Massive security hole in CPU's incoming?Official Meltdown/Spectre Discussion Thread

Page 47 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

coercitiv

Diamond Member
Jan 24, 2014
6,400
12,858
136
The sophos scanner here at work has also marked this tool as malware.
I will wait for a definition update.
Now down to 7 positives on Virus Total. I think we can reasonably call it a false positive by now. (if there was any doubt considering the source is trustworthy anyway)

Anyone having doubts can use the other tools or just wait a few more days for the rest of the AV software to filter out their results.
 

Topweasel

Diamond Member
Oct 19, 2000
5,436
1,655
136
It's a bit of a stretch to compare intel's cpu competition with blackberry's competition though, isn't it? Intel screwed up, or, at worst, got caught trying to inflate performance by a relatively small amount. They'll no doubt suffer a bit, but this isn't end, or even the beginning of the end. It's probably not even the end of the beginning for them. Blackberry, otoh, got trucked by Steve Freakin' Jobs.
Great Millenium quote insert there.
 

coercitiv

Diamond Member
Jan 24, 2014
6,400
12,858
136
Bad news: microcode patches affect stability of Intel CPUs from Sandy Bridge to Kaby Lake. At this point I wouldn't be surprised if Coffee Lake was affected as well.

Intel admits Spectre patch problems also affect newer Core chips
Intel has revealed that even its newer CPUs are affected by the frequent reboot problems brought about by the Spectre/Meltdown patches. The chipmaker previously said that the reboot issue affects systems running Broadwell and Haswell. Now that it has managed to reproduce the problem internally in an effort to fix it, the company found that a similar behavior can occur in platforms powered by Skylake and Kaby Lake, which are newer than Haswell and Broadwell. Ivy Bridge- and Sandy Bridge-based systems, both older cores, are also susceptible to the bug.
 

Dribble

Platinum Member
Aug 9, 2005
2,076
611
136
Reactions: Kuosimodo

coercitiv

Diamond Member
Jan 24, 2014
6,400
12,858
136
They had the bug for 6 months but clearly were in no rush to fix it until the problems got out
"The problems got out" just days before the scheduled disclosure, and I bet many engineers spent the end of the year working hard on these fixes instead of spending holidays with their families. I would rather blame Intel for what I know they handled badly (initial PR stunt for example) rather than what I can only guess they could have done better.
 

dark zero

Platinum Member
Jun 2, 2015
2,655
138
106
So... The performance hit will benfar worse than expecting... Intel just transformed Core into another Pentium 4 dissaster....
 

LTC8K6

Lifer
Mar 10, 2004
28,520
1,575
126
So... The performance hit will benfar worse than expecting... Intel just transformed Core into another Pentium 4 dissaster....
Looks like it's nearly under control to me. Especially with Google's solution, which customers apparently didn't notice.

I think soon they will have all of the problems sufficiently repaired to move on.
 

Genx87

Lifer
Apr 8, 2002
41,095
513
126
Heh Google pat themselves on the back for no complaints about a patch nobody knew about it. Funny.
 

trollspotter

Member
Jan 4, 2011
28
35
91
https://support.google.com/faqs/answer/7625886

It is not a reasonable solution ATM IMO as it requires you to recompile all code with a patched compiler. I haven't tested if it is performance neutral as they claim since it is a massive pain to implement.
From Ars Technica:

Using retpoline for sensitive branches doesn't work reliably on the latest (Broadwell or better) Intel processors, because those processors can, in fact, use the branch predictor instead of the return buffers. When returning from deep function nesting (function A calls function B calls function C calls function D...), the return buffers can be emptied. Broadwell-or-better don't give up in this scenario; they fall back on the BTB. This means that on Broadwell or better, even retpoline code can end up using the attacker-prepared BTB. Intel says that a microcode update will address this. Alternatively, there are ways to "refill" the return buffer.
 

LTC8K6

Lifer
Mar 10, 2004
28,520
1,575
126
From Ars Technica:

Using retpoline for sensitive branches doesn't work reliably on the latest (Broadwell or better) Intel processors, because those processors can, in fact, use the branch predictor instead of the return buffers. When returning from deep function nesting (function A calls function B calls function C calls function D...), the return buffers can be emptied. Broadwell-or-better don't give up in this scenario; they fall back on the BTB. This means that on Broadwell or better, even retpoline code can end up using the attacker-prepared BTB. Intel says that a microcode update will address this. Alternatively, there are ways to "refill" the return buffer.
Yes, it looks like Google and Intel together may have a decent solution.
 

Topweasel

Diamond Member
Oct 19, 2000
5,436
1,655
136
Now this is not the end. It is not even the beginning of the end. But it is, perhaps, the end of the beginning. Winston Churchill

I read that years ago in Winston Churhill's suberb The Second World War.
Ah the only time I ever heard it was watching this movie called Millennium. It's not a great movie but I liked that quote at the end.
 

psolord

Platinum Member
Sep 16, 2009
2,015
1,225
136
Bad news: microcode patches affect stability of Intel CPUs from Sandy Bridge to Kaby Lake. At this point I wouldn't be surprised if Coffee Lake was affected as well.

Intel admits Spectre patch problems also affect newer Core chips

Thanks for the info.

I haven't noticed anything weird with my i7-860 and i5-8600k systems. Both patched, the second one more properly with microcode updated bios etc.

I will have my Sandy 2500k up and running some time next week I believe, so I will report back.
 

escrow4

Diamond Member
Feb 4, 2013
3,339
122
106
Patched my H270M-PRO 4 mobo, the InSpectre tool shows its all fine. I wonder how the collective brainpower of Intel's engineers missed this. Something something you do this all day and its your job . . .
 

wahdangun

Golden Member
Feb 3, 2011
1,007
148
106
Thanks for the info.

I haven't noticed anything weird with my i7-860 and i5-8600k systems. Both patched, the second one more properly with microcode updated bios etc.

I will have my Sandy 2500k up and running some time next week I believe, so I will report back.


Maybe because not all silicone created equal ? Maybe it's affecting several batch ?

And since it was reproduced in Intel lab then it was real deal, just need to wait what CPU batch that's get affected.

So applying the patch is like a gamble, if you win it will be like before and if you loose your system will not be stable.
 

coercitiv

Diamond Member
Jan 24, 2014
6,400
12,858
136
I haven't noticed anything weird with my i7-860 and i5-8600k systems. Both patched, the second one more properly with microcode updated bios etc.

I will have my Sandy 2500k up and running some time next week I believe, so I will report back.
It must be low enough for the problem to go unseen through initial testing.
 

bryanW1995

Lifer
May 22, 2007
11,144
32
91
Ah the only time I ever heard it was watching this movie called Millennium. It's not a great movie but I liked that quote at the end.

Churchill actually won a Nobel Prize for Literature for that book. It's really a humongous serious though, like 4000 ++ pages spread out over 6 volumes.

https://www.amazon.com/Second-World...ywords=the+second+world+war+winston+churchill

If you end up buying, I would recommend against the kindle edition...there are a ton of maps/etc that really add a ton to the story, and the kindle edition (at least a few years ago when I bought it) had a bad rap for not properly displaying everything.
 
Last edited:

coercitiv

Diamond Member
Jan 24, 2014
6,400
12,858
136
Churchill actually won a Nobel Prize for Literature for that book. It's really a humongous serious though, like 4000 ++ pages spread out over 6 volumes.

https://www.amazon.com/Second-World...ywords=the+second+world+war+winston+churchill

If you end up buying, I would recommend against the kindle edition...there are a ton of maps/etc that really add a ton to the story, and the kindle edition (at least a few years ago when I bought it) had a bad rap for not properly displaying everything.
And this folks is exactly how reading memory contents from another process looks like, the best real life example for these vulnerabilities
 

Stuka87

Diamond Member
Dec 10, 2010
6,240
2,559
136
Maybe because not all silicone created equal ? Maybe it's affecting several batch ?

And since it was reproduced in Intel lab then it was real deal, just need to wait what CPU batch that's get affected.

So applying the patch is like a gamble, if you win it will be like before and if you loose your system will not be stable.

I think you mean silicon? Although I would agree not all silicone is equal. It looks better on some than others

Anyway, back on topic. This whole thing has been such a mess. Go through, patch machines, then find out patch is bad, so Intel pulls it back. We still have servers running x8 and x9 chipsets, and there are no patches for them yet. Although the manufacturer claims they are coming.
 
Reactions: IEC and coercitiv

cytg111

Lifer
Mar 17, 2008
23,551
13,116
136
Sniping here, havent read all of the preceding 46 pages!
Question : Is the next iteration from intel (cannonlake?) shielded from this bug - as in no performance penality?
 
sale-70-410-exam    | Exam-200-125-pdf    | we-sale-70-410-exam    | hot-sale-70-410-exam    | Latest-exam-700-603-Dumps    | Dumps-98-363-exams-date    | Certs-200-125-date    | Dumps-300-075-exams-date    | hot-sale-book-C8010-726-book    | Hot-Sale-200-310-Exam    | Exam-Description-200-310-dumps?    | hot-sale-book-200-125-book    | Latest-Updated-300-209-Exam    | Dumps-210-260-exams-date    | Download-200-125-Exam-PDF    | Exam-Description-300-101-dumps    | Certs-300-101-date    | Hot-Sale-300-075-Exam    | Latest-exam-200-125-Dumps    | Exam-Description-200-125-dumps    | Latest-Updated-300-075-Exam    | hot-sale-book-210-260-book    | Dumps-200-901-exams-date    | Certs-200-901-date    | Latest-exam-1Z0-062-Dumps    | Hot-Sale-1Z0-062-Exam    | Certs-CSSLP-date    | 100%-Pass-70-383-Exams    | Latest-JN0-360-real-exam-questions    | 100%-Pass-4A0-100-Real-Exam-Questions    | Dumps-300-135-exams-date    | Passed-200-105-Tech-Exams    | Latest-Updated-200-310-Exam    | Download-300-070-Exam-PDF    | Hot-Sale-JN0-360-Exam    | 100%-Pass-JN0-360-Exams    | 100%-Pass-JN0-360-Real-Exam-Questions    | Dumps-JN0-360-exams-date    | Exam-Description-1Z0-876-dumps    | Latest-exam-1Z0-876-Dumps    | Dumps-HPE0-Y53-exams-date    | 2017-Latest-HPE0-Y53-Exam    | 100%-Pass-HPE0-Y53-Real-Exam-Questions    | Pass-4A0-100-Exam    | Latest-4A0-100-Questions    | Dumps-98-365-exams-date    | 2017-Latest-98-365-Exam    | 100%-Pass-VCS-254-Exams    | 2017-Latest-VCS-273-Exam    | Dumps-200-355-exams-date    | 2017-Latest-300-320-Exam    | Pass-300-101-Exam    | 100%-Pass-300-115-Exams    |
http://www.portvapes.co.uk/    | http://www.portvapes.co.uk/    |