4 ms·
Or the mistake is that we're running different trust domains on the same CPU core. All the various mitigations have already been very costly (something like a
by pdw 3y ago
Or the mistake is that we're running different trust domains on the same CPU core.
All the various mitigations have already been very costly (something like a performance loss of 10% on current-gen CPUs?). Getting rid of speculative execution entirely would cost far, far more.
- bpye 3y agoThere is state shared between cores too though, at the very least L3, probably IOMMUs, etc. I wouldn’t be entirely surprised if there are issues we haven’t found that exist there.
- Dylan16807 3y agoBut the further out you push the shared state, the less it hurts to disable speculation that affects the shared state.
- cryptonector 3y ago> Or the mistake is that we're running different trust domains on the same CPU core. It's very hard to not make that mistake. Think of all the websites running in your browser on your laptop. Isolating all those trust domains is going to be quite costly.