News for hackers. Stuff that matters.
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by guug on Monday January 27, 2020 @07:50PM (#22165404)
The "nutty"ness comes from people getting frustrated with intel fucking up the security of yet another feature they promised, and intel's overall poor security record.

Luckily there are other vendors who seem to know what they're doing: We just received our first batch of non-intel servers at work and have no intention of returning to intel for the foreseeable future. What they offer is simply not worth the risk. I expect more companies to follow suit.

Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by ehvatum on Monday January 27, 2020 @08:31PM (#22165639)
At the level where large, security-centric organizations make decisions, these instances argue for getting AMD in the door like nothing else that I can recall. So, it's a good time for AMD to have such performant hardware and a process advantage. If it stays this way for a decade, I'll be able to put in a PO for AMD hardware...
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by greyhair on Tuesday January 28, 2020 @08:27AM (#22169109)
The problem is, these leaky cache issues come from 'performant' hardware. It is the pipeline optimization that leads to the side channel.

There are cache architectures (such as pseudo random replacement) that are much more difficult to perform side channel attacks on, but have slightly lower performance.

Intel's problem has been its relentless pursuit of per clock performance, and that has led to some of these side channel attacks. Cache coherency on multi-core is hard.

My guess is that if the market share of Intel and AMD were swapped, you would see similar cache attacks on AMD.

Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by ngneer on Monday January 27, 2020 @11:01PM (#22166331)
When the market rewards secure design, you can make that complaint. Since the market does not reward secure design, expect investments in security to be commensurate. You cannot have it both ways.
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by mlyle on Monday January 27, 2020 @11:30PM (#22166469)
The market is noticing that we're losing a whole lot of performance on Intel to these security-related mitigations, though...
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by empiricus on Tuesday January 28, 2020 @01:51AM (#22167052)
Intel reports record profits again.
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by mlyle on Tuesday January 28, 2020 @02:46AM (#22167267)
This doesn't mean that Intel hasn't been affected negatively by the resurgence of AMD in the processor business. AMD is taking several billion dollars of revenue, and every dollar of that costs Intel much more than $1. A noticeable part of AMD's newfound competitiveness comes from the various performance taxes that Intel has had to pay for speculative execution mitigation.

It's worth noting, too, that Intel has diversified-- the processor business is only one very important business to Intel.

Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by xondono on Tuesday January 28, 2020 @08:04AM (#22168949)
Profit in infrastructure is a delayed indicator, it talks about how the company was doing, not how is it doing now.
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by ngneer on Tuesday January 28, 2020 @02:28AM (#22167191)
Thank you. Apparently, the stockholders agree with my assessment.
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by mlyle on Tuesday January 28, 2020 @02:46AM (#22167270)
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by az656 on Tuesday January 28, 2020 @05:26AM (#22168059)
I work for Intel (not speaking in my official capacity) and the AMD scare here is real.
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by guug on Monday January 27, 2020 @11:25PM (#22166444)
Not a complaint but merely stating the obvious.
Re:CacheOut: Leaking Data on Intel CPUs via Cache Evictions by jnordwick on Tuesday January 28, 2020 @07:02AM (#22168572)
What do you do? The vulnerabilities don't apply to a vast majority of situations (meltdown was about the only one and it has been patched - more of a big).

Unless you are running untrusted VM from others, you're not making a rational, knowledgeable decision.

Most people are just using this to falsely justify their Intel hate, similar to Microsoft in the 2000s.