8 ms·
Google Chrome’s new Meltdown and Spectre safeguard is a memory hog
- philips 8y ago"overall memory use in Chrome is higher by 10 to 13 percent when isolating all sites with many tabs open."
- herne 8y agoThe article didn't link to the actual blog post: https://security.googleblog.com/2018/07/mitigating-spectre-with-site-isolation.html https://security.googleblog.com/2018/07/mitigating-spectre-w... which has some more nuance: "on the plus side, each renderer process is smaller, shorter-lived, and has less contention internally, but there is about a 10-13% total memory overhead in real workloads due to the larger number of processes"
- bilbo0s 8y agoThat doesn't even really tell us much. We need more information. For instance, it would be enlightening to have an understanding of how, exactly, a "real workload" is defined? How many tabs? What's going on in the tabs? Etc. A definition of "real workload" would at least allow us to compare that workload to our own typical workloads. (Which I assume would likely be different for an administrative assistant vs an executive vs a developer vs a researcher vs etc etc etc.)
- staticassertion 8y agoSo what? Site isolation is a huge win.
- geofft 8y agoHeadline in an alternate universe: "Google Chrome saves 10% of memory usage by disabling vital security protection"
- hshehehjdjdjd 8y agoAlternate headline in our universe: “Chrome increases use of non-constraint resource by 10% to increase security.”
- m_eiman 8y agoIn what world is RAM not constrained? It certainly is in mine.
- ploxiln 8y agoHeadline in alternate universe: "With the powerful computers available in the mid-late 2010s, it is now practical to browse an international web of documents, from your own home!" Seriously - just this increase is 2x the total memory of a computer I used to browse the internet 20 years ago. People, including programmers, seriously misunderstand how amazingly powerful today's computers are, and how amazingly bloated and inefficient today's applications and websites are.
- alluro2 8y agoCouldn't agree more...People were creating universes with 1.44MB on floppies. Instead, Viber desktop app installer, for example, is a 133MB download, ~300MB installed and probably uses double the RAM...
- mwcampbell 8y agoNever mind a universe in 1.44MB; Elite did it in 32KB, albeit with wireframe graphics. [1] The bloat of many current desktop apps, each with their own copy of a large-footprint GUI toolkit or rendering engine, is indeed sad by comparison. I hope this situation will change when Windows 7 and IE 11 are finally history, meaning that desktop app developers can count on the OS to provide a modern web rendering engine on all platforms. [1]: https://www.filfre.net/2013/12/elite/ https://www.filfre.net/2013/12/elite/
- dragonwriter 8y agoGiven a choice between +10-13% memory use (hardly a “hog”) and a giant gaping security hole, I'll take the former, thanks.
- deleted 8y ago[deleted]
- kjeetgill 8y agoI agree I wouldn't complain given the trade-off, but Chrome is one of the he biggest memory consumer on most people's desktops. A 10-13% increase from one of the biggest process I have running is significant.
- badlucklottery 8y agoIf it's causing memory pressure on the system to the point of thrashing, sure. But is that the case or is able to react well to other RAM hungry processes on the system? Not using additional spare memory if it gives the user a better experience seems like a no-no.
- BuckRogers 8y agoWorse is worse. There is no upside to using more memory. You don't know what a given system has for memory, Chrome needs to be as efficient as possible. Chrome is even worse than before with this change. Creating an ideal situation to make Chrome fit is disingenuous. Hopefully in time they find a way to retain safety without furthering to bloat their browser.
- badlucklottery 8y ago>There is no upside to using more memory. But there is an upside to better security. It'd be great if it was a free lunch but apparently it's not. >Chrome needs to be as efficient as possible. Chrome needs to make its users as happy as possible. Efficiency only matters when it starts affecting user happiness. >Creating an ideal situation to make Chrome fit is disingenuous. Do you know that it's an "ideal" situation rather than typical? I don't either but I also suspect Google wouldn't turn this on if it was going to negatively affect most users because they run the risk of losing market share to Safari/Firefox/Edge. I'm open to evidence to the contrary. >Hopefully in time they find a way to retain safety without furthering to bloat their browser. That's most likely going to be in the Intel/AMDs court.
- amelius 8y agoHave there been reports yet of an exploit (using Spectre/Meltdown) in the wild?
- tptacek 8y agoYes? There were POCs the day of the announcement.
- deleted 8y ago[deleted]
- kentonv 8y agoI think the question is: Has anyone observed it being exploited for actual malicious purposes? Sure, it's easy to say "of course it has happened, why wouldn't it have?", but it would be really interesting to know how it is actually being used.
- megaman22 8y agoThat seemed very contrived. For a supposedly fatal flaw that's been lurking in chip designs for tbe better part of a decade, you'd expect real cases.
- nottorp 8y agoWait. Browsers were a major memory hog even before. Not only Chrome, all of them. Does the extra 10% really matter?
- cozzyd 8y agoIt will matter for some people who were on the edge of swapping but that's probably not so many.
- dudus 8y agoSwapping to what? Firefox uses just as much memory.
- xoa 8y agoSwapping to non-volatile storage? In the context of memory exhaustion I think it was reasonably clear gpp was talking about hitting virtual memory. Although these days faster SSDs make that not quite as dramatic a hit as it once was.
- jraph 8y agoSwapping on SSDs is not ideal though, because of limited number of writes. Is it still relevant with SSDs produced now by the way?
- cozzyd 8y agoSwapping as in paging.
- Caspy7 8y ago> Firefox uses just as much memory. This depends strongly on how many tabs you normally have open. At higher numbers Firefox tends to do much better.
- cozzyd 8y agoWill electron apps inherit this increase as well?
- yjftsjthsd-h 8y agoThey're only one "site", aren't they? So this wouldn't usually be needed?
- joecool1029 8y agoUnsure about electron but my guess would be that Spotify will certainly inherit this since they chose to use a custom chromium to build on.
- krylon 8y agoHonest question: The interesting question, IMHO, is not how much Chrome is affected, but how strong the impact is compared to other browsers. Do they suffer similarly? Have they found a way to avoid enlarging the memory footprint? Do they ignore the issue? (Please tell me it's not number 3!)
- bla2 8y agohttps://security.googleblog.com/2018/07/mitigating-spectre-with-site-isolation.html https://security.googleblog.com/2018/07/mitigating-spectre-w... says that they've been working on site isolation (one process per domain, so potentially several per tab) for many years. chrome has been multiprocess (process per tab) since day one and it took other browsers years to catch up with being multiprocess. So if other browsers decide to pursue this approach, it'll likely take them years as well. So 3 doesn't seem super unlikely to me :-/
- deleted 8y ago[deleted]
- staticassertion 8y agoThey are not ignoring the issue, but they also do not have this mitigation in place. Getting there will take a long time. Chrome got lucky - they've been working on this for ages, and they happened to be rolling this out right when Spectre landed.
- Caspy7 8y agoFirefox is definitely working on this in Project Fission. Bringing down memory per process is crucial and a big focus right now. (I think getting resource sharing down to a science will also be important.) I'm a fan of Firefox but admit Chrome has an advantage in this situation, while Firefox has had the advantage of resource sharing within the process to keep memory down. Last estimate I saw suggested over a year for it to arrive. As an illustration of how this approach affects the landscape for all browsers, TechCrunch regularly loads 30 origins on a single page.
- 8y ago
- DenisM 8y agoI wish chrome would freeze and unload inactive tabs. I may get around to them one day, but there is no need to waste resource on them until then.
- eikenberry 8y agoThe Great Suspender does a pretty good job of this. https://chrome.google.com/webstore/detail/the-great-suspender/klbibkeccnjlkjkiokjodocebajanakg https://chrome.google.com/webstore/detail/the-great-suspende...
- mtgx 8y agoDon't blame Google for this. They only did what had to be done in software to fix Intel's hardware flaw. And Intel is currently willing to allow developers to fix many more such Spectre-class flaws in software just so it doesn't have to radically change its architecture.
- codedokode 8y agoChrome has always been a memory hog. For example, the Intel chipset in my machine doesn't support installing more than 4Gb of memory (and I feel that it is artificial limitation to force consumers buy new Intel chipsets) and on top of that, some proprietary 32-bit operating system cannot use more than 3Gb because of so called "PCI hole" - a part of address space that is allocated for PCI devices and cannot be used for accessing memory. I think that browser developers are making a wrong choice. They increase memory consumption for caches and similar type of data so that complicated and bloated websites work faster; I don't want that. I don't visit such sites anyway and have JS disabled so I would prefer that browser just consumes less memory. Let bloated websites be slow; they deserve it.
- eikenberry 8y agoWon't this work become mostly irrelevant in the near future (at least for new hardward)? There is no way all affected software will implement workarounds like this and it this will have to be fixed at the hardware/CPU level in order to fully address it.
- robbyt 8y agoI'm sure it's possible to detect if it's fixed in hardware and disable the additional software protection
- Eridrus 8y agoNot all software is equally affected by this, browsers are particularly affected because they have a JavaScript VM running untrusted code. But Site Isolation has been in the works in Chrome for a long time and it brings additional protections because it means that exploiting a renderer process doesn't let you break the SOP, which means you absolutely have to break out of the renderer process to have a meaningful exploit - completely removing the renderer codebase from your trusted computing base.
- gok 8y agoPretty sure this is explicitly not a Meltdown mitigation, since the whole point of Meltdown is that is allows crossing process boundaries.
- anticensor 8y agoGoogle Chrome is multiprocess.
- bitmapbrother 8y agoDid I miss an announcement where those other competing browsers offered a solution that consumed no additional RAM? I can't recall any another browser maker introducing a change as encompassing as the Chrome Meltdown and Spectre fix.
- User23 8y agoI’m certainly willing to pay for $10 more memory in exchange for not getting owned.
- xg15 8y agoMaybe Meltdown and Spectre would be a good point to stop and think if an architecture where you run arbitrary turing-complete untrusted code from multiple sources side-by-side and try to mitigate this by locking down the system is really the best direction for the web to move in.
- amluto 8y agoI’m surprised that it took Spectre to get site isolation enabled. Without site isolation, an RCE allows a malicious site to violate the same origin policy even without a sandbox escape. Site isolation is a very nice defense in depth feature.