5 ms·

Could be related to [1]? [1] https://news.ycombinator.com/item?id=16052451 https://news.ycombinator.com/item?id=16052451

endymi0n 9y ago
Obviously not. What could an unfixable CPU design bug that will impact every Intel processor (and cost up to 30% performance through the neccessary fixes) possibly do to the companies‘ stock price? /s
- Moral_ 9y ago
  This "bug" is so blown out of proportion it's sickening. It breaks KASLR, a thing no one uses.
  - cjbprime 9y ago
    You're likely incorrect. It now looks like a speculative execution exploit/leak. We don't know what the bug is exactly.
  - daenney 9y ago
    Except everyone that runs kernel 4.12 and onwards, where it was enabled by default and many distributions have had KASLR enabled earlier. Also, it doesn't just affect KASLR. KASLR isn't even the concern here. Based on the info that is available/has been pieced together, it appears to be a bug, at the hardware desing level, in Intel CPUs speculative execution capabilities.
  - exportgoldman2 9y ago
    Wrong. Wrong. Wrong. Sigh. This bug allows a user level process or even a website to read any memory on the pc, including memory of another vm on the same box. Bitcoin wallets, passwords, keys, all up for grabs by anon. Can't be fixed by intel so all os providers have to implement fixes in os which slow down pc by approx 30%. So you gaming pc or aws instances just cost more
    - candiodari 9y ago
      There are many reasons to just get a dedicated machine, especially given that they're like $10/month these days. (kimsufi, hetzner, ...) This is a major one. On a dedicated box, as long as ssh and your http server are secure, you can run a compromised kernel. In practice, of course, it mostly means that there's an extra layer of exploit necessary before attackers are in. Everybody should insist on that, always. Performance is another one (to put things bluntly: a 2-year-old atom with 4G straight on hardware, on 99% performance, beats a Quad Xeon with 96 Gigs of ram where you're 1 out of 100 VMs. And even that undersells it. In practice on that quad xeon it will regularly take 1s to jump into your code for a web request. Not generating a response, just the time before it actually processes your packet. If you're I/O bound (ie. every single website), the lowly dedicated Atom will beat the big bad Xeon). And lastly, included network capacity is the third one. The cheapest dedicated on hetzner comes with $3000 worth of network (Google cloud prices, Amazon's are more expensive, and yes it's FUP bandwidth, so presumably you can use like $500 of it without problems if you're paying $10, not the full $3k)
- frik 9y ago
  Obviously not /s They are now busy to hide all related news. All Intel CPU related news vanished, "great work".
_wmd 9y ago
An executive trading on inside information of this sort would be instantly crucified.. pretty sure it's unrelated
- sp332 9y ago
  If there's no official embargo, is it really secret enough to be considered insider trading? I mean a lot of people know what the secret is by now. And that blog post showed how much info is widely available even with the embargo in place.

endymi0n 9y ago

Obviously not. What could an unfixable CPU design bug that will impact every Intel processor (and cost up to 30% performance through the neccessary fixes) possibly do to the companies‘ stock price? /s

Moral_ 9y ago
This "bug" is so blown out of proportion it's sickening. It breaks KASLR, a thing no one uses.
- cjbprime 9y ago
  You're likely incorrect. It now looks like a speculative execution exploit/leak. We don't know what the bug is exactly.
- daenney 9y ago
  Except everyone that runs kernel 4.12 and onwards, where it was enabled by default and many distributions have had KASLR enabled earlier. Also, it doesn't just affect KASLR. KASLR isn't even the concern here. Based on the info that is available/has been pieced together, it appears to be a bug, at the hardware desing level, in Intel CPUs speculative execution capabilities.
- exportgoldman2 9y ago
  Wrong. Wrong. Wrong. Sigh. This bug allows a user level process or even a website to read any memory on the pc, including memory of another vm on the same box. Bitcoin wallets, passwords, keys, all up for grabs by anon. Can't be fixed by intel so all os providers have to implement fixes in os which slow down pc by approx 30%. So you gaming pc or aws instances just cost more
  - candiodari 9y ago
    There are many reasons to just get a dedicated machine, especially given that they're like $10/month these days. (kimsufi, hetzner, ...) This is a major one. On a dedicated box, as long as ssh and your http server are secure, you can run a compromised kernel. In practice, of course, it mostly means that there's an extra layer of exploit necessary before attackers are in. Everybody should insist on that, always. Performance is another one (to put things bluntly: a 2-year-old atom with 4G straight on hardware, on 99% performance, beats a Quad Xeon with 96 Gigs of ram where you're 1 out of 100 VMs. And even that undersells it. In practice on that quad xeon it will regularly take 1s to jump into your code for a web request. Not generating a response, just the time before it actually processes your packet. If you're I/O bound (ie. every single website), the lowly dedicated Atom will beat the big bad Xeon). And lastly, included network capacity is the third one. The cheapest dedicated on hetzner comes with $3000 worth of network (Google cloud prices, Amazon's are more expensive, and yes it's FUP bandwidth, so presumably you can use like $500 of it without problems if you're paying $10, not the full $3k)
frik 9y ago
Obviously not /s They are now busy to hide all related news. All Intel CPU related news vanished, "great work".

_wmd 9y ago

An executive trading on inside information of this sort would be instantly crucified.. pretty sure it's unrelated

sp332 9y ago
If there's no official embargo, is it really secret enough to be considered insider trading? I mean a lot of people know what the secret is by now. And that blog post showed how much info is widely available even with the embargo in place.