News for hackers. Stuff that matters.
Re:Downfall Attacks by buildbot on Tuesday August 08, 2023 @01:33PM (#37052674)
This is a huge performance hit - up to 50% it is claimed! 70% of modern intel processors are affected apparently as well.
Re:Downfall Attacks by samwillis on Tuesday August 08, 2023 @01:59PM (#37053006)
> some workloads may experience up to 50% overhead

They word there are "some workloads", I suspect that performance hit is rare.

Re:Downfall Attacks by jgtrosh on Tuesday August 08, 2023 @04:24PM (#37054986)
My guess is that HPC systems which run applications whose performance strongly depends on efficient data scatter gather will immediately disable the mitigation.
Re:Downfall Attacks by loeg on Tuesday August 08, 2023 @02:10PM (#37053187)
Key context you elided: "This depends on whether Gather is in the critical execution path of a program."
Re:Downfall Attacks by buildbot on Tuesday August 08, 2023 @02:21PM (#37053338)
Well yes. That is the up to part.
Re:Downfall Attacks by ablated_maquis on Tuesday August 08, 2023 @02:32PM (#37053500)
Is that 50% overhead for "Gather" instructions? If that is the case, then if 10% of instructions are "gathers" in your workload then that would be 5% overall.
Re:Downfall Attacks by loeg on Tuesday August 08, 2023 @02:33PM (#37053506)
Something like that, yeah.
Re:Downfall Attacks by dralley on Tuesday August 08, 2023 @02:41PM (#37053602)
"Red Hat’s internal performance testing of a worst-case microbenchmark showed a significant slowdown. However, more realistic applications that utilize vector gathering showed only low single-digit percentage slowdowns."

https://access.redhat.com/solutions/7027704

Performance Impact

The performance impact of the microcode mitigation is limited to applications that use the gather instructions provided by Intel Advanced Vector Extensions (AVX2 and AVX-512) and the CLWB instruction. Actual performance impact will depend on how heavily an application uses those instructions. Red Hat’s internal performance testing of a worst-case microbenchmark showed a significant slowdown. However, more realistic applications that utilize vector gathering showed only low single-digit percentage slowdowns.

If the user decides to disable the mitigation after doing a thorough risk analysis (for example the system isn’t multi-tenant and doesn’t execute untrusted code), the user can disable the mitigation. After applying the microcode and kernel updates, the user can disable the mitigation by adding gather_data_samping=off to the kernel command line.Alternatively, to disable all CPU speculative execution mitigations, including GDS, use mitigations=off.

Re:Downfall Attacks by graton on Tuesday August 08, 2023 @03:51PM (#37054576)
It is kind of like thinking that it is a huge sale at a store when they say "Up to 70% off". And there are like two things in the whole store which are 70% off.

I am always suspicious of "up to" claims.

Re:Downfall Attacks by IlliOnato on Tuesday August 08, 2023 @05:43PM (#37055846)
I always translate such weasel words to their more straightforward equivalent. "Up to 70% off" means for me "Nothing in our store is discounted by more than 70%" :-)