News for hackers. Stuff that matters.
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by rdtsc on Wednesday January 03, 2018 @10:54AM (#16061991)
The privilege escalation is being fixed in software. The problem is that mitigation involves patching the kernel and that patch results in around 30% slowdown for some applications like databases or anything that does a lot of IO (disk and network). That's the big deal. Imagine you are running at close to full capacity after security fix reboot your service might tip over. It could mean a direct impact to cost and so on.
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by jcadam on Wednesday January 03, 2018 @11:29AM (#16062333)
Oh good, I put my SaaS (running mostly on Linode) up yesterday, then this happens. Can't wait for Linode to apply this patch to their infrastructure :(

I'm cursed when it comes to timing. It's like when I bought that house in 2007, held onto it waiting for the market to recover, then tried to sell it only to find out my tenants had been using it to operate a rabbit-breeding business for years and completely trashed the place (thank you, useless property manager), forcing me to sell it at a loss anyway (6 months ago).

Also, I hate rabbits now. And I veered off topic, sorry.

Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by coolspot on Wednesday January 03, 2018 @12:22PM (#16062863)
You might try luck to sell this as comedy/drama movie script. :)
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by rdtsc on Wednesday January 03, 2018 @01:51PM (#16063836)
> Also, I hate rabbits now. And I veered off topic, sorry.

Well I guess you're not the right person to without about a great ninja-rockstar position at our new RaaS startup.

/one has to joke sometimes to avoid crying over taking a 30% hit in costs... over a stupid CPU bug

Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by jcriddle4 on Wednesday January 03, 2018 @11:12AM (#16062171)
I would love to see some SQL Server benchmarks on this patch
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by marcolussetti on Wednesday January 03, 2018 @11:27AM (#16062318)
SQL Server license disallows publishing of the results of benchmarking (much like Oracle does)
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by dvlsg on Wednesday January 03, 2018 @12:39PM (#16063027)
Wait, really? That's kind of messed up.
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by walterbell on Wednesday January 03, 2018 @02:41PM (#16064332)
Remarkable that no throwaway HN accounts considered that a challenge.
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by chillydawg on Wednesday January 03, 2018 @11:45AM (#16062531)
Likely very similar to the postgres benchmarks. Fundamentally a RDBMS needs to sync each transaction commit to the log file on disk and that sync is always a syscall. If your DB is doing thousands tx/sec to low latency flash and you rely on that low latency, you're going to get hit.
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch... by anarazel on Wednesday January 03, 2018 @04:51PM (#16065563)
Note that the postgres benchmark numbers passed around (most based on my benchmarks) are readonly. For write based workloads the overhead is likely going to be much smaller in nearly all cases, there's just more independent workload. The overhead in the readonly load profiles comes near entirely from the synchronous client<->server communication, if you can avoid that for workloads (using pipelining, other batching techniques) the overhead's going to be smaller.