Lily Anatia

on a 1730507223 byte CSV file I tested, lrzip with updated libzpaq does manage to do better than current lrzip, but still does worse than zpaq: current lrzip (`-z -L9...

your CPU apparently has: ``` * FLUSH_CMD MSR is available: NO * CPU indicates L1D flush capability: YES (L1D flush feature bit) ``` and the script currently does: ``` _info_nol...

it should be possible to determine whether the hardware is vulnerable or not, but it looks unlikely that mitigations for these vulnerabilities will ever be implemented in Haiku: https://discuss.haiku-os.org/t/intel-bug-security/6394

the script currently doesn't recognize Power CPUs, and any unrecognized CPU is assumed to be vulnerable to all variants. https://www.ibm.com/blogs/psirt/potential-impact-processors-power-family/ mentions patches (both firmware and OS) to mitigate L1TF on...

some information about possible software and hardware mitigation is included here: http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf

it would be useful to at least detect whether the processor is vulnerable or not, even if there is no mitigation for it.

> The issue is likely to be that this has a significant performance hit for all those who don't care about Spectre, so you now have to gain another version...

I built armstub8-gic.bin with the following changes: ``` diff --git a/armstubs/armstub8.S b/armstubs/armstub8.S index f85eb521..188c0d55 100644 --- a/armstubs/armstub8.S +++ b/armstubs/armstub8.S @@ -65,6 +65,9 @@ #define SCR_VAL \ (SCR_RW | SCR_HCE |...

PR created: https://github.com/raspberrypi/tools/pull/115 > Do you have any numbers on the impact that this mitigation has? so far all the testing I've done shows no impact other than Spectre v4...

the PR wouldn't enable the mitigation by default (it's wrapped in a `#ifdef`). enabling it by default would definitely require more testing to determine what, if any, performance impact it...