Slashdot Mirror
Chrome is Using 10-13% More RAM to Fight Spectre (pcworld.com)
An anonymous reader quotes PCWorld:
The critical Meltdown and Spectre bugs baked deep into modern computer processors will have ramifications on the entire industry for years to come, and Chrome just became collateral damage. Google 67 enabled "Site Isolation" Spectre protection for most users, and the browser now uses 10 to 13 percent more RAM due to how the fix behaves.
"Site Isolation does cause Chrome to create more renderer processes, which comes with performance tradeoffs," Googleâ(TM)s Charlie Reis says. "On the plus side, each renderer process is smaller, shorter-lived, and has less contention internally, but there is about a 10-13% total memory overhead in real workloads due to the larger number of processes. Our team continues to work hard to optimize this behavior to keep Chrome both fast and secure." It's a significant performance hit, especially for a browser battling a reputation for being a memory hog, but a worthwhile one nonetheless.
Chrome's Spectre-blocking site isolation "is now enabled by default for 99 percent of Chrome users on all platforms."
"Site Isolation does cause Chrome to create more renderer processes, which comes with performance tradeoffs," Googleâ(TM)s Charlie Reis says. "On the plus side, each renderer process is smaller, shorter-lived, and has less contention internally, but there is about a 10-13% total memory overhead in real workloads due to the larger number of processes. Our team continues to work hard to optimize this behavior to keep Chrome both fast and secure." It's a significant performance hit, especially for a browser battling a reputation for being a memory hog, but a worthwhile one nonetheless.
Chrome's Spectre-blocking site isolation "is now enabled by default for 99 percent of Chrome users on all platforms."
creimer is trying to out 10-13% more length on his cock. Then it might actually reach two-inches in length when erect.
design fix all this?
No more slow CPU, no more extra RAM used, no more OS software to protect from CPU security flaws. Back to fast and secure CPU design work.
Anyone have a design time line for when this will all be fixed in the CPU again?
Domestic spying is now "Benign Information Gathering"
Who cares if you're running 32+ GB of RAM. Sucks if you're stuck on that modern new Macbook that caps out at 16 GB...
Browsing at +1 - no ACs, I ignore their posts. So refreshing!
This is only a problem for intel cpus.
Supposedly, the biggest vulnerabilities are from cloud providers due to their extensive use of virtualization in their environs.
However, I've never seen a real server that surfs the web using any browser. Stupidity is rampant, paranoia rules and perspective has completely left the building when it comes to Spectre/Meltdown.
The most difficult "vulnerability" to leverage known to mankind has everyone scurrying like mad while basic security - allowing the Equifax breach, say - gets a passing nod. Well done, guys!
I enabled Site Isolation a long time ago because a large part of the reason I switched to Chrome was precisely that it was supposed to have per-page processes, separate render process, etc to mitigate the risk of attack and lesson the impact of a crash (which might be part of the attack mitigation). 10-13% more RAM is nothing if means I can leave dozens of tabs open and one tab crashing or hanging only means killing that one tab.
But, yea, let's spring up Spectre specifically. Does this even protect against the Spectre variants?
[insert your fave js blocker here] will reduce the footprint by MUCH more than that.
Or is this the result of some sort of spectre?
http://staticimg.stantondaily....
Who cares if you're running 32+ GB of RAM. Sucks if you're stuck on that modern new Macbook that caps out at 16 GB...
The huge percentage of people who can't afford to replace their PC every couple of years.
How the heck does creating more processes each containing less data (ie, from a single "site" as they put it) have any effect in mitigating a flaw which is used to either (a) read information from other processes or (b) read information from kernel memory?
It may provide some protection against the javascript kiddie-malware which can read from its own process, but it certainly can not have the effect claimed in being any assistance whatsoever in mitigating Spectre or Meltdown. The most effective mitigation strategy for those particular vulnerabilities is to do away with the "lets all pretend we have process and kernel isolation" altogether and run as much as possible in a single monolithic process.
I knew those so-called Google Chrome folks were stupid assholes, and this just confirms it ...
1-0!!
Is this related to TFA, or maybe you plan to watch it in Chrome, and you wonder if your RAM is enough?
Slashdot, fix the reply notifications... You won't get away with it...
See subject & APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download).
Yields more security/speed/reliability/anonymity vs. any SINGLE solution (99% of threats = hostnames vs. IP address that most firewalls use) more efficiently/FASTER + NATIVELY 4 less!
(Vs. "Bolt on 'MoAr' illogic-logic" competitors slowing you, hosts speed you up 2 ways (adblocks + hardcodes u spend most time @) vs. competition loaded w/ bugs (DNS/AntiVir) + their overheads (messagepass ('souled-out' to advertiser addons) + filtering drivers) & their complexity leads to exploitation).
* ONLY 1 of its kind in GUI on Linux/BSD!
(Much better vs. Windows model in speed & efficiency + new "merge" feature)
APK
P.S.=> I use Firefox on Linux & it works like a DREAM w/ hosts. You rotten bastards can benefit from my greatness as God's gift to you... apk
Your software is just fine - well written, functional... I'm going to continue using the Host File Engine by mmell February 17, 2017
Your premise that hostfiles are a good way to deal with advertising and malvertising is quite valid - by JazzLad April 20, 2016
his hosts program is actually pretty good by xenotransplant August 10 2015
his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg September 25 2015
I like your host file system by Karmashock September 09 2015
that APK guy, I use his host file by rogoshen1 Tuesday March 03, 2015
I personally use a HOSTS file blocker produced from a genius called APK by 110010001000 October 27 2017
* Best part = Linux 64-bit model's faster/more efficient (2x work in 1/2 the time)
APK
P.S.=> For a faster/safer/more reliable internet. Even you rotten bastards can benefit from my greatness. God's gift to Slashdot will NEVER be silenced... apk
See subject: Don't worry - the "Golden Calf" of your shekels dries up! I give folks what they want vs. your machinations, lol & THUS I always will win... & you KNOW it.
* Heck - you're PROVING IT via your EASILY NULLIFIED "Bitch Tactics 'efforts'" which I easily prove are you in seconds by posting your PUNY threats... lmao!
(You really ARE too STUPID to live... time to FIRE UP THE OVENS again & Zyklon B showers).
Ever see Dr, Strange? Keep it up, that's EXACTLY what I want "JudenMammu" - you're MY prisoner.
LASTLY Don't speak for "Everyone" JUDE - you're the HATED minority ALL THRU HISTORY only fooling YOURSELVES, lol - self deluded morons & thieves.
APK
P.S.=> Dance little Jude, dance - to MY TUNE as I see you lose all that STOLEN GOLD/SHEKELS, lol - slowly (oh, SO slowly, painfully, as your kind fell into your OWN trap of debt, lol)... apk
Well, fortunately Chrome didn't use that much memory to begin with.
Oh, wait...
I guess porn leads the way in cutting edge innovation for more than just the obvious reason :-/
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
In this days porn sites are more clean and optimized for heavy traffic than others with great pretensions.
Every click goes to Google. No thanks
In real football you can only have a score of 1 to anything if the other team doesn't show up/forfeits. A typical score in real football is like 48 to 35. A stomping is something like 35 to 3. You know, manly scores. Maybe ladies are playing over there in CCCP?
Honestly 95% of JavaScriptâ(TM)s purpose on the web is track, spy, exploit and spam you with advertisements. Ad devs are douche nozzles and have ruined the web. Just say fuck it to JavaScript, the most abused language in the world.
Now that you've wished the atrocities of the Holocaust on another person, I can NOT SEE myself promoting your Hosts File Engine anymore.
DEY
The record is 149-0, apparently. I couldn't find any 48-35 matches.
I thought the war against Spectre ended when Bond killed Blofeld
"The critical Meltdown and Spectre bugs baked deep into modern computer processors"
:]
That should be, the critical Meltdown and Spectre bugs baked deep into Intel x86 architecture processors. And such bugs wouldn't so serious if we didn't run our computing on a monoculture. As in nature, when a bug comes it doesn't wipe out a whole population.
"Spectre lets attackers access protected information in your PC’s kernel memory, potentially revealing sensitive details like passwords, cryptographic keys, personal photos, or anything else you’ve used on your computer"
It's for razor sharp analysis like that, that I come here for
You impersonating me proves you wish you were me & imitation is the sincerest form of flattery - but you = poor imitation.
* You "threaten"you'd impersonate me as you STALKED ME via UNIDENTIFIABLE anonymous trollings of me too https://yro.slashdot.org/comme...
APK
P.S.=> Grow up & do something useful w/ yourself loser... apk
You impersonating me proves you wish you were me & imitation is the sincerest form of flattery - but you = poor imitation!
* You "threaten"you'd impersonate me as you STALKED ME via UNIDENTIFIABLE anonymous trollings of me too https://yro.slashdot.org/comme...
APK
P.S.=> Grow up & do something useful w/ yourself loser... apk
You impersonating me proves you wish you were me & imitation is the sincerest form of flattery - but you = poor imitation.
* You "threaten"you'd impersonate me as you STALKED ME via UNIDENTIFIABLE anonymous trollings of me too https://yro.slashdot.org/comme...
APK
P.S.=> Grow up & do something useful w/ yourself loser... apk
Detect, not Mitigate.
Buy a device that is expandable. That means a regular sized laptop. If you buy a super thin device, that's YOUR fault for being trendy.
See subject & via APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download).
Yields more security/speed/reliability/anonymity vs. any SINGLE solution (99% of threats use hostnames vs. IP addresses most firewalls use) more efficiently/FASTER + NATIVELY 4 less!
(Vs. "Bolt on 'MoAr' illogic-logic" competitors slowing you, hosts speed you up 2 ways (adblocks + hardcodes u spend most time @) vs. competition loaded w/ security bugs (DNS/AntiVir) + overheads (messagepass ('souled-out' to advertiser addons) + filtering drivers) & their complexity leads to exploitation).
* ONLY 1 of its kind in GUI on Linux!
Better vs. Windows model in speed/efficiency/merge.
APK
P.S.=> Best program of its kind bar-none & better vs. browser addons + other competitors (full of bugs, excess resource use, slowdown & complexity)... apk
Browsers should be using different processes for different websites anyway, as a general security measure, and I believe they have been aiming to do that already. Since Spectre only allows reading memory within the same process, I don't understand the panic here (though I guess it's different for virtual machines).
We've already had countless issues where developers didn't sanitize their inputs, so a malicious piece of data could do something nasty; crucially, we didn't need Spectre for that. Meltdown is a wholly different beast, but I guess Intel needs to keep up the Spectre panic for AMD.
Escher was the first MC and Giger invented the HR department.
Your software is just fine - well written, functional... I'm going to continue using the Host File Engine by mmell February 17, 2017
Your premise that hostfiles are a good way to deal with advertising and malvertising is quite valid - by JazzLad April 20, 2016
his hosts program is actually pretty good by xenotransplant August 10 2015
his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg September 25 2015
I like your host file system by Karmashock September 09 2015
that APK guy, I use his host file by rogoshen1 Tuesday March 03, 2015
I personally use a HOSTS file blocker produced from a genius called APK by 110010001000 October 27 2017
* Best part = Linux 64-bit model's faster/more efficient (2x work & 1/2 the time)
APK
P.S.=> For a faster/safer/more reliable internet... apk
FreePascal & Lazarus IDE let me port APK Hosts File Engine https://tech.slashdot.org/comm... Win32/64, Linux 64-bit (both released), BSD & MacOS X (former in testing & basis of latter imo, a matter of minutes once tests are done)...
* The SAME can be achieved via C/C++ & even REALBasic (& other lesser performing languages) is possible for a SINGLE CODEBASE multiplatform via porting as I did cross-platform.
APK
P.S.=> The days you speak of ala COM/DCOM/CORBA are OVER (vs. webservices competing w/ them) - True "stand-alone" SINGLE executables (dependent ONLY on OS or IP Stack API) are possible - your PROOF is above as a single example thereof... apk
the chance someone uses a cpu flaw to extract data off your computer.
vs
google hoovering everything you do to add to its massive databases that make spy agencies drool.
So it'll use like a quarter of the ram that Firefox uses.
So actually even though the memory footprint is larger, using separate processes also makes chrome more swap-friendly, which means the kernel can page-in/page-out the tabs more efficiently. The result seems, at least for me, to be a smoother ride when I have a lot of tabs open.
Of course, swap space should always be configured on a SSD.
I always enable the site isolation option. Its nice to see google finally making it the default.
-Matt
Why don't I see a seperate build?
I suspect these kinds of "fixes" will have no distintion between platforms, afterall can't have the masses beliving anything but Intel Marketing (TM).
Capatcha: portable. Creepy Slashdot.. creepy.
Spectre is there for all processors with more than the most trivial support for speculative execution. Yes that includes all modern computer processors.
Meltdown is limited to Intel, some IBM designs and some ARM designs.
Seriously, who are these new Bond films targeting? 3/10.
Sorry, but I have more RAM than battery life. Why do I bring this up? Because the only real alternative Firefox reduces my battery life by about 30% when I do the exact same things on it as I would on Chrome. And Firefox doesn't even have site isolation yet.
I really want to use Firefox and occassionally fire up the latest version. But I cannot justify using it , because it is trivial to buy a laptop with 32 GB RAM to overcome the resource hungriness. Battery life is not so easy to obtain.
Entia non sunt multiplicanda praeter necessitatem.
WORKED FINE Win64-> Linux (I wrote it so it did) -> BSD. The person handling it could be NO FINER than my relative recompiling on OS X (all it will take).
* "Savoir Faire, is ... EVERYWHERE!"
(FreePascal 3.0.4 & Lazarus 1.0.4 motto = "Write once, RUN ANYWHERE..." & I am LIVING proof thereof...)
APK
P.S=> It's real/true - I can DO things like that w/ ease - a whim... apk
show me proof Ultrasparc has it.
(No, don't buy an Ultarsparc machine, for anything)
I am APK the great "LORD of HOSTS", a.k.a. AlecStaar or Alexander Peter Kowalski.
I am the godlike creator of various GUI front-ends for other people's configuration files.
Calling people ne'er-do-wells or Jealous JOWIEs is how I think I win every argument
When people state the truth about me I get really mad and accuse them of projecting which is something I do all the time.
Don't call me out on anything unless you are willing to prove you too can write some strings to a file programmatically
Spamming and being a general pain in the ass is what I do
Listen as I relive my glory days of being a college athlete in the early 80s
Bask in my greatness as I can do a ping as a non root user.
Watch as I whine about my work being flagged as malware by anti-virus software.
Witness my descent into madness
APK
See subject: Your POOR imitation of myself (imitation's the sincerest form of flattery) proves that you WISH you were me...
APK
P.S.=> ... & you KNOW it... apk
Having to download and run two installers to run a single application causes a greater fraction of abandoned installations than having to download and run only one installer. Electron applications require one; Java applications require two: JRE and the application itself. Web applications require zero.
JavaScript is webscale: https://m.youtube.com/watch?v=b2F-DItXtZs
JavaScript is the secret ingredient in the web scale sauce