Hacker News new | past | comments | ask | show | jobs | submit login

That's weird. I don't think anyone has measured these mitigations at a 50% perf hit even on crafted workloads. I wonder if something else is going on.



15% of pure cpu, but that doesn't take the consequences of the CPU improvement in other systems (e.g. crypto fs leading to higher iop rates, etc).


Running insecure performance enhancing kernel mods to speed up crypto fs....

It's a self defeating performance tip!


TBH there's different threat models there. A crypto fs makes sense if you're worried about a box getting stolen, while spectre/etc aren't a concern if you're running regular userland stuff on a single-user box.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: