AMD really also should be benched with KPTI turned on, since they've got a Meltdown-style vulnerability (discovered by the same team) they've left unpatched bec

AMD really also should be benched with KPTI turned on, since they've got a Meltdown-style vulnerability (discovered by the same team) they've left unpatched because "KPTI fixes it", but they also want KPTI off-by-default because it tanks their benchmarks. It also completely breaks KASLR (and that's been broken on AMD for a while thanks to prior work from the same team). https://mlq.me/download/amdprefetch.pdf https://mlq.me/download/amdprefetch.pdf Sadly people don't seem to take AMD vulnerabilities very seriously, Specter/Meltdown were trumpeted from the rooftops but when AMD leaves vulnerable defaults because mitigations would tank their benchmarks then it's fine, and everyone continues to benchmark in vulnerable configurations since it's "manufacturer-recommended". There seems to be a mindset for many that because the initial vulnerabilities didn't affect AMD that they're invulnerable forever.