this post was submitted on 08 Aug 2023
45 points (100.0% liked)

Technology

37719 readers
183 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
alyaza@beehaw.org
TheRtRevKaiser@beehaw.org
gyrfalcon@beehaw.org
rs5th@beehaw.org
SemioticStandard@beehaw.org
TheRtRevKaiser@kbin.social
Los@beehaw.org
coldredlight@beehaw.org
remington@beehaw.org
45
Intel DOWNFALL: New Vulnerability Affecting AVX2/AVX-512 With Big Performance Implications (www.phoronix.com)
submitted 1 year ago* (last edited 1 year ago) by gabriele97@lemmy.g97.top to c/technology@beehaw.org
12 comments fedilink hide all child comments
top 12 comments
sorted by: hot top controversial new old
[–] pnutzh4x0r@lemmy.ndlug.org 16 points 1 year ago* (last edited 1 year ago) (1 children)

I think this is missing an article link: https://www.phoronix.com/review/downfall

Downfall, or as Intel prefers to call it is GDS: Gather Data Sampling. GDS/Downfall affects the gather instruction with AVX2 and AVX-512 enabled processors. At least the latest-generation Intel CPUs are not affected but Tigerlake / Ice Lake back to Sandy Bridge is confirmed to be impacted. There is microcode mitigation available but it will be costly for AVX2/AVX-512 workloads with GATHER instructions in hot code-paths and thus widespread software exposure particularly for HPC and other compute-intensive workloads that have relied on AVX2/AVX-512 for better performance.

Rough day for CPU makers...

Update: Of course there is a dedicated page for it: https://downfall.page/

[–] gabriele97@lemmy.g97.top 7 points 1 year ago

Yep sorry, I made the post while I was in a hurry. Thank you for the link!

[–] interolivary@beehaw.org 13 points 1 year ago* (last edited 1 year ago)

Speculative execution seems to be an unending source of woes, especially for Intel (but not just them.) Not all that surprising considering how hard it is to not leak eg. timing information accidentally, but you'd sort of expect that CPU manufacturers would have learned from the N+1 previous speculative execution vulnerabilities. Then again, they're in the business of making faster CPUs, so it's not like they'll just swear off speculation forever

[–] MangoKangaroo@beehaw.org 10 points 1 year ago (2 children)

My poor home server's ancient Xeon processors are about to be even more painfully slow than before. 😩

[–] upstream@beehaw.org 5 points 1 year ago* (last edited 1 year ago) (1 children)

A lot of those patches aren’t really needed if you “trust” the software that you run. Obviously, some are, but a lot of these are only interesting to exploit in shared environments.

[–] MangoKangaroo@beehaw.org 2 points 1 year ago

If it ends up in intel-ucode I may not get much of a choice. If it becomes a matter of a BIOS update, then I might just not bother. I don't know which way these things typically go.

[–] anlumo@feddit.de 4 points 1 year ago (1 children)

Are you sure that your server even uses AVX extensions for performance-critical operations?

[–] MangoKangaroo@beehaw.org 1 points 1 year ago

Yes. Although in my case it's less of a critical concern and more of an annoyance.

[–] nothacking@discuss.tchncs.de 1 points 1 year ago (1 children)

Zen blead and now this? Why is SIMD so hard? All you have to do is add a wide ALU to process more data at once.

[–] interolivary@beehaw.org 20 points 1 year ago (1 children)

All you have to do is add a wide ALU to process more data at once.

Oh that's all? 😄

[–] SenorBolsa@beehaw.org 14 points 1 year ago* (last edited 1 year ago) (1 children)

People just generally don't understand design or manufacturing at all it might as well be magic to the layman "all you gotta do is..." yeah sure that would make a better product in absolute quality terms, if it's possible at all, but you have to balance it against 100 other things.

There's a reason there are rooms full of relatively high paid individuals with fancy degrees or decades of experience.

[–] interolivary@beehaw.org 11 points 1 year ago

And speculative execution is the stuff you do on top of your fancy ALU to make sure you waste less time – so it's not like we haven't already tried the simple idea, but that we've moved on from it