Impact of 'Meltdown' and 'Spectre' on Galaxy


#1

Could someone elaborate a bit on the impact of ‘Meltdown’ and ‘Spectre’ on Galaxy deploys? Are there some measures we need to take?


#2

Isn’t the issue at the kernel level? Meteor does not go as deep. As far as I saw, AWS is updating its machines, so if Galaxy runs on AWS it should be “fine”. But I don’t have in-depth knowledge of the subject.


#3

Nothing we can do about it really… It’s Intel etc. who have to fix things with kernel vendors… From the article:

The good news is that the attack is easiest to perform by code being run by the machine itself — it’s not easy to pull this off remotely. So there’s that, at least.

Also interesting:

The Meltdown fix may reduce the performance of Intel chips by as little as 5 percent or as much as 30 — but there will be some hit. Whatever it is, it’s better than the alternative.