Intel Says Chip-Security Fixes Leave PCs No More Than 10% Slower (axios.com)
Intel trying to defuse concern that fixes to widespread chip security vulnerabilities will slow computers, released test results late Wednesday showing that personal computers won't be affected much and promised more information on servers. From a report: The chipmaker published a table of data showing that older processors handled typical tasks 10 percent slower at most, after being updated with security patches. The information covered three generations of processors, going back to 2015, running Microsoft's Windows 10 and Windows 7 computer operating systems. Further reporting: Intel, Microsoft offer differing views on impact of chip flaw
I need to hear from people who became experts in CPU design just last week.
Intel was knowingly breaking security to make their crap seem faster.
So, it's not me. I installed the Mac OSX update last night and my Mini is a little bit sluggish. I
Put into context, my US state's sales tax was 5% and it went up to 6% a few years ago. Everyone was pissed by a 1% change (and I still think about it when I make some purchases based on how it increases the price).
So 10% slower for "typical" tasks seems like our computers had a minor stroke. There should be a discount on future Intel chips based on owning a current one, but that won't happen.
These people lied about every aspect of each of these major vulnerabilities. 10% is whatever, that's bad but worse is that NOBODY CAN TRUST INTEL WHATSOEVER, and they are the market leader.
Their obfuscation of the meltdown issue is unreasonably bad management, and their CEO sold a ton of shares right as the company secretly found out a year ago? The combination is absolutely toxic.
Clean house or watch it burn.
According to their chart, he oldest CPU they tested is 2.5 years old. Giving that some more proactive businesses have a 3+ year retention rate on hardware, "older" is hardly the word i'd use.
...back no more than 10% of the money I've spent on fundamentally insecure Intel processors over the last couple of decades.
While I donâ(TM)t have specific numbers at hand, I would think that the majority of active computers with Intel CPUs contain CPUs that were released before 2015.
Intel should release a statement that would cover CPUs that have been released since 2010 (because itâ(TM)s a round number and would probably cover a good majority of system). Microsoftâ(TM)s statement seem to indicate a bigger penalty for older CPUs which Intelâ(TM)s does not cover.
I.e. the 6700K.
I.e. all the chips have PCID
It's a bit hazy when PCID and INVPCID became supported.
This says PCID was first supported in Westmere
https://www.realworldtech.com/...
Another long overdue improvement to the page tables is the Processor Context ID (PCID). The PCID is a field in each TLB entry that associates a given page to a process. Previously, Intel's TLB could only contain entries from a single process and whenever the CR3 register was written (e.g. a context switch), the TLB was flushed. The PCID lets pages from different processes safely inhabit the TLB together, so that CR3 writes no longer flush the TLB. Whenever a process tries to access a page in memory, the PCID is checked to determine whether the page is actually mapped into the process' address space; if the PCID does not match then a TLB miss occurred. This is very much analogous to Intel's VPID, which enables the TLB to contain pages from different virtual machines and avoid TLB flushes during VM transitions.
The LWN patch says
http://lkml.iu.edu/hypermail/l...
PCIDs are generally available on Sandybridge and newer CPUs. However,
the accompanying INVPCID instruction did not become available until
Haswell (the ones with "v4", or called fourth-generation Core). This
instruction allows non-current-PCID TLB entries to be flushed without
switching CR3 and global pages to be flushed without a double
MOV-to-CR4.
I.e. it'd be interesting to see what happens on a CPU old enough not to support enough of PCID/INVPCID to optimized KPTI.
The claims of >10% hits are all for these old CPUs.
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
Is 10 percent "at most" supposed to be reassuring?
This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
https://newsroom.intel.com/edi...
https://newsroom.intel.com/wp-...
i7 8700K Windows 10 SSD
SYSMark 2014 SE Responsiveness 88%
So even then it's a larger impact than 10%. On the latest processor. But the system used had their 600p SSD which is really slow. How about the 960 Pro or their Optane stuff?
As for what the responsiveness test actually test I don't know (may be possible to google that) but file-performance and virtualization may be worse.
There will be cases where the impact is beyond 10%, a 10% average would be pretty crappy. Mind you that you can get a B350 board and a Ryzen 5 1600 processor for about half the price of a Z370 board and an Intel i7 8700K.
If Intel is admitting a 10% slowdown then it must be much much larger. Because Intel and benchmarks don't live in reality.
I'll be asking for 10% of my money back from intel.
after the way, last week, that they put it about that the problems affected all chips from all manufacturers to the same degree. They showed themselves to have better skills at sophistry that chip design.
Then I guess I'm expecting at least 10% of the cost of the processor cost back as a refund.
Velociraptor = Distiraptor / Timeraptor
After an OSX update a real world compile of a project that takes around two minutes to complete, too almost exactly the same amount of time, or slightly faster... since compilation involves lots of small files and system calls I would expect it to be harder hit than most tasks. However because they had a partial Meltdown patch in around December, not sure if we would see much of an effect... no-one in December complained about slowdowns from the OSX update at that time though either.
I don't think things most people do will be that affected by the patch.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
A notorious liar who has time and time proven that he has no conscience, will not be believed. Period.
With Windows 7, this update didn't slow things down any more than any other update. The longer an OS is around, the slower it gets from updates.
Were I conspiracy theory minded, I'd conclude that Microsoft does that on purpose to force upgrades to new versions.
"Windows 10 isn't as good as 7!"
"Well, it's too much work to make 10 better, so let's make 7 worse!"
I was thinking, disable the ME and keep the 10% - and add extra security on top, by simply not having an ME available for the world to enter.
https://hardenedlinux.github.i...
What this world is coming to - is for you and me to decide.
I'm still not clear on if the slowdown is due to the per-OS workaround, or if Intel is talking about their eventual fix to the hardware/firmware problem causing the slowdown...TFA seems to indicate a "fix" to Windows OS' specifically, which would imply the per-OS workaround.
Anyone?
I understand there could be malicious browser-based javascript code that can exploit the vulnerability. Are there other common use-cases?
Would it be worthwhile to have the option to apply full "fix" or close the common use-cases?
On this machine (i5-5250U in an NUC5i5RYK) performance is fucking AWFUL after the Windows 7 patch and BIOS update. Webpages like YouTube peg a CPU core somehow. So does SSMS.
My main machine is fine, because it's so old (2600k) that there is no BIOS update available for my motherboard. Allegedly you can download the microcode patch and shove it in yourself if your odn't get an official BIOS release. But fuck it. I'll be upgrading to the next Ryzen revision in a couple of months, hopefully. But FUCK current RAM prices.
now it's 10%. Also, define "Personal Computer". My bro regularly runs 3-4 VMs in a virtual computer lab on his i7 while learning new tech or testing our scripts. And it's a 4th Gen i7 to boot.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
I'm covered in the dust of the leader. He favors me!
I am even dustier -- dustier than thou!
-- Sometimes you have to turn the lights off in order to see.
so....will Intel be sending back to customers 10% refund per CPU?
...what about the $15,000 servers I bought 6 months ago?
CPU cost $999 so $99.90 refund coming my way - sweet
Sounds to me like you could get faster performance by building Linux AMD blade servers for a heck of a lot less money and they would perform better.
At least, that's my takeaway.
-- Tigger warning: This post may contain tiggers! --
Refund 10% of my money
I don't think there is a small amount of Intel chippery prior to 2015 running around. I'm probably an outlier, but mine is from 2008, (c) 2007.
Slashdot: Playing Favorites Since 1997
just set the flag and get your speed back
Responsiveness
The Responsiveness scenario includes usage models such as application launches, application installation, web browsing with many tabs open, file copies photo manipulation, and multi-tasking.
SYSMark 2014 SE Responsiveness
8700K, 8650U, 7920HQ, 6700K: W10/SSD -- W7/SSD -- W7 HDD)
88% 86% 86% : 79% -- 89% -- 101%
So when are we customers going to get ten per cent of our money back?
I am sure that there are many other solipsists out there.
How does 10% slower jibe with Moore’s Law?
If one of my products turned out to do only 90% of advertised, I'd offer a rebate or return for credit (customer's choice). Maybe that's why I'm a small company, not a mega-corp.
The most likely outcome I see is a rebate/coupon towards the purchase of any system containing a new Intel CPU from any vendor where the dollar value of the rebate is tied to the age/sku of the old CPU, with no or soft requirements to return the old CPU
That rebate is extremely unlikely to cover more than the value of the CPU, what about the secondary cost of replacing the rest of the computer it was attached to. If it uses a different socket, or is soldered directly or more likely isn't even compatible anyway, then it has been rendered worthless. I don't buy a new computer every year, nor do I want to: consumer looses, Intel wins.
I assume that Intel will be offering their flawed processors for 10% LESS across the board?
...than their previous one would their press blurbs also state "It's only 10% faster"?
Right?
Even faster if you don't use rigged benchmarks and compilers!
Twinstiq, game news
Intel does this because Intel gets away with this.
Intel will continue doing this because Intel will continue getting away with it. Nothing you post, nor any vote you cast, nor any action you can take will change this.
The world is not a just place. It never has been.
Looks UP 1% to me. Way to go, Intel.
Obviously just one test does not mean a lot, but a full build of an application (especially a very large one) does make use of a lot of different system resources, so it's a pretty good indicator of general issues.
That article is really good because it does something I did not have time to do - try out something between 10.12 and 10.13 (I only measured the impact before and after the latest security patch on 10.13). So thanks for providing a link... it looks like system calls do indeed have large performance impacts, but that when you are talking about real cases (like compiling, as I did and they did also as a test) the real performance loss is under 10% - when there is any, and on some systems moving to High Sierra still has an overall gain on performance for some tasks from Sierra. Not all work people do on a computer will see an impact.
I'm also thinking over time we'll see more efforts put in to mitigate the speed losses, all OS makers are just being extra cautious to start with.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Even so, 10% loss is a loss we never expected to lose. I believe my older Hazwell desktop and a Broadwell chip in another PC are examples of more then 10% loss in performance. Yes, maybe my Kaby Lake laptop will have negligible losses in performance. But I guess it is what it is and I am not willing to forego security for 10%. But I may choose AMD or something else next time. This most likely will bring Intel down a notch or two.
This page over here, using actual benchmarking software before and after the Meltdown and Spectre patches, shows iPhone performance losses around 40% after applying the patches: https://melv1n.com/iphone-perf...
Given that most of the last week's media spiel has been saying that "ARM's CPUs are supposed to be largely unaffected by these things" I doubt Intel's CPUs would behave much differently, certainly not better and certainly not "only 10% impact at worst".
> going back to 2015
> older CPUs
A good CPU from 2015 (Haswell) is a pretty new CPU. High-end CPUs from 2012 (Ivy Bridge) are still perfectly capable, especially in laptops. If you don't need stuff like USB 3.0, you can easily end up today with a pretty beefy Ivy Bridge/Haswell laptop by just doing RAM and storage updates (and maybe WiFi). This is just a carefully designed PR piece to make the issue look less bad, nothing to see here.
fair, no?
Why no "false advertising" lawsuit to get this all cleaned-up?
I modded him up if that makes you feel better! There is Slashdot comment censorship against the holy Apple going on.
Does this mean the PVU for my intel chips will dip by 10% allowing me to use more processors, or newer processors without forking out more cash?
with higher SSD i/o load it can easily reach 50%, and on pre-Haswell or so CPUs it can also be more, well done. get an AMD today ;-)
https://www.computer.org/csdl/proceedings/sp/1995/7015/00/70150211.pdf
I hope those class actions tear Intel a butthole so big it bleeds.
Intel CEO decided to sell off shares after Intel were warned but before the public were told: https://www.bloomberg.com/news/articles/2018-01-09/u-s-senators-urge-government-to-probe-intel-ceo-s-share-sales
but when you are that rich laws don't apply yes???
Nice that they glossed over the 79% figure for win 10 on skylake with an SSD for the âresponsivenessâ(TM) benchmark. That does not seem to bode well for the user experience on such a platform.
I just spent a lot of money building a gaming rig, and overclocking it to get another 20% boost. Every bit matters in games. So, -10% is still huge to me. Intel should offer some compensation. Maybe not a whole new chip, but maybe at least a voucher of say $100 on a new CPU.
That's a shame as I'd really rather hoped for more than 10% of the costs of my Intel-based computer refunded.
Intel *will* be offering partial refund for fault goods, right?
Requiem for the American Dream
10% is significant for data centers.
Does anyone know if the "fixes" can be turned off if the computers are behind a firewall? I heard the fixes are done in the Linux kernel.
Okay, then give me a 10% refund on your defective product because this isn't what I paid for. I literally JUST GOT my Nvidia compensation check for their single lane 512MB block of GDDR5 that they pretended had full speed access.
I think MY security is being chipped away.
That doesn't matter! People pay good money for these PCs and should be entitled to a full speed machine, not a ten percent decrease in performance. If that's Intel's attitude, they won't last much longer in this market.
I charge forward recklessly, leaving chaos in my wake.
Agreed. My 2003 PC was 2.4 GHz, my 2008 PC was 2.4 GHz (dual core / 4 thread), and my 2013 PC was also 2.4 GHz (quad core / 8 thread). I'm due for an upgrade this year, but I'll probably put it off.
These are compiles on a laptop with an SSD (a bit older, but still). Pretty much all time is spent in the CPU on the build. It's around 700 something files to compile, so it does have a decent amount of data to fetch but most of the time does seem to be spent in the compiler... it may impact other tasks more but if compiler impact is negligible I'm pretty happy as that's most of my day-to-day load.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
So just refund everyone 10%, no big deal at all. They've just admitted that that amount is totally insignificant.
What's truly amazing is that AMD could come from so far behind to be light years ahead in both cost and performance. And have actually have a clue about security and engineering in general.
Within the past 15 years?
Ahahahahahaha.
Brought a pc already 6 years ago. The newest CPU's seem to be like 10% faster, but after those fixes, why do I need a new PC ?
or
Moore's Law says nothing about clock speeds, it's about transistor counts.
Some of the extra transistors in the next generation of CPU's will go toward fixing these flaws, instead of toward additional cores, or additional cache, or faster integrated graphics.
The software fixes that cause the 10% slowdown will then no longer be necessary.