Re:Nvidia Hopper Architecture In-Depth
by wfrew on Tuesday August 23, 2022 @12:31AM
(#32560490)
Adding network addressing to the GPU interconnect is kind of fascinating
Am I right in thinking the GPU-to-GPU communication is just shuttling chunks of data around for sharing inputs/outputs of computations? Or is there some other coordination going on between the GPUs directly with regards to the actual computations each is running? (Or is that still being managed wholly by the CPUs they're attached to?)
Re:Nvidia Hopper Architecture In-Depth
by jiggawatts on Monday August 22, 2022 @11:23PM
(#32560150)
The mention of "Confidential Computing support" and the word "secure" over and over makes me strangely nervous.
I have a sneaking suspicion that somewhere in an NSA datacenter there will be racks upon racks of these things running transformers over every text message and voice call coming from certain regions...
Re:Nvidia Hopper Architecture In-Depth
by amluto on Tuesday August 23, 2022 @01:00AM
(#32560633)
“Confidential Computing” is an up-and-coming model in which a user (e.g. cloud customer) trusts a hardware vendor (e.g. Intel, AMD, nVidia), and that vendor has a mechanism by which systems with their hardware can run user code and attest, remotely, to the user that the code has not been tampered with and that the system’s owner (e.g. Amazon) is not exfiltrating user data.
This could be used for DRM or nefarious purposes, but that’s not the point.
Obviously this is no more secure than the underlying hardware. All the attacks against SGX, for example, will still apply unless they are fixed.
Re:Nvidia Hopper Architecture In-Depth
by bpye on Tuesday August 23, 2022 @04:31AM
(#32562030)
Confidential computing lets you reduce your TCB to the software running in your guest, be that a full OS like Linux or maybe some unikernel type thing, and the hardware itself. The intent is that a malicious host could not read or modify guest state, though of course they could simply refuse to schedule it.
Re:Nvidia Hopper Architecture In-Depth
by wfrew on Tuesday August 23, 2022 @12:36AM
(#32560515)
While I can totally imagine that being true, I imagine this is probably more a response to cloud providers wanting to subdivide each physical GPU into virtual/multi-tenant GPUs.
They'll want to be able to provide strong security guarantees to customers who're renting compute on a multi-tenant GPU and are pushing their sensitive data onto it
Re:Nvidia Hopper Architecture In-Depth
by modeless on Tuesday August 23, 2022 @01:16AM
(#32560710)
FP8 is interesting. I wonder if training could ever be made to work in this format? I see they have two options for mantissa size which is interesting. But no unsigned option? Losing a whole bit to the sign seems unfortunate when you only have eight.
Re:Nvidia Hopper Architecture In-Depth
by modeless on Tuesday August 23, 2022 @02:43AM
(#32561265)
There have been a lot of papers on techniques for training in low precision, even as low as binary. But the largest models that would benefit most aren't using those techniques, which indicates to me that they don't work as well as their paper abstracts suggest.
Re:Nvidia Hopper Architecture In-Depth
by sdenton4 on Tuesday August 23, 2022 @02:51AM
(#32561324)
My experience with quantization is that a little is easy, and a lot takes work. Quantization aware training helps, but it's finicky and adds extra steps to the training process, which in turn slows down iteration speed.
Re:Nvidia Hopper Architecture In-Depth
by sbierwagen on Monday August 22, 2022 @09:04PM
(#32559334)
This is a preview, H100 hasn't started shipping yet.
There's been some speculation that if the Ethereum merge puts a lot of 3000-series cards on the used market then Nvidia might delay releasing this generation of GPU.
Re:Nvidia Hopper Architecture In-Depth
by musha68k on Wednesday August 24, 2022 @12:38PM
(#32581961)
I’m asking as I would like to try parsec with it. Playing modern games in 4K+ with maxed out settings (and any ML “image reconstruction” turned off). It would be great to try this if possible!
Am I right in thinking the GPU-to-GPU communication is just shuttling chunks of data around for sharing inputs/outputs of computations? Or is there some other coordination going on between the GPUs directly with regards to the actual computations each is running? (Or is that still being managed wholly by the CPUs they're attached to?)
I have a sneaking suspicion that somewhere in an NSA datacenter there will be racks upon racks of these things running transformers over every text message and voice call coming from certain regions...
This could be used for DRM or nefarious purposes, but that’s not the point.
Obviously this is no more secure than the underlying hardware. All the attacks against SGX, for example, will still apply unless they are fixed.
I wonder what's different this time.
A group at IBM has been claiming for years that you can train with as little as FP4: https://papers.nips.cc/paper/2020/file/13b919438259814cd5be8...
There's been some speculation that if the Ethereum merge puts a lot of 3000-series cards on the used market then Nvidia might delay releasing this generation of GPU.