3 ms·
There's no point in waiting. Neither Intel nor AMD will significantly adjust their roadmaps due to these issues simply because they don't realistically have the
by keldaris 9y ago
There's no point in waiting. Neither Intel nor AMD will significantly adjust their roadmaps due to these issues simply because they don't realistically have the flexibility to do so.
Evaluate your threat model in the context of Meltdown/Spectre and opt in or out of the mitigations accordingly. There are relatively few cases where the workload is both significantly affected by the mitigations and vulnerable to these attacks (Xen paravirtualization would be the prototypical example). Personally, I opt out of page table isolation, KASLR and any retpoline-style mitigations on my desktop systems and compute servers for performance reasons. Make sure you understand the implications of these choices if you go that way, though.
- kikoreis 9y agoDo you have actual facts to back up your first paragraph? If it's just an informed opinion, mine is: if you can, you should definitely wait before buying new server parts.
- alltakendamned 9y agoYou underestimate how long it takes to "patch" hardware. Having an opinion does not make it an informed one. Read the following thread: https://twitter.com/securelyfitz/status/949370010652196864 https://twitter.com/securelyfitz/status/949370010652196864
- XzetaU8 9y ago"Come 2019 and 2020, other products in the pipeline will have more involved fixes that again improve performance over the software and quick fixes. The solution everyone wants is a full fix with no performance impact. I can't imagine that coming any sooner than 2021"
- keldaris 9y agoI don't have any facts that aren't already public - the official as well as the leaked roadmaps of the CPU manufacturers and general knowledge of how the industry works. What I'm wondering is - what, specifically, do you think is it that's so worth waiting for at the moment?