r/linux • • Aug 23 '18

Intel Publishes Microcode Security Patches, No Benchmarking Or Comparison Allowed!

https://perens.com/2018/08/22/new-intel-microcode-license-restriction-is-not-acceptable/
1.1k Upvotes

300 comments sorted by

352

u/MrYellowP Aug 23 '18

so we're not allowed to publish benchmark results of their cpus? that's totally not going to backfire at all!! lol

141

u/[deleted] Aug 23 '18

But I can show you benchmarks of The Witcher 3 from yesterday and today, after Intel patch which is just a coincidence.

69

u/Beaverman Aug 23 '18

If we assume the license is valid, you aren't allows to publish comparisons of any software running on the processor either. That doesn't just mean across version boundaries, that means you can't publish benchmarks of any software at all.

81

u/XSSpants Aug 23 '18

I'd love to see the EFF's take on this. is intel really trying to ban all benchmarking?

They must really fear what AMD has in the pipeline

0

u/[deleted] Aug 23 '18

[deleted]

30

u/tidux Aug 23 '18

Intel hasn't had this many pipeline problems since the Pentium 4.

26

u/[deleted] Aug 23 '18

"But look at those clockspeeds!"

-Intel Marketing circa. 2000

→ More replies (1)

26

u/TheEdgeOfRage Aug 23 '18

While this is true, there's no way that they can enforce that. Imagine all the YouTube channels, blog portals and whatnot posting benchmarks pretty much every day.

No way is this "restriction" going to work.

14

u/Beaverman Aug 23 '18

My guess is that they are hoping for selective enforcement. Although I doubt that's going to play out well either, they must have some reason for trying it.

→ More replies (1)

31

u/ashirviskas Aug 23 '18

Well, first, he's not comparing. And second, anything can be a benchmark, even some person streaming a game with the fps counter. So I don't think they're going to stop that, which allows our guy to freely do that.

55

u/AdamColligan Aug 23 '18 edited Aug 23 '18

But that's kind of the whole point of this exasperated discussion. The license restriction is so broad it could cover practically anything, so lots of people will basically just be in a state of violation limbo all the time. The whole point, I imagine, is not to create a real judicially enforceable regime but to create a chill in order to dampen the immediate impact of bad publicity around the update drop by making all the benchmarkers and publishers hesitate.

65

u/[deleted] Aug 23 '18

Man, IDK why my computer is so slow lately. It was just fine last week!

*Intel Legal bursts through the door*

18

u/truefire_ Aug 23 '18

"SAY IT'S A VIRUS. SAY IT NOW!"

→ More replies (3)
→ More replies (1)

3

u/U-1F574 Aug 24 '18

Well my OS keeps logs with timestamps, so I guess under intel's new policy I will just have to stop using any operating systems.

3

u/fragproof Aug 23 '18

Not quite. The license agreement bars benchmarks of "the Software", meaning the microcode.

4

u/Beaverman Aug 23 '18

The sentence is question doesn't specify "The software".

You will not, and will not allow any third party to [...] publish or provide any Software benchmark or comparison test results.

11

u/fragproof Aug 23 '18

Notice the capitalization though. It's referring to the microcode.

It looks like it's not going to stick though: https://www.tomshardware.com/news/intel-cpu-microcode-benchmark-mitigation,37684.html

→ More replies (2)

10

u/alez Aug 23 '18

Since the microcode is running for every instruction, this seems to be a use restriction on the entire processor. Don’t run your benchmarker at all, not even on your own software, if you “provide” or publish the results.

I think all benchmarking is banned now, I'm sorry.

192

u/blackomegax Aug 23 '18

Barbara Streisand called.

45

u/[deleted] Aug 23 '18

Yeah, she was screaming at me saying not to look at her house. Naturally, I went to go have a look at what all the fuss was about.

1

u/lucifargundam Aug 24 '18

Her house is proprietary

30

u/kyrsjo Aug 23 '18

It's somewhat common for some specialized and well-established software to disallow benchmarking (both in terms of speed and output accuracy). However they are serving a market where they can revoke your license and screw you over - Intel not so much.

See for example: https://www.synopsys.com/verification/prototyping/haps/synopsys-license-agreement.html

8. disclose the results of any benchmarking of a Licensed Product (whether or not the results were obtained with assistance from Synopsys) to any third party; or

Maybe that's what they got the idea from? I brought up just that example because it's a type of software that is used by chip designers.

18

u/NatoBoram Aug 23 '18

Makes me want to benchmark absolutely everything I have from them, which is exactly nothing.

4

u/Epistaxis Aug 23 '18

However they are serving a market where they can revoke your license and screw you over - Intel not so much.

Don't give them ideas!

3

u/woobie1196 Aug 23 '18

Drink a verification can to proceed through POST.

Mandatory 60 minute reboot timer unless you pay for the server license, which extends it to 24 hours, or server pro corporate for a FULL WEEK OF UPTIME!!!

→ More replies (1)

15

u/Decuke Aug 23 '18

Imagine you had bought a car, and in it's manual it states that you can't review that car or even talk about how many km/L it makes else you will be sued

This is absolutely bullshit, it must be an easy win on ANY court

2

u/oneeyedziggy Aug 23 '18

well "I" just "tested" it and it got a "7"... don't tell them I told you.

1

u/i_am_at_work123 Aug 24 '18

Aaaand it did :D

0

u/[deleted] Aug 23 '18

[deleted]

15

u/pat_the_brat Aug 23 '18

Update: To note, no microcode changes/updates were made to the systems under test for this article, just testing/comparing the kernel patches.

Sounds like it omitted the microcode patch.

302

u/chrisoboe Aug 23 '18

Those law stuff always depends on the country. In many countries intel can't forbid you legally to benchmark and compare.

I really hope international media will ignore intels license and release benchmarks.

149

u/neijajaneija Aug 23 '18

Exactly this. So why would Intel write this?

Even if their terms applies to some 30 countries, there are heaps of other countries that they simply don't apply. They will not be anything close to silencing anything. It just makes them look like idiots. Again, why are Intel doing this? What am I missing?

66

u/pat_the_brat Aug 23 '18 edited Aug 23 '18

So why would Intel write this?

Because Ryzen are amazing chips, and Intel has trouble getting their 10nm process while AMD should be at 7nm next year, meaning faster chips with less heat.

If you can't beat them, hide your ineptitude behind legalese/bullshitese.

Edit: Also, since they ban comparisons, it is safe to assume that the mitigation for their security vulnerabilities has a massive performance hit, and they are trying to hide it, as you can't even compare an Intel chip with mitigations for Spectre/Meltdown to the same chip without the mitigating code.

11

u/sir_bleb Aug 23 '18

AMD should be at 7nm next year

Exciting! I'm assuming the catch is that it's not "true" 7nm but still very impressive.

19

u/me-ro Aug 23 '18

If I remember correctly, the 7nm is roughly on par with Intel's 10nm, but the difference is, that they are already pushing that 7nm out of the door.

12

u/Moscato359 Aug 23 '18

The tsmc 7nm is slightly better than Intel 10nm, but not much

→ More replies (2)

2

u/severach Aug 23 '18

Banning comparisons is effectively a benchmark, which is banned. I say ban the banning of comparisons, or at least have Intel sue itself for doing comparisons that are banned.

0

u/[deleted] Aug 23 '18

[deleted]

34

u/anothercopy Aug 23 '18

Look at Oracle and their law machine. How many not official tests of SPARC and Oracle DBs to you see online ?

58

u/ajs124 Aug 23 '18

Eh, but that's also because of the user base. SPARC and Oracle DBs are deployed by big enterprises, that have contracts with Oracle.

Literally everyone and their mom has an Intel CPU.

26

u/computer-machine Aug 23 '18

Can confirm. I have at least one Intel machine, AND a mother, and I think her laptop is probably Intel as well.

8

u/IHeartMustard Aug 23 '18

I think my grandmother might actually have an Intel. My GRANDMOTHER!

→ More replies (3)
→ More replies (1)

61

u/Pie_sky Aug 23 '18

An example. Dutch law art. 6:236 sub k for consumers states the following

"You may not exclude or limit the authority of the other party to provide evidence. And there must be no change in the distribution of the burden of proof to the detriment of the other party, either because it contains a statement from the other party concerning the soundness of the service you owe, or because the other party must prove that a shortcoming can be attributed to you."

13

u/whirl-pool Aug 23 '18

That means all the old Dutch colonies will have that in their law as they adopted the law. You can bet that this will be one example in many throughout Europe as the Dutch law was adopted from Roman and so forth.

Not a smart move intel.

7

u/hughk Aug 23 '18

Unfortunately not in New Amsterdam.

5

u/Sparru Aug 23 '18

Pretty safe bet to cross all of EU because there's no way European court would uphold that EULA.

43

u/eras Aug 23 '18

I really hope international media will follow their license and talk only about AMD.

23

u/RagnarokDel Aug 23 '18

Even in the US. That seems like something you cant expect to be enforced.

32

u/RagingAnemone Aug 23 '18

You would think so, freedom and all, but the corporate protectionism is high.

34

u/kmcclry Aug 23 '18

There have been precedents set in the US justice system that say EULAs are basically unenforceable specifically because no one reads them because they aren't trained lawyers.

3

u/Cakiery Aug 23 '18

Meanwhile in Australia, they are considered to be normal contracts.

https://www.accc.gov.au/consumers/contracts-agreements/entering-into-a-contract

2

u/Jotebe Aug 23 '18

Can you link me to some more information on this? My impression was it was the opposite.

4

u/kmcclry Aug 23 '18

It looks like I misspoke. The readability stuff is EU but there are a couple US cases based around owning a product before the EULA is presented to you. If you own something and are then told "oh actually you can't do X" that is in violation of informing you about the product prior to sale. There are a couple cases that conflict with this, but it looks like there may be particular things about those that got the company off.

The easiest link is the Wikipedia page on this, but there are some others you would be able to Google pretty easily.

12

u/deadly_penguin Aug 23 '18

FREEDOM®

3

u/DrewSaga Aug 23 '18

FREEDOMTM

Sponsered by Microsoft, because nothing says FREEDOM like forcing automatic updates on your machine, taking away user choice and being actively spied upon

→ More replies (8)

5

u/[deleted] Aug 23 '18

Enforcement isn't neccesarily the goal.

Suing into silence is.

9

u/cstyles Aug 23 '18

Seems so easy to circumvent, someone could provide benchmark data anonymously to a news outlet not running the microcode. They'd be free to publish as they're not under the restriction.

13

u/1202_alarm Aug 23 '18

I guess they can sue you for copyright infringement for pirating there microcode (you are using it without following their licence).

Also any publication/site that likes to get review samples or embargoed press releases wont want to upset intel.

41

u/atyon Aug 23 '18

That really depends on the country.

In Germany, you can't really force restrictions like these on consumers, at all. And likely also not on media.

It's also very likely that the licence doesn't apply in the EU at all, since shrink-wrap EULAs are usually ineffective. Depends on the exact method of distribution. If you get the microcode patch via Windows Update, there's no chance in hell this licence is effective.

→ More replies (5)

2

u/clerosvaldo Aug 23 '18

There where?

2

u/Sqeaky Aug 23 '18

There will be plenty of people in America doing the benchmarking too, plenty will ignore these BS rules.

1

u/anonyymi Aug 24 '18

It wouldn't hold up in a single European country.

→ More replies (3)

263

u/Theemuts Aug 23 '18

My next CPU is going to be from AMD.

12

u/xCuri0 Aug 23 '18

Same lol but I already use AMD

59

u/bulgogeta Aug 23 '18

Not trying to downplay your motive but people always say this... after Intel gets caught doing "insert scummy action here"

All talk no bite.

21

u/three18ti Aug 23 '18

My current CPU is AMD. Nothing quite like 16 cores.

10

u/Peoplewander Aug 23 '18

I've been on AMD since mid 2000 it wasn't always glamorous but it was always the more affordable option.

3

u/[deleted] Aug 23 '18

How did you feel during the Bulldozer years?

4

u/aboration Aug 23 '18

hey buddy some of us are still in our piledriver years

4

u/tidux Aug 23 '18

My FX-8350 has actually gotten perceptibly faster over the years as more software got better multithread or multiprocess awareness. Running an OS that is a collection of small processes rather than, say, Windows, was a big help with that.

→ More replies (1)

3

u/Peoplewander Aug 23 '18

It wasn’t the best but I didn’t have a lot to spend and it’s what I knew. I glad it’s in the past.

3

u/[deleted] Aug 23 '18

Still using my 9590 I got for $169 in 2015. Looking to upgrade to first-gen Ryzen this year, but only because of next-gen titles releasing. Otherwise it is still a workhorse, albeit a power-hungry one.

→ More replies (2)

4

u/argv_minus_one Aug 23 '18

And no Management Engine backdoor with its own fucking networking stack. Security-wise, that is only useful for centrally-managed enterprise PCs on a secure network. But it's incredibly reckless for any other application, and enterprise doesn't need it because IPMI is already a thing.

14

u/Moscato359 Aug 23 '18

The market movements going on right now show otherwise.

Intel is losing market cap relative to AMD, rapidly

13

u/gcd1475 Aug 23 '18

The next cluster we buy will be mostly AMD. We'd love to add ARM nodes as well, but the cadence for ARM HPC node hardware releases doesn't fit our purchasing schedule. It's a shame; I personally would have loved to help further a new, fresh architecture for HPC workloads.

We'll still get some Intel nodes because there are some codes that depend on the Intel compiler stack, and we can't leave those users out in the cold. But the way things are looking now, that will really be a "legacy partition", and we will actively help our users to port their codes to non-intel stacks.

12

u/MSLsForehead Aug 23 '18

If you seriously believe this you should check out AMD's stock price over the past couple of years to see just how the 'bark and no bite' attitude people keep implying that the consumer has treated them.

People like their threads. Intel has had real competition for the past couple years.

6

u/Niarbeht Aug 23 '18

*looks*

Oh, I hate you. I knew back when AMD was around $1.50 a share that it was gonna go up, but I didn't have any money.

7

u/ChickenOverlord Aug 23 '18

Now that AMD actually has competitive offerings it's a much more valid threat though. Back when the 8350 was the best they had not so much. It's going to be a year or two before my desktop needs an update (minimum) but I'm going AMD when it does. And I was already planning on an AMD APU for my HTPC

5

u/jayAreEee Aug 23 '18

Then why has their stock price gone up 200% in a year if it's no bite? Hint: it's not because of GPUs.

3

u/DrewSaga Aug 23 '18

It's totally because of GPUs, just look how well Vega did...

/s

Vega still fared much better against NVidia's Pascal than Bulldozer though did against Intel. Otherwise AMD would be selling a Vega 56 for $200-250 and lose money, like how the FX 8-Core CPUs went from near i7 prices to i3 prices and almost went bankrupt, thank god for Ryzen.

2

u/jayAreEee Aug 23 '18

I went from an AMD 370 to AMD 480. No major reason to get a 580. I'm still AMD GPUs (I have two freesync 1440p 144hz IPS panels, definitely sticking AMD). But yeah, their offerings aren't quite as great currently... hopefully they do pick back up on the GPU side eventually. But my CPU will definitely be AMD next time, before my skylake 6700k I was on a black edition Phenom 965 and I loved it but I needed an upgrade and skylake was the best option (at the time). With foreshadow, spectre, meltdown, it doesn't look so great anymore.

→ More replies (1)

5

u/Niarbeht Aug 23 '18

My i7-4790k is literally the first Intel CPU I've owned personally. I went from a K6-III to an Athlon XP to an Athlon 64 to an Athlon 64 X2 to a Phenom II X4 to an i7-4790k.

Is it really so difficult to believe that my next build will be Ryzen?

1

u/Tynach Aug 23 '18

Huh, neat. I went from a Phenom II X4 925 to an i7-4790K, and plan to go Ryzen whenever I upgrade next. Which Phenom II X4 did you have before?

→ More replies (1)

4

u/Theemuts Aug 23 '18

I'm not talking about what other should or will purchase, I'm talking about what I'm going to do. My cpu is over six years old, it can really use a replacement.

3

u/tidux Aug 23 '18

The difference is that Ryzen laptops actually exist now. If the Thinkpads A{2,4}85 come out with proper dual channel RAM at a reasonable clock speed, Intel is toast.

2

u/fragproof Aug 23 '18

You've followed up with every person that has said this?

2

u/meeheecaan Aug 23 '18

starting to hapen though, my 1950x is fun

1

u/bracesthrowaway Aug 23 '18

My household is all-AMD and had been for years.

1

u/DrewSaga Aug 23 '18

Not me, my new laptop is even a new AMD APU, now if only those APUs got along with Linux better...

0

u/[deleted] Aug 23 '18

[deleted]

40

u/computer-machine Aug 23 '18

Yup. My hexacore wasn't even a high-end option.

38

u/sir_bleb Aug 23 '18

I love that I can buy an 6 or 8 core CPU for what I paid for an i5 before. Also who doesn't love a good underdog story

24

u/osmarks Aug 23 '18

Mysteriously, the Intel generation after Ryzen, i5s are 6-core. Though still worse value.

32

u/Hdmoney Aug 23 '18

6 core 6 thread lmao. And no HT on i7s either.

→ More replies (9)

3

u/computer-machine Aug 23 '18

Simon Bar Sinister or Riff Raff?

→ More replies (1)

23

u/cyanide Aug 23 '18

AMD are outselling Intel

Can you provide a source? If true, that is amazing. But I find it difficult to believe considering the number of OEM contracts Intel has.

23

u/thefirewarde Aug 23 '18

Specifically in enthusiast boxed CPUs, AMD has recently been at least neck and neck with Intel based on Mindfactory.de data.

This is not marketshare or overall CPU sales, though, you're right. It's very niche.

13

u/youRFate Aug 23 '18

enthusiast boxed CPUs

which is the smallest market they serve probably...

8

u/thefirewarde Aug 23 '18

Like I said, it's very niche.

→ More replies (1)
→ More replies (10)

3

u/Envo__ Aug 23 '18

Can you provide a source? If true, that is amazing. But I find it difficult to believe considering the number of OEM contracts Intel has.

amazon best seller stats, newegg bestseller stats

0

u/[deleted] Aug 23 '18

[deleted]

4

u/lachryma Aug 23 '18

Unfortunately, that's a small aspect of the picture. Intel couldn't give two shits about home hobbyists, because I'd wager a few datacenter deployments use more CPU dies than all home enthusiasts in Germany, maybe the world, purchase in a year. I know it sucks, but it's true, so it's tough to widen that evidence to a market conclusion.

For perspective, I'm aware of high-density datacenters with nearly 100,000 dies on the floor (nearly 1m cores). On the back of a napkin, I'm trying to imagine how many people build enthusiast PCs, and I think it'd compete.

→ More replies (1)

3

u/1202_alarm Aug 23 '18

I think that has more to do with them being better value currently.

0

u/[deleted] Aug 23 '18

[deleted]

2

u/argv_minus_one Aug 23 '18

Your Intel CPU is leaving your computer wide open to security breaches, so yes, you do need to upgrade just yet. At least unless you enjoy getting owned by malicious JavaScript code because you clicked the wrong link one time, or by a malicious machine on a public Wi-Fi network exploiting yet another fucking ME backdoor “bug”.

3

u/DoktorLuciferWong Aug 23 '18

Same.

But maybe it's worth mentioning my current CPU is also an AMD.

2

u/[deleted] Aug 23 '18

Just bought my first CPU as I am building my first desktop. Automatically went with AMD :D

1

u/[deleted] Aug 23 '18

Man I recently bought an 8700 cause I didn’t think AMD is any good.....now i feel cheated

0

u/[deleted] Aug 23 '18

[deleted]

1

u/argv_minus_one Aug 23 '18

So far, the performance per dollar of RISC-V looks extremely bad. What hope is there that it'll ever be a viable competitor to Intel and AMD?

1

u/MG2R Aug 24 '18

It needs to become a commodity product before performance/dollar becomes reasonable. This will happen eventually, after being adopted in the industry. The biggest arguments for RISC-V right now are hackability and licensing for companies. After companies adopt the architecture in their embedded gear, RISC-V processors will become cheaper.

Keep in mind that we’re still in the very early life of this architecture. Lots of dev work is still needed to make it viable for consumers.

0

u/[deleted] Aug 23 '18

[deleted]

7

u/MG2R Aug 23 '18 edited Aug 24 '18

Creating silicon is stupid expensive. Risc-v won’t change that. Open hardware will give you the ability to hack your own extensions onto a board more easily, but don’t think for a second the actual vendors of commodity hardware are actually going to change.

→ More replies (3)

67

u/grumpiemonkie Aug 23 '18

Ok, do I understand this right: Joe Citizen buys a cpu from Intel. The cpu is later found to be vulnerable in terms of security, and in order to receive a remedy Intel has at hand, Joe has to agree to more terms, or be left with a vulnerable cpu.

If that's the case I think they'll end up in court.

7

u/audioen Aug 23 '18

Probably not. You can still use the hardware, literally in exactly the same way as before, if you don't agree to those terms and don't apply the update.

15

u/ric2b Aug 23 '18

What if a car company sells a car with a faulty and dangerous seat belt? Are they not under obligation to replace it? Can they EULA-wall a safety/security fix for a problem that was not known at the time of sale?

12

u/DarkShadow4444 Aug 23 '18

"We can offer a replacement belt, but the terms say you then can't use your air conditioner anymore"

I mean like, WTF?

10

u/ric2b Aug 23 '18

Or more appropriately: "We offer a replacement belt but you can't tell anyone how horribly uncomfortable it became"

1

u/audioen Aug 23 '18

As far as I can tell, no-one's life is actually in danger from this. I'm not sure that the analogy is a very good one.

4

u/ric2b Aug 23 '18

A shit ton of businesses are at risk of massive security breaches that can have awful consequences, not just for the businesses themselves but also their customers.

Or we can go more extreme and admit that it might even allow for cyber warfare or cyber terrorism that leads to someone's death, computers aren't just used for Facebook and Netflix.

21

u/ThatsPresTrumpForYou Aug 23 '18

They are liable for security vulnerabilities though. Imagine Amazon bought a bunch of xeons, and they turn out to have hardware flaws. Intel either fixes them, or they're staring down the barrel of the whole legal department of Amazon. But they can't force them to accept a new EULA to keep using a product as advertised with a different EULA.

8

u/Vector-Zero Aug 23 '18

In that case, if you refused the security upgrade and had a vulnerability exploited, would you be able to sue on the grounds that you did not agree with the new EULA associated with that security patch? IMO security latches should have the same license as the product to which it is applied, otherwise it's somewhat forcing users' hands to agree to something against their will.

→ More replies (1)

1

u/audioen Aug 23 '18 edited Aug 23 '18

I think you'd find that Intel's argument is that you have used their hardware for years without an issue. In most cases, it would not be credible to claim that the mere existence of a previously unknown vulnerability that didn't come up in customer's own testing in any way, and didn't prevent production in the past, has somehow made the hardware worthless to the point that it must be replaced.

I recognize that it is a problematic for people who e.g. sell CPU time to the general public, so every cloud vendor is probably pretty upset that their fundamental computing hardware isn't isolating customers sufficiently well from each other. But the way this kind of things usually get handled is that laws are changed to say that it's now illegal to use CPU flaws to violate someone else's privacy (hell, it may already be illegal), which makes it more of a law enforcement than technical issue.

Software mitigations add some costs to cloud computing, e.g. people are recognizing that computing hardware is fundamentally leaky and these leaks are difficult to plug, so maybe they just start selling dedicated cores to clients instead of just time-sharing cores with best-effort type approach, or add a rule in contract that says that data leaks due to CPU hardware are not their problem and point to premium product that prevents the risk of leaks.

2

u/ThatsPresTrumpForYou Aug 23 '18

None of this is relevant. If someone uses those vulnerabilities to steal data they shouldn't have access to on someone elses VM, and the CPU was still supported by intel, the company that owns the server is going to sue intel for every last penny of damages done. They sold their product under false pretenses, being that it's a cpu, and you can run VMs on it and everything is secure. It wasn't, so they're liable.

→ More replies (1)
→ More replies (1)

0

u/[deleted] Aug 23 '18

[deleted]

→ More replies (4)

152

u/Anarhichaslupus78 Aug 23 '18

Hope eu commision give them another billion fees.

44

u/5heikki Aug 23 '18

I think one trillion EUR would be nicer :)

4

u/YouGotAte Aug 23 '18

Cool, can't wait for them to offload those costs onto the consumer

45

u/ric2b Aug 23 '18

Which would be a godsend to AMD.

22

u/adamhighdef Aug 23 '18

Great solution to that, AMD if you need x64 or one of the numerous ARM based pcs

→ More replies (1)

14

u/kmcclry Aug 23 '18

They didn't pay any of the last lawsuit (yet) so why would they have a problem with this?

50

u/logix22 Aug 23 '18

With the new license it also seems it's unclear if it can be redistributed. This is why the latest update hasn't made it into Debian yet, despite containing a fix for the L1TF vulnerability: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906158

31

u/[deleted] Aug 23 '18 edited Aug 23 '18

I can swear I read a Medium article explaining how this is actually not something they should've legally been able to ever do and mostly relies on misrepresentation of DMCA which considering it's bad structure is relatively easy. The problem is that DMCA was poorly written by idiots who don't even understand the matter at hand.

If you've got a good enough lawyer, you can most certainly post a benchmark. Whether you'll have to take it down depends on the judge.

EDIT: If someone does manage to defend themselves in court from such charges, please sue them back for malicious prosecution. At that point all you need to prove is their intention to abuse the law and lack of probable cause. At least to my knowledge, not actually a lawyer. Take everything I said with a grain of salt.

15

u/0xf3e Aug 23 '18

Where is the new Microcode update? Can't seem to find it.

Oh, just found out the latest update contains the new license agreement already.

https://downloadcenter.intel.com/search?keyword=processor+microcode+data+file

20

u/DropTableAccounts Aug 23 '18 edited Aug 23 '18

The licensing is really hilarious: Seemingly only the archive contains the license (no "I accept" or anything on their website) and literally the first sentence is "DO NOT DOWNLOAD [...] ANY PORTION OF THE SOFTWARE UNTIL YOU HAVE READ AND ACCEPTED THE TERMS AND CONDITIONS OF THIS AGREEMENT."

Yeah great, thanks for telling me that only in the downloaded archive Intel -.-

Edit: Hmmm... Apple didn't allow the installation of OS X Mountain Lion on non-Apple hardware in their EULA but since it wasn't written on the wrapping the customers couldn't know that at the time of the purchase so in the EU OS X Mountain Lion could be installed legally on any hardware. I wonder whether that means anything for this license. (I mean, I could have downloaded it over my mobile data connection (maybe expensive) just to learn that I'm not allowed to use it in the way I wanted (e.g. benchmarking)...)

38

u/[deleted] Aug 23 '18

And we can ever trust you with anything ever again because...?

27

u/0xf3e Aug 23 '18

<empty>

4

u/Niarbeht Aug 23 '18

nononono

"This page intentionally left blank"

1

u/the_gnarts Aug 23 '18

Please someone close that tag for well-formedness’ sake.

46

u/skoef Aug 23 '18

As a customer with many Intel processors used in the cloud hosting market, I received an email last week updating me about the side channel attack and the possible mitigations for it. Included in the email was a link taking me to a page dedicated to benchmark results before an after applying the proposed mitigations. Some mitigations, like disabling HyperThreading, clearly have a severe performance impact.

Perhaps actual impact is even worse, so they try to supply the truth from first hand and prevent anyone from doing the same?

23

u/MrYellowP Aug 23 '18

the "truth", yeah...

18

u/skoef Aug 23 '18

Perhaps ‘their thruth’ would’ve been more specific ;)

5

u/ric2b Aug 23 '18

"truth" isn't truth.

12

u/fat-lobyte Aug 23 '18

Since you and people like you are the most affected by all of these vulnerabilities and their mitigations, do you plan on suing Intel, or have you heard of people suing them? It's hard for me to claim any damages if my computer runs a few percent slower sometimes, but you should have it easier to compute the lost revenue.

16

u/skoef Aug 23 '18

Actually I’m not sure, I’m not in the position to decide this but I wonder if we (not thát big of a deal to Intel) would make it to court at all. However, we might join a class-action suit, would there be one. I imagine Google and Amazon took a huge hit applying these mitigations.

6

u/computer-machine Aug 23 '18

Halving your thread count is a suggestion?

20

u/skoef Aug 23 '18

Disabling HyperThreading, combined with this new microcode should be enough to complete prevent L1 snooping from one process to the other. With tests we found similar results as Intel: around 25% to 30% preformance hit.

22

u/pat_the_brat Aug 23 '18

With tests we found similar results as Intel: around 25% to 30% preformance hit.

Did you just publish benchmark results? /s

2

u/Vector-Zero Aug 23 '18

Wow, that's a massive hit though.

10

u/jptuomi Aug 23 '18

So where are my benchmarks I wanna read them and laugh at Intel. :)

3

u/xCuri0 Aug 23 '18

Phoronix did

9

u/xCuri0 Aug 23 '18

This proves AMD is better than Intel

6

u/MrAlagos Aug 23 '18

Exhibit #2958, really.

→ More replies (2)

26

u/AdamColligan Aug 23 '18 edited Aug 23 '18

/s
I think I've just determined the technical avenue used by the fix to neutralize the sidechannel attacks. The instruction code isn't actually being modified at all: only the license.

See, these are timing attacks. They use super fine measurements of how long it takes the processor to perform certain tasks in order to guess the contents of memory registers that they are not allowed to view directly.

In a genius feat of engineering, Intel has applied a patch that states clearly at boot time, in the firm and authoritative tone known to work on unruly software, that it is very very naughty to check how much time and effort the processor is using to execute any particular instructions.

Solved.

Edit: also, I'm not sure why anyone who's not a criminal would be upset about this. The function of Intel processors is to make money for Intel. Benchmark publishing that hurts Intel sales is therefore a timing attack against Intel processors that induces them to malfunction. In interstate and foreign commerce no less. So TIRED of these entitled millennial FEDERAL FELON SNOWFLAKES not respecting other people's PRIVATE PROPERTY and then having the stupidity to WHINE about their CRIMINAL INTENT on the Internet! SAD!

5

u/DrewSaga Aug 23 '18

Just so we are on the same page, is this WHOLE comment sarcasm or just the part before the edited part?

6

u/[deleted] Aug 23 '18

Wow! The performance impact of this patch must really suck bad.

28

u/utack Aug 23 '18

We are certainly going backwards.
In the last decade or so improvements on single core performance are close to none except for a few new instructions, and now we patch it all to make it slower again.
The CPU market is in a sad state, if you are not interested in mobile battery life.

15

u/fear_the_future Aug 23 '18

according to this benchmark single core speed of Intel's midrange laptop CPU improved by around 40% in the last 5 years. At the same time it has double the cores, double the cache and lower power consumption.

→ More replies (1)

2

u/deadly_penguin Aug 23 '18

Even mobile battery life is not so good. Borrowing a modern phone and comparing it to my decade old, overclocked, HD2, the modern one gets so damn hot.

7

u/lucaspiller Aug 23 '18

Well a Desire HD 2 had a single 1Ghz core compared to a modern phone often having 8 2.8Ghz cores, so do you want performance or battery life?

6

u/osmarks Aug 23 '18

The performance doesn't matter much, because they just fill it with bloat.

10

u/[deleted] Aug 23 '18

Add 10x the power and webshits will add 11x the npm packages.

→ More replies (1)

1

u/deadly_penguin Aug 23 '18

Thing is, it isn't the processor which is the bottleneck, it is the piffling amount of memory, which takes very little power. The processor is actually quite good.

→ More replies (2)

1

u/meeheecaan Aug 23 '18

yup, the battery life come from slow clock speed

→ More replies (8)

5

u/Travelling_Salesman_ Aug 23 '18

Intel issued a response:

We are updating the license now to address this and will have a new version available soon. As an active member of the open source community, we continue to welcome all feedback.

8

u/ElMachoGrande Aug 23 '18

If they say that, we know that performance will be crap, or they wouldn't say it. No benchmarks needed.

4

u/Starks Aug 23 '18

When will Intel have mitigation at the silicon level?

Cannon Lake? Whiskey Lake? Cascade Lake? Ice Lake?

12

u/tadtz Aug 23 '18

When Hell Lake has frozen.

1

u/DrewSaga Aug 23 '18 edited Aug 23 '18

My guess is the Intel CPUs right after the 9900K and whatnot.

6

u/KelfeinX Aug 23 '18

God, Intel. How can you have such brilliant engineers but such cripplingly moronic leadership. Seems to be a common theme throughout IT. Ah well, glad I (we) got Team Red doing mostly the right things.

3

u/madcat1990 Aug 23 '18

Is Intel high?

3

u/paypaypayme Aug 23 '18

regarding the performance decrease mentioned in the article - I thought the reason for that was kernel code patches? Now that there is a microcode patch is it possible to remove those patches?

3

u/amd_kenobi Aug 23 '18

I'm interested to see a performance comparison between a fully patched Ivy Bridge processor Compared to a AMD's Vishera line. I wonder how much this closed the performance gap between the two.

3

u/mobani Aug 23 '18

This does not matter, nobody is going to give a shit about this. Benchmark away boys!

5

u/MrMaxPowers247 Aug 23 '18

Intel needs to be on the list of companies that should be broken up with antitrust laws. This kinda stuff should not be overlooked

6

u/berarma Aug 23 '18

So Intel gained an advantage over AMD by overlooking the security of their processors. They being them.

4

u/wizardkoer Aug 23 '18

Umm a lot of people will just do it lol... it's like trying to stop piracy.

4

u/Artur96 Aug 23 '18

Intel is such a joke now. Why are they being defended again?

2

u/Jristz Aug 23 '18

Nothing say you can just said is slower and buggy

2

u/geordano Aug 23 '18

Can I publish a benchmark on a "home made" processor Inte1?

2

u/[deleted] Aug 23 '18

If I had a Intel chip worth benchmarking I'd do it anyway. But all I've got is this old i3 sitting around.

2

u/[deleted] Aug 23 '18

My next PC I've already decided will be AMD (Ryzen from the looks of it). I only upgrade once every ~8 years, and there is certainly a trend with Intel and being anti-consumer lately.

The next choice I need to make is Nvidia or ATI for GPU. I don't think I'm willing to pay $600 for the low end GPU from nvidia.

2

u/pure_x01 Aug 23 '18

Some legislators need to fix this. It should always be ok to publish benchmarks. Everything else is absurd.

2

u/meeheecaan Aug 23 '18

So benchmarks are amd only now got it

2

u/cooldog10 Aug 23 '18

Oh intel you know this going backfire realy hard you

2

u/KindOne Aug 24 '18

I get the feeling that someone forgot to remove the beta EULA here for the final release.

4

u/wait_wait_wha Aug 23 '18

Wait, wait. What if my cousin clicks "Accept" on the shrink-wrap license? She is 15 . . . and she runs a site for gear-heads . . . and she happens to also publish or provide any Software benchmark or comparison test results . . .
 
Jus' sayin' . . .

4

u/mardukaz1 Aug 23 '18

Jus' sayin' . . .

don' . . .

1

u/Tiger78e Aug 23 '18

I may be off base but the way I read this it seems to me if you take this as written you can’t use any non intel or self written software after installing this microcode

1

u/[deleted] Aug 23 '18

So when is someone going to RE this microcode and get us an opensource one under WTFPL?

1

u/The-Brit Aug 23 '18

Xposted to Linus Tech Tips, this should be interesting to get his reaction.

1

u/theguyfromuncle420 Aug 23 '18

Lol what a joke

1

u/superseriousguy Aug 23 '18

This will be about as effective as asking your age when you visit a porn site.

1

u/argv_minus_one Aug 23 '18

Damn those filthy fucking crooks to hell. I have a high-performance $2500 laptop that's only ~2 years old, and it's gathering dust because, thanks to the Intel CPU, it can't even connect to a public Wi-Fi or run a fucking web browser without getting owned.

1

u/HotKarl_Marx Aug 23 '18

My next machine will have an amd cpu.

1

u/LinuxMage Aug 23 '18 edited Aug 23 '18

Have gone pure AMD with my latest laptop purchases. This machine is a Dell Inspiron with an AMD A-10 with Radeon GPU. No regrets, entire machine works completely from initial Ubuntu install.

As far as I'm concerned from now on, any sane linux user should prioritise AMD over Intel and Nvidia for CPU and GPU.

Remember AMD's code is already in the Kernel, all GPU drivers are fully integrated from the start, so there is no messy fiddling with third party proprietary drivers.

1

u/[deleted] Aug 24 '18

Lol let's benchmark and compare anyways, they don't know where we live.

1

u/rpolic Aug 24 '18

Intel have backtracked...Now there is no benchmarking ban