Microcode Revision Guidance
August 8 2018
https://www.intel.com/content/dam/www/pu...te-guidance.pdf

Gemini Lake 706A1 0x22 -> 0x28

Zitat von fylgja im Beitrag #134

---

July 13 2018
Intel currently is recommending to stop deployment of version 0x26 and revert to the previous production version 0x22.
Intel will provide an update on progress in 2 weeks.

---

Just in case people have not noticed yet: all microcode updates that fix SSBD also fix L1TR, so Intel upstream microcode releases 20180703 and 20180807 are about SSBD+L1TR mitigation.

We just did not notice that extra bit set in the CPUID leafs at the time ;-)

And yes, they also close the SGX info leak.

new-microsoftintel-microcode-update-kb4100347-breaks-haswell-e-and-broadwell-e-overclocks:

https://www.guru3d.com/news-story/new-mi...overclocks.html

Another side channel vulnerability. It's called CVE-2018-12130 ZombieLoad:
https://zombieloadattack.com/
https://techcrunch.com/2019/05/14/zombie...tel-processors/
https://zombieloadattack.com/zombieload.pdf
https://github.com/IAIK/ZombieLoad

https://mdsattacks.com/

Zombieload is not the only one.... we also have RIDL & Fallout
FYI: https://software.intel.com/security-soft...l-data-sampling

https://www.intel.com/content/dam/www/pu...ce_05132019.pdf

Was wondering if the chances of falling victim to a Spectre like attack is less if your running OSX?

Thanks

Don't patch your private systems for Spectre/Meltdown/etc. with those stupid microcode updates and please also disable the OS Integration. It just doesn't make any sense for a system that sits under your desk:
- Spectre/Meltdown/etc is over 1 year old and there is still no real world PoC available that works out of the box. Just use an up-to-date browser and your safe.
- It cripples the performance
- There are so many Privilege escalations for Windows/macOS/Linux. So why should anyone waste time and use a highly sophisticated "bug" when you could steal the Information with less effort?

Wonder if there is any performance data for what ever microcode updates that are out there? I would down grade my system if I knew which ones were best..

There are enough benchmarks out there. just use the latest non Spectre ucode and you are good. normally every new ucode update makes the pc a Little bit slower this is why overclockers mostly tend to strip their BIOS from ucodes or use a specific version

Oh god 906EA please be better than D6 crap.

Doubt the 906EA will improve anything, it's been half a year of reduced performance and wrong ring multis for my 8700K. Last one that was decent was B4 I think.

Zitat von random im Beitrag #507

---

Doubt the 906EA will improve anything, it's been half a year of reduced performance and wrong ring multis for my 8700K. Last one that was decent was B4 I think.

---

The reduced performance is also seen under Windows with some software that I use
With Cascade Lake-X, I am using old microcode, the latest ones are too bad

More for overclocking than direct performance at the same freq. Thing barely overclocks anymore, D6 made me downgrade from 4.8core/4.7cache to -100mhz on each with MORE voltage than it needed for faster with prior mcodes.. yet to try with DE that testing starts tonight.. id drop all this crap long ago and stick with like 84 or something that was GOOD, but stupid Microsoft likes to control your PC and blame security paranoia, so they end up shoving the current mcodes onto it anyway. (its MY system, let ME choose what to have or not to have)