Chrome is Using 10-13% More RAM to Fight Spectre (pcworld.com)
An anonymous reader quotes PCWorld:
The critical Meltdown and Spectre bugs baked deep into modern computer processors will have ramifications on the entire industry for years to come, and Chrome just became collateral damage. Google 67 enabled "Site Isolation" Spectre protection for most users, and the browser now uses 10 to 13 percent more RAM due to how the fix behaves.
"Site Isolation does cause Chrome to create more renderer processes, which comes with performance tradeoffs," Googleâ(TM)s Charlie Reis says. "On the plus side, each renderer process is smaller, shorter-lived, and has less contention internally, but there is about a 10-13% total memory overhead in real workloads due to the larger number of processes. Our team continues to work hard to optimize this behavior to keep Chrome both fast and secure." It's a significant performance hit, especially for a browser battling a reputation for being a memory hog, but a worthwhile one nonetheless.
Chrome's Spectre-blocking site isolation "is now enabled by default for 99 percent of Chrome users on all platforms."
"Site Isolation does cause Chrome to create more renderer processes, which comes with performance tradeoffs," Googleâ(TM)s Charlie Reis says. "On the plus side, each renderer process is smaller, shorter-lived, and has less contention internally, but there is about a 10-13% total memory overhead in real workloads due to the larger number of processes. Our team continues to work hard to optimize this behavior to keep Chrome both fast and secure." It's a significant performance hit, especially for a browser battling a reputation for being a memory hog, but a worthwhile one nonetheless.
Chrome's Spectre-blocking site isolation "is now enabled by default for 99 percent of Chrome users on all platforms."
design fix all this?
No more slow CPU, no more extra RAM used, no more OS software to protect from CPU security flaws. Back to fast and secure CPU design work.
Anyone have a design time line for when this will all be fixed in the CPU again?
Domestic spying is now "Benign Information Gathering"
When the RAM is set in a factory and the device used is sold with a set amount?
The OS, other consumer applications and browser then all start using more RAM to keep the consumer safe.
How many times does 10% start to add up to a lot of RAM that was not used before?
Domestic spying is now "Benign Information Gathering"
This is only a problem for intel cpus.
Supposedly, the biggest vulnerabilities are from cloud providers due to their extensive use of virtualization in their environs.
However, I've never seen a real server that surfs the web using any browser. Stupidity is rampant, paranoia rules and perspective has completely left the building when it comes to Spectre/Meltdown.
The most difficult "vulnerability" to leverage known to mankind has everyone scurrying like mad while basic security - allowing the Equifax breach, say - gets a passing nod. Well done, guys!
[insert your fave js blocker here] will reduce the footprint by MUCH more than that.
Except if Chrome takes already 90%
Slashdot, fix the reply notifications... You won't get away with it...
Who cares if you're running 32+ GB of RAM. Sucks if you're stuck on that modern new Macbook that caps out at 16 GB...
A) That’s like responding to a car analogy with “who cares if you own a private jet”? Suggesting that people should have 32GB of RAM to run a browser is preposterous.
B) The new MacBook Pros are configurable up to 32GB of RAM...
Well spending the big bucks on an Apple would definitely reduce your chances of being able to afford to upgrade.
16 GB is quite a lot, and while Chrome is greedy it doesn't take that much (less than 500MB with quite a few tabs opened). The 10-13% applies to Chrome memory, not the system memory..
Slashdot, fix the reply notifications... You won't get away with it...
Or using old computers like mine with 2 GB & 6 GB of RAM. :(
Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
Is this related to TFA, or maybe you plan to watch it in Chrome, and you wonder if your RAM is enough?
Slashdot, fix the reply notifications... You won't get away with it...
Google developers are among the best in the world. A browser is a very complex program, and some algorithms might gain time-complexity by allowing more space-complexity. This is probably what happens here, Chrome is still performant, but in order to keep the same speed it had to sacrifice some 10-13% memory more.
Slashdot, fix the reply notifications... You won't get away with it...
Well, fortunately Chrome didn't use that much memory to begin with.
Oh, wait...
I guess porn leads the way in cutting edge innovation for more than just the obvious reason :-/
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
Why do you want a fast infection and spying vector?
"His name was James Damore."
Every click goes to Google. No thanks
Which Universe do you live in? If I start Chrome with no tabs open I get 7 processes.
One of those processes is using 1.5Gb and has 38 threads.
That's without opening any web pages, just an empty tab. No, I don't have any extensions installed. None.
No sig today...
Now that you've wished the atrocities of the Holocaust on another person, I can NOT SEE myself promoting your Hosts File Engine anymore.
DEY
Well spending the big bucks on an Apple would definitely reduce your chances of being able to afford to upgrade.
Pssst, Hey mister - that's a nice non-sequitur ya got there!
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Who cares if you're running 32+ GB of RAM. Sucks if you're stuck on that modern new Macbook that caps out at 16 GB...
A) That’s like responding to a car analogy with “who cares if you own a private jet”? Suggesting that people should have 32GB of RAM to run a browser is preposterous.
B) The new MacBook Pros are configurable up to 32GB of RAM...
Hold on, hold on - let the guy make some non-sequitur's about systemd and Russian hacking maybe before you squanch him. Its the only way he can participate.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Which Universe do you live in? If I start Chrome with no tabs open I get 7 processes.
One of those processes is using 1.5Gb and has 38 threads.
That's without opening any web pages, just an empty tab. No, I don't have any extensions installed. None.
Your answer is in your last two sentences.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
Because the alternative is native applications, which are specific to one operating system. If you have a Mac, you see an application that looks interesting to you, only to have to turn away because it's Windows-only. Or if you have anything but a Mac, you see an application that looks interesting to you, only to have to turn away because it's Mac-only. Do you want to have to return to that environment, where you have to buy multiple computers and operating system licenses just to run all the applications in your work flow?
Let's say an application developer owns a Mac. He can choose to develop an application as a Mac application or as a web application. If he develops the application as a web application, then any user with a web browser can run it. But if he develops the application as a Mac application, then only those users whose computer happens to be a Mac can run it. Would you prefer to have to buy a Mac to run one application and buy a Windows PC[1] to run a second application?
[1] Yes, it's possible to virtualize Windows on a Mac, but only if you thought ahead and paid extra to order your Mac with enough RAM to run both macOS and Windows.
Just close all the excess tabs. There's no reason to keep 50 of them open at the same time.
Have you not updated in like 15 years?
I have not updated in "forever" and I have 16GB.
I think "forever" is probably around 5 years now.
+----------------- | What is the question!
Google developers are among the best in the world.
[citation needed]
I remember when Google used to be good at stuff. Lately, though, their developers seem to spend most of their time ruining interfaces for products people have been using for years...
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Systemd made the russian trolls hack the election!! Why are you so blind to reality?!?!!!11!onetwotilde
"The critical Meltdown and Spectre bugs baked deep into modern computer processors"
:]
That should be, the critical Meltdown and Spectre bugs baked deep into Intel x86 architecture processors. And such bugs wouldn't so serious if we didn't run our computing on a monoculture. As in nature, when a bug comes it doesn't wipe out a whole population.
"Spectre lets attackers access protected information in your PC’s kernel memory, potentially revealing sensitive details like passwords, cryptographic keys, personal photos, or anything else you’ve used on your computer"
It's for razor sharp analysis like that, that I come here for
Browsers should be using different processes for different websites anyway, as a general security measure, and I believe they have been aiming to do that already. Since Spectre only allows reading memory within the same process, I don't understand the panic here (though I guess it's different for virtual machines).
We've already had countless issues where developers didn't sanitize their inputs, so a malicious piece of data could do something nasty; crucially, we didn't need Spectre for that. Meltdown is a wholly different beast, but I guess Intel needs to keep up the Spectre panic for AMD.
Escher was the first MC and Giger invented the HR department.
My old PCs are about a decade old now. :)
Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
So actually even though the memory footprint is larger, using separate processes also makes chrome more swap-friendly, which means the kernel can page-in/page-out the tabs more efficiently. The result seems, at least for me, to be a smoother ride when I have a lot of tabs open.
Of course, swap space should always be configured on a SSD.
I always enable the site isolation option. Its nice to see google finally making it the default.
-Matt
If you want to turn your browser into a glorified version of Mosaic, be my guest. Some of us actually want to view the web of 2018, not the web of 1995.
The world's burning. Moped Jesus spotted on I50. Details at 11.
The browser team has to be good (too complex to let web devs in charge).
Slashdot, fix the reply notifications... You won't get away with it...
How much has your system? Chrome reserves some space if it's not used. Try to load a load of crap aside of Chrome, and you'll see (or do a quick malloc(big))
Slashdot, fix the reply notifications... You won't get away with it...
They could write their app in java
Since when is Java less bad than JavaScript?
or some desktop script language like python
Because far fewer users of Windows applications have Python installed than have a web browser installed, either each end user would have to locate, download, and install the Python interpreter, or the developer would need to convert the script to a stand-alone application by bundling a copy of the interpreter with the application. Which of these two were you anticipating?
When I tried to convert a small Python+Pygame application that I developed to a stand-alone executable, it was 21 MB. In addition, Windows SmartScreen produces the "Windows protected your PC / Don't run" interstitial if not a lot of people have already downloaded and run the executable. What fraction of users would consider this an acceptable tradeoff?
Can Lazarus cross-compile, or do you need to own a sufficiently recent Mac in order to ship for Mac?
Systemd made the russian trolls hack the election!! Why are you so blind to reality?!?!!!11!onetwotilde
Using Macs.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
In addition, compiled, native C/C++ runs a lot better than interpreted javascript garbage
How efficiently does a program written in C or C++ and compiled to x86-64 native code run on an ARM device or vice versa?
running inside what's basically another framework that sits on top of the OS.
In order to make a single program written in C++ run on Windows, macOS, and X11/Linux, you need something like Qt, which is also "another framework that sits on top of the OS."
Spectre is there for all processors with more than the most trivial support for speculative execution. Yes that includes all modern computer processors.
Meltdown is limited to Intel, some IBM designs and some ARM designs.
Seriously, who are these new Bond films targeting? 3/10.
Sorry, but I have more RAM than battery life. Why do I bring this up? Because the only real alternative Firefox reduces my battery life by about 30% when I do the exact same things on it as I would on Chrome. And Firefox doesn't even have site isolation yet.
I really want to use Firefox and occassionally fire up the latest version. But I cannot justify using it , because it is trivial to buy a laptop with 32 GB RAM to overcome the resource hungriness. Battery life is not so easy to obtain.
Entia non sunt multiplicanda praeter necessitatem.
I miss the old days web sites were simple and fast that were designed for dial-up modems. ;)
Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
show me proof Ultrasparc has it.
(No, don't buy an Ultarsparc machine, for anything)
Buy a device that is expandable. That means a regular sized DESKTOP. If you buy a super thin device, that's YOUR fault for being trendy.
FTFY. Laptops are compromise devices.
Suggesting that people should have 32GB of RAM to run a browser is preposterous
Indeed. But don't let the hyperbole get in the way of a solid argument. If you're the person likely affected by this 10% then you're a person not really concerned with your computer speed in the first place or you wouldn't be running a $300 POS with 2GB of RAM.
In this case POS can mean Piece of Shit or Point of Sale terminal but I actually think the latter may have more RAM than that in it these days.
Having to download and run two installers to run a single application causes a greater fraction of abandoned installations than having to download and run only one installer. Electron applications require one; Java applications require two: JRE and the application itself. Web applications require zero.
My laptop is expandable. I've got 64GB of RAM in it and I'm thinking about upgrading my GTX 1060 MXM to a GTX 1070 or 1080.
That's great, but I didn't say laptops can't be upgraded. I said that they're compromise devices
This means that for whatever feature you gain, something other metric is worse off
Want a 17" screen? Comes with a larger and heavier laptop
Want a high end gaming machine? Worse battery life
Want a higher capacity battery? The upgraded battery adds more weight
Want something smaller and lighter? Cramped keyboard, typically paired with weaker hardware overall
Want to upgrade anything? Pay more than you would for desktop upgrades