3 ms·
Didn't the recent CPU bug mitigations add 10% perf penalties to a lot of big server farms? We constantly pay this cost for other security-related issues, but w
by rtpg 8y ago
Didn't the recent CPU bug mitigations add 10% perf penalties to a lot of big server farms?
We constantly pay this cost for other security-related issues, but when it comes to a systemic, one-time penalty that almost entirely eliminates a class of bug we freeze up.
Obviously it's a lot of engineering effort to transition but we don't think twice about other security issues
- hfrhhfttdf 8y agoSure, they added around that performance penalty. But you only need to compile your kernel with that flag if you run untrusted code on the machine, given the nature of the exploits... I'm sure many companies have weighed the pros and cons of that decision, and said "by the time we've got foreign code running on this machine, we're already hosed, so the performance cost isn't worth it." In general, these types of decisions aren't uncommon.