4 ms·

If you run things efficiently you're eaking every ounce of performance out of this hardware. A 30% performance hit means a 30% cost increase. The bigger issue

If you run things efficiently you're eaking every ounce of performance out of this hardware. A 30% performance hit means a 30% cost increase. The bigger issue is for things that don't scale easily. That sql server that was at 90% capacity is suddenly unable to handle the load. Sure that could've happened organically, but now it happens (perhaps literally) overnight for everyone all at once. Expect a bunch of outages in the next few weeks as companies scramble to fix this.

mkagenius 9y ago
Should the individual companies hurry to patch it. There is no news of exploit as such.
- rkeene2 9y ago
  There is now !
  - mkagenius 9y ago
    Intel CEO added - "But when you take a look at the difficulty it is to actually go and execute this exploit — you have to get access to the systems, and then access to the memory and operating system — we're fairly confident, given the checks we've done, that we haven't been able to identify an exploit yet." It seems you need root or physical access to the system as a prerequisite for the attack.
    - ubernostrum 9y ago
      You don't need root, and you don't need physical access. For Meltdown, you only need the ability to run your own code on the target machine. Where that gets tricky is when everyone's using cloud hosting solutions where the physical machines are abstracted away, and a given physical server may be running multiple virtual servers for different customers. Think of it like this: * Somewhere in a data center at a cloud provider is a physical server, wired up in a rack.. * That server runs virtualization software, allowing it to host Virtual Server 1, Virtual Server 2, and Virtual Server 3. * Virtual Server 1 belongs to Customer A. Virtual Servers 2 and 3 belong to Customer B. * Normally, Virtual Server 1 can't access any memory allocated to Virtual Servers 2 and 3. * BUT: Customer A can now use Meltdown to read the entire memory of the physical server. Which includes all the memory space of Virtual Servers 2 and 3, exposing Customer B's data to Customer A. That's the threat here.
ClassyJacket 9y ago
"A 30% performance hit means a 30% cost increase." Just wanna point out that a 30% performance hit means a 43% cost increase.
- planteen 9y ago
  Yes. This is so often forgotten when talking about stock prices (which those 2x or 3x daily derivatives are so dangerous). For those confused: the math here is a 30% decrease puts you at 70%. To go from 70% back to 100%, 30% only gets you to 91% (0.70*1.3). 1/0.7 = 1.43 means you need 43% to recover.

mkagenius 9y ago

Should the individual companies hurry to patch it. There is no news of exploit as such.

rkeene2 9y ago
There is now !
- mkagenius 9y ago
  Intel CEO added - "But when you take a look at the difficulty it is to actually go and execute this exploit — you have to get access to the systems, and then access to the memory and operating system — we're fairly confident, given the checks we've done, that we haven't been able to identify an exploit yet." It seems you need root or physical access to the system as a prerequisite for the attack.
  - ubernostrum 9y ago
    You don't need root, and you don't need physical access. For Meltdown, you only need the ability to run your own code on the target machine. Where that gets tricky is when everyone's using cloud hosting solutions where the physical machines are abstracted away, and a given physical server may be running multiple virtual servers for different customers. Think of it like this: * Somewhere in a data center at a cloud provider is a physical server, wired up in a rack.. * That server runs virtualization software, allowing it to host Virtual Server 1, Virtual Server 2, and Virtual Server 3. * Virtual Server 1 belongs to Customer A. Virtual Servers 2 and 3 belong to Customer B. * Normally, Virtual Server 1 can't access any memory allocated to Virtual Servers 2 and 3. * BUT: Customer A can now use Meltdown to read the entire memory of the physical server. Which includes all the memory space of Virtual Servers 2 and 3, exposing Customer B's data to Customer A. That's the threat here.

ClassyJacket 9y ago

"A 30% performance hit means a 30% cost increase." Just wanna point out that a 30% performance hit means a 43% cost increase.

planteen 9y ago
Yes. This is so often forgotten when talking about stock prices (which those 2x or 3x daily derivatives are so dangerous). For those confused: the math here is a 30% decrease puts you at 70%. To go from 70% back to 100%, 30% only gets you to 91% (0.70*1.3). 1/0.7 = 1.43 means you need 43% to recover.