这是一个创建于 2838 天前的主题，其中的信息可能已经有所发展或是发生改变。
英特尔向内核递交了补丁修复 Meltdown 和 Spectre 漏洞，但与间接分支预测（ Spectre variant 2 ）相关的补丁遭到了 Linux 之父 Linus Torvalds 的无情抨击，称该补丁是彻彻底底的垃圾。补丁会影响性能，所以英特尔不想默认启用，因为这会让基准测试结果显得很糟糕，因此英特尔的做法是在启动时候选择。Linus 认为即使从技术角度看这也是完全错误的。Linus 说，“有人正以不明的理由推动彻底的垃圾”，他称补丁是真的垃圾，“他们在做疯狂的事情，在做一些毫无意义的事情”，TMD 究竟发生了什么？
Intel 之前的 Meltdown 补丁想把 AMD 拉下水，把补丁的启用范围设成所有 x86 处理器，现在又搞这种。
https://www.solidot.org/story?sid=55297
Intel 之前的 Meltdown 补丁想把 AMD 拉下水，把补丁的启用范围设成所有 x86 处理器，现在又搞这种。
https://www.solidot.org/story?sid=55297
 |
1
whx20202 2018-01-23 10:38:17 +08:00
听说英特尔补丁有问题，英特尔让大家停止打，等待第二个
|
 |
2
f2f2f 2018-01-23 10:44:57 +08:00
这牙膏挤出来再想收回去不容易啊
|
 |
3
SuperMild 2018-01-23 10:47:45 +08:00
Linus 真帅啊！
|
 |
4
msg7086 2018-01-23 11:02:51 +08:00  6
Linus 怒斥英特尔工程师.avi
|
 |
5
PythonAnswer 2018-01-23 11:15:42 +08:00 via Android
支持
|
 |
6
ivencooli 2018-01-23 11:30:10 +08:00
Fuck U Nvidia & Intel
|
 |
7
xratzh 2018-01-23 11:32:26 +08:00 1
AMD，YES ！
|
 |
8
timwei 2018-01-23 11:40:39 +08:00 2
觉得跟 Linus 对肛的 Intel 工程师比较帅
https://lkml.org/lkml/2018/1/22/598 >> If we're going to drop IBRS support and accept the caveats, then let's do it as a conscious decision having seen what it would look like, not just drop it quietly because poor Davey is too scared that Linus might shout at him again. :) 笑出声 |
 |
9
ihainan 2018-01-23 11:43:10 +08:00
Linus 这暴脾气……
|
 |
10
TuringGunner 2018-01-23 11:56:53 +08:00
大佬都这么真性情的吗
|
 |
11
shijingshijing 2018-01-23 12:31:26 +08:00 via iPhone
就是要有这种大佬站出来治一治这一票大厂，幸好有他，RMS，eff，不然这些大厂迟早跟忝潮的那几个流氓巨头一样。
|
 |
12
geelaw 2018-01-23 12:42:11 +08:00 via iPhone 3
|
 |
13
287300325 2018-01-23 16:21:11 +08:00
这件事告诉我，你要喷别人的话，起码自己就是个大佬，这样才不会被反喷。
|
 |
15
liteyou 2018-01-23 16:41:13 +08:00 via iPhone
Linus 凭 Linux 和 git 两件作品早就封神了，随便 bb 都不太会掉下神坛来了，何况这货还在不停干怪，偶尔还干一把神
|
 |
16
GG668v26Fd55CP5W 2018-01-23 16:47:22 +08:00 via iPhone
Linus 人狠话也多
|
 |
17
mason961125 2018-01-23 20:12:35 +08:00
但是这个 path 是他自己 merge 的阿。https://github.com/torvalds/linux/commit/5aa90a84589282b87666f92b6c3c917c8080a9bf
|
|
18
mason961125 2018-01-23 20:12:45 +08:00
path -> patch
|
 |
19
begeekmyfriend 2018-01-23 20:19:51 +08:00
我脑补了传说中那张迭出中指的照片……
|
 |
20
402645707 2018-01-23 20:24:26 +08:00
|
 |
21
Flygoat 2018-01-23 20:39:22 +08:00
@geelaw #12 我也想不通为什么 Linus 拒绝 Grsecurity 或者 PaX 之类的安全技术进入主线内核。。。
|
 |
22
chih758 OP @Flygoat 很简单，因为 Grsecurity 的代码也是狗屎。
https://www.spinics.net/lists/kernel/msg2540934.html http://www.cnbeta.com/articles/tech/626015.htm |
 |
23
searene 2018-01-23 21:17:51 +08:00 1
“有人正以不明的理由推动彻底的垃圾”
原谅我笑了，这句话翻译的很好很传神。 |
 |
24
bukip 2018-01-23 21:23:38 +08:00
"英特尔的做法是在启动时候选择"
没明白，为什么启动时候选择就垃圾了？ |
 |
25
feverzsj 2018-01-23 21:28:09 +08:00
intel 的补丁确实是垃圾，数据中心应用场景性能下降 20~30%是普遍现象，但现在暂时没有其他补救方法，如果你的节点是自己独占的，那么的确没有必要开启，这也是 linus 鄙视 Grsecurity 原因，因为它们都没有从根本上寻找解决方法
|
|
26
mason961125 2018-01-23 21:31:44 +08:00 2
感觉 Linus 喷 Intel 的原因在于，Intel CPU 的锅，最终背的是 Linux。
|
 |
27
wangyucn 2018-01-23 21:35:14 +08:00 1
@bukip
解读： >Big simplification: Proper way to fix an hardware bug like this, is that newer cpu gets protected by default, and they answer they are when queried. So you can ask the CPU "what's your status on bug X" and the cpu answers "i'm good, you don't need to do anything" (newer fixed chips), or "i know about it but was already built, and need microcode update/special behavior to protect myself" (current chips with microcode update), "no answer / I'm not good" (old chips without update). So new stuff is protected, and you add more protection (and slowdowns, and special stuff) for older chips that don't know how to deal with it. What Intel is trying to do here, is to go the other way: the chips, even the new ones, will stay vulnerable by default, and when queried they say "I have a fix but I don't use it, you can enable it by asking !" and the kernel is supposed to enable it. It's terrible for a lot of reasons, like "boot an older os and it's vulnerable since it doesn't know to call this", "additional code to enable this feature has to run for all of eternity for new chips now, instead of having to run for older chips and being phased out over time", etc ... The reason why Intel does that seems obvious: by default the chip does not lose speed since the fix is not enabled, and so instead of "intel chips lose 30% speed over night because of a flaw" it becomes "intel adds a special security mode that protects you even more for critical applications, at the cost of some speed". Purely marketing speech and decision at the cost of proper engineering decisions, and they need and try to get OSes like Linux to play along. That's what he means by "[it] shows intel had no intention of fixing those flaws". Additionally there seems to be a second issue in that the quality and behavior of the patches they submitted are trying to hide this deceptively simple but technically terrible behavior by making it look/sound obtuse and complicated. In other words, intel is using its presence and weight to try and push a shitty solution, but one that is better for them marketing wise. Linus is flabbergasted to be treated like an idiot or a obedient drone that should apply such obvious abusive patches. （搬运自 reddit 和 hacker news， https://www.reddit.com/r/sysadmin/comments/7s47h9/linus_torvalds_is_not_happy_about_inte ） |
 |
28
choury 2018-01-23 21:39:59 +08:00 via Android
@Flygoat 就像每次取地址都对指针判空一样，虽然能防止 crash，但是根本方案还是代码不出错，不传空指针过来
|
 |
30
HandSonic 2018-01-23 22:34:05 +08:00
AMD, YES!
|
Select Language