Message from @Sad

Discord ID: 644529294340653075


2019-11-14 13:25:14 UTC  

where ucode is applied but software is not update to match ?(or apt-get repo aint updated) ?

2019-11-14 13:25:18 UTC  

what do you mean normal use case

2019-11-14 13:25:21 UTC  

firefox has autoupdater

2019-11-14 13:25:39 UTC  

it'll be updated soon enough

2019-11-14 13:25:46 UTC  

windows 10 will get it updated too

2019-11-14 13:26:09 UTC  

yeah soon enough few days of slow speeds nobody notices :D

2019-11-14 13:26:20 UTC  

on a consumer level, there wont be anything much that exploit these vulnerabilities tbh

2019-11-14 13:26:21 UTC  

no slow speeds until the microcode update rolls out

2019-11-14 13:26:32 UTC  

true enough ~

2019-11-14 13:26:56 UTC  

however on the server cloud level, these vulnerabilities allows one to steal data

2019-11-14 13:27:01 UTC  

JCC errata is only fixing "undefined behaviour" atm

2019-11-14 13:27:05 UTC  

no published vuln

2019-11-14 13:27:11 UTC  

and not that firefox is the place where the speed is needed that much anyway

2019-11-14 13:27:12 UTC  

it's like the FDIV bug

2019-11-14 13:28:11 UTC  

https://cdn.discordapp.com/attachments/527849695020580866/644529011032195072/unknown.png

2019-11-14 13:28:39 UTC  

gaming wont be hit by CPU performance since it's more GPU now

2019-11-14 13:28:51 UTC  

quality: low

https://cdn.discordapp.com/attachments/527849695020580866/644529178565410826/unknown.png

2019-11-14 13:28:54 UTC  

even when you try to make it cpu bound

2019-11-14 13:29:18 UTC  

are Intel shills in full force already

2019-11-14 13:31:46 UTC  

Is this gonna be like the LAST time this happened, where everyone insisted intel users would take like a 25% performance hit, but in reality it was negligible except in very specific, niche uses?

2019-11-14 13:31:51 UTC  

Intel users BTFO indeed

2019-11-14 13:32:27 UTC  

you almost seem like a sane person matt

2019-11-14 13:33:07 UTC  

None of these affect in games anyway

2019-11-14 13:33:18 UTC  

reason to care about these: none

2019-11-14 13:33:22 UTC  

performance impacts from the JCC errata are a slightly bigger deal than earlier patches

2019-11-14 13:33:42 UTC  

they impact user space programs, where as previous patches only affected the kernel and related transitions

2019-11-14 13:34:04 UTC  

i mean its large enough performance hit on those "niche cases" that people are more and more turning mitigation off on all plantforms

2019-11-14 13:34:08 UTC  

"to get mah speeds"

2019-11-14 13:34:14 UTC  

what is quite dangerous path

2019-11-14 13:34:19 UTC  

those niche cases can safely turn off mitigations

2019-11-14 13:34:23 UTC  

as long as you don't run untrusted code

2019-11-14 13:34:55 UTC  

so ..browser

2019-11-14 13:35:13 UTC  

yes because the average person that runs a database and a browser on the same hardware

2019-11-14 13:35:22 UTC  

<:pepelaugh:615974280706129941>

2019-11-14 13:35:32 UTC  

or just you know browser when it comes to those older intel issues

2019-11-14 13:35:41 UTC  

the fucking POC was delivered in javascript

2019-11-14 13:36:08 UTC  

but no, even if you run a browser you can turn off mitigations without huge risk

2019-11-14 13:36:10 UTC  

"untrusted code who even runs that"

2019-11-14 13:36:14 UTC  

because the browsers were patched