUs.

Without having a look, you cannot say which one got an update and which CPU didn't.

Re: Intel has released new CPU microcode for download

#87

Post by tedunangst » Wed, Jan 10, 2018, 6:54 AM UTC

kev009 wrote: post #76

djsumdog wrote: post #59

Earlier quoted context omitted.

A microcode update is applied directly to the processor, typically during the boot process, and is a common practice to fix CPU bugs. It changes the microcode running on the hardware itself. This is totally different from the kernel PTI fixes, which attempt to deal with Meltdown by changing the way the operating systems for Linux/Mac/Windows/DragonFly (and hopefully soon *BSD) interacts with the hardware and page tab…

What he said isn't wrong, this new ucode changes fencing and branching prediction semantics regardless of using the instructions added for spectre. The problem is varied. While most people should run the new ucode and pending kernel and toolchain fixes, not all must. Most businesses buy computers on rated performance, and they are about to take an unexpected performance haircut. Intel ucode isn't really optional, as…

Doesn't the microcode expose new MSRs to control branch prediction? If you don't want to, don't clear the cache.

Re: Intel has released new CPU microcode for download

#88

Post by paulie_a » Wed, Jan 10, 2018, 7:00 AM UTC

threeseed wrote: post #45

mschuster91 wrote: post #32

Earlier quoted context omitted.

> You (and colleagues) must have a strange workload. Sometimes it's something as easy as installing the printer driver for a C1028i printer. On 10.13, it's stuck on "Configuring printer" forever. The printer driver is the currentmost available from the vendor, and the OS fully patched. Or something as grave as the famous empty password root backdoor. This alone is sufficient for me to not upgrade as long as possible…

> Or something as grave as the famous empty password root backdoor. You mean the issue that was fixed quite a while ago now ? I really don't understand the logic behind your position. OSX really is as buggy as it's always been. At least it's buggy with the latest security fixes applied.

While alot has happened recently, I wouldn't consider 4-5 weeks a "while ago". It was an egregiously stupid bug that should have never happened.

Re: Intel has released new CPU microcode for download

#89

Post by microtonal » Wed, Jan 10, 2018, 7:10 AM UTC

chrisper wrote: post #85

fred_is_fred wrote: post #81

Earlier quoted context omitted.

Wouldn't a live CD/USB also work?

I believe the one from my link is lost between reboots. Windows does not seem to deliver microcode fixes except for the Surface.

The microcode update is always lost between reboots. This is e.g. why the Linux kernel can update the microcode during early boot.

The only way to make microcode updates stick between reboots is with a BIOS/EFI firmware update (some vendors provide firmware updates with microcode updates.). Then the microcode update gets applied during every boot automatically.

Re: Intel has released new CPU microcode for download

#90

Post by jlgaddis » Wed, Jan 10, 2018, 8:38 AM UTC

milofeynman wrote: post #22

Freaky wrote: post #17

CPU: Intel(R) Xeon(R) CPU L5639 @ 2.13GHz Not listed :/

I'm running freenas on a Xeon. I'm assuming i am going to have to install something from supermicro and wait for a freenas (and freebsd) update. Is there anything else I should update?

Similarly, my primary (personal) server is an X10SL7-F with an E3-1231v3 (running FreeBSD). I'm waiting around for Supermicro but I would suggest not holding your breath.

On second thought, I suppose the same goes for Asus with regard to my main workstation (Z10PE-D16/WS with a pair of E5-2620v4's).

My ThinkPads are much older (T420/W530) and I'm not really expecting anything for them from Lenovo -- especially any time soon, although they do put out the occasional BIOS update for 'em.