spectre vs

Speculative processing, the technology exploited by the Meltdown and Spectre bugs, is vulnerable in yet another way, and the fix could impact your performance by 2-8 percent.

推测性处理是Meltdown和Spectre漏洞所利用的技术，它以另一种方式易受攻击，该修补程序可能会对您的性能造成2％到8％的影响。

The exploit, named , was jointly disclosed by Google and Microsoft yesterday, and affects all major processors—Intel, AMD, and ARM. that modern web browsers are already patched thanks to Spectre fixes, and that system-wide patches have been sent to partners. Those patches, however, will affect performance, and will not be turned on by default.

谷歌和微软昨天共同披露了名为的漏洞，并影响了所有主要处理器-英特尔，AMD和ARM。 表示，由于Spectre修复，已经对现代Web浏览器进行了修补，并且已将系统范围的修补程序发送给合作伙伴。 但是，这些补丁会影响性能，并且默认情况下不会打开。

Here’s Tom Warren, :

这是汤姆·沃伦(Tom Warren) ：

Intel has already delivered microcode updates for Speculative Store Bypass in beta form to OEMs, and the company expects them to be more broadly available in the coming weeks. The firmware updates will set the Speculative Store Bypass protection to off-by-default, ensuring that most people won’t see negative performance impacts.

英特尔已经以OEM形式向OEM提供了Spectrotive Store Bypass的微代码更新，该公司预计它们将在未来几周内面市。 固件更新会将Speculative Store Bypass保护设置为默认关闭，以确保大多数人不会看到负面的性能影响。

“If enabled, we’ve observed a performance impact of approximately 2-8 percent based on overall scores for benchmarks like SYSmark 2014 SE and SPEC integer rate on client 1 and server 2 test systems,” explains Leslie Culbertson, Intel’s security chief.

“如果启用，基于SYSmark 2014 SE和SPEC整数速率在客户端1和服务器2测试系统上的基准测试的总体得分，我们观察到的性能影响约为2-8％，”英特尔安全负责人Leslie Culbertson解释说。

It’s up to users, then, to decide whether they want to prioritize security or performance. But how does this new exploit work? Here’s a simple to understand summary of the problem from Red Hat:

然后，由用户决定是否要优先考虑安全性或性能。 但是这个新漏洞利用是如何工作的？ 以下是Red Hat对问题的简单理解：

Image credit:

图片来源：

翻译自:

spectre vs