Microsoft Kernel Patch CPU Before and After Benchmarks Thread


Recommended Posts

  On 09/01/2018 at 05:36, adrynalyne said:

Maybe? This isn't my forte. As it was explained to me, it matters if it is x86 code instructions being called with sys calls. The GPU isn't x86 as far as I know.

Expand  

This certainly is not a problem how processor executes x86 code. It is a problem here how user mode app communicates with the OS kernel and how processor handles that matter. All requests for hardware (graphics, disk, memory access) must be passed to the OS which then executes them. Apps do not write directly to GPU . They use OS to handle these calls which then calls graphics driver (at the OS kernel level) which then writes data and commands to the GPU. Therefore I think there is a great chances that these fixes affect 2D graphics as well as other data intensive tasks.

 

Here is the security problem (as far as I understand): cpu allowed user mode app to gain access to OS kernel data, which it should never do. CPU does not handle OS and user mode isolation securely enough.

 

Intel (and others) have used a "shortcut" to speed up things and created a security flaw which is severe.

 

But I must say I was amazed that the effect of this fix was so huge at my Lenovo Thinkpad T440s laptop. Did not expect that much. Maybe Lenovo will provide fixes to the drivers which will help here.

  On 09/01/2018 at 09:25, Jampe said:

Here are my results. FIrst test was right before update. After update I ran tests 3 times since I could not believe my eyes. Results are consistent. PC is Lenovo thinkpad t440s model 20ARS04W00

PerfRes1.gif

Expand  

Disk and 2D Graphics really suffer. I hope neither Microsoft nor Intel will stop optimising their patches. As they are now, I won't be updating. In fact, I will try to find updated Windows 10 ISOs with December patches and archive them if I ever need to reinstall Windows.

On the Azure front we're seeing slowdowns on our legacy Azure VM's running SQL Server. We're having to scale up the VM's to cope with the slowdowns.

 

Obviously this is all being logged and the extra costs will be argued.

 

Not seeing the same impact on Azure SQL Servers, there is an impact but probably only 10% extra as opposed to the ~25% on the VM's.

 

To make matters worse, MS scheduled production VM's for updates then threw the date out the window and upgraded when they felt like it. We're talking multiple end clients productions systems going down for anywhere from 30 mins to 5 hours without warning. A cluster###### if ever there was one.

 

Read some of the comments on this Azure status. I won't say which is my real life account...

https://azure.microsoft.com/en-us/blog/securing-azure-customers-from-cpu-vulnerability/

 

Don't forget that these patches are only part of the fix. According to the articles I've read, a BIOS update will also be required to fully patch the fix. I presume this is where a lot of the slowdowns will come from.

  On 09/01/2018 at 10:54, Daedroth said:

Don't forget that these patches are only part of the fix. According to the articles I've read, a BIOS update will also be required to fully patch the fix. I presume this is where a lot of the slowdowns will come from.

Expand  

the bulk of dell systems should get a bios fix today.

guys the following CERT advisory has links to lots of affected platforms and products, including timescales for fixes from vendors.

 

https://www.us-cert.gov/ncas/alerts/TA18-004A

 

we are currently assessing the entire global enterprise (20k endpoints, 8k+ servers) and we have reached out to NetApp, Cisco and other suppliers of enterprise kit.

 

Were using the tack, if it has a CPU, its potentially susceptible until we are told otherwise (called due diligence).

 

NetApp have confirmed their SAN arrays are  not affected. They dont permit execution of 3rd party code. Awaiting confirmation about Cisco kit.

 

*UPDATE** Cisco have responded. A mixed bad, some products immune but the bulk are affected.

 

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel

 

 

Asus have released the microcode fix/BIOS update for my S270 Strix H. 

 

https://www.asus.com/Motherboards/ROG-STRIX-Z270H-GAMING/HelpDesk_BIOS/

 

STRIX Z270H GAMING BIOS 1203
Improved DRAM compatibility.
Fixed SAMSUNG M.2 device issue.
Fixed SanDisk M.2 device issue.
Fixed AMD SSD device issue.
Fixed SteelSeries Keyboard issue.
Update CPU MicroCode.

 

Cinebench 4D BEFORE Win patch

CPU Benchmark = 966CB

OpenGL Bench = 140 FPS

AFTER

CPU Benchmark = 975CB ???

OpenGl Bench = 149.95 FPS ???

NVidia Driver update

CPU Benchmark = 962CB

OpenGL Bench =147.64FPS

Post Bios UPD

CPU Benchmark=942CB

OpenGL Bench=147.36

 

3D Mark timespy extreme BEFORE

3998

AFTER

3997 ????

NVidia Driver Update

3971

Post Bios UPD

3955

 

Novabench 

2713

After

2703

NVidia Driver update

2677

Post Bios UPD

2618

 

RealBench BEFORE

Image Editing 212,486/ Time 25.0745

Encoding 93,501/time 56.9829

OpenCL 113,529/ Ksamples per sec 20877

Heavy Multitasking 110,647

Time 68.9761

System Score 132,540

RealBench AFTER

Image Editing 208.830/Time 25.5135

Encoding 92,841/time 57.3881

OpenCL 113,529/ Ksamples/sec 20922

Heavy Multitasking 103,867/Time 73.4779

System Score 129,766

Post NVidia 

Image Editing 108,788/ Time 48.9757

Encoding 84,939/time 62.7273

OpenCL 113,529/ Ksamples per sec 20948

Heavy Multitasking 99,848

Time 76.4357

System Score 101,776 

Post Bios UPD

Image Editing 91,665/ Time 58.1242

Encoding 80,259/time 66.3843

OpenCL 112,996/ Ksamples per sec 20798

Heavy Multitasking 94,712

Time 80.5809

System Score 94,908

 

Hmm taking it with a pinch of salt, as i noticed post BIOS upd i left the OC as auto, so its at 4.37Ghz, not 4.5Ghz I benched with before...DOH

 

ill redo it tomorrow and update.

  On 09/01/2018 at 22:47, Mando said:

Asus have released the microcode fix/BIOS update for my S270 Strix H. 

 

https://www.asus.com/Motherboards/ROG-STRIX-Z270H-GAMING/HelpDesk_BIOS/

 

STRIX Z270H GAMING BIOS 1203
Improved DRAM compatibility.
Fixed SAMSUNG M.2 device issue.
Fixed SanDisk M.2 device issue.
Fixed AMD SSD device issue.
Fixed SteelSeries Keyboard issue.
Update CPU MicroCode.

 

Cinebench 4D BEFORE Win patch

CPU Benchmark = 966CB

OpenGL Bench = 140 FPS

AFTER

CPU Benchmark = 975CB ???

OpenGl Bench = 149.95 FPS ???

NVidia Driver update

CPU Benchmark = 962CB

OpenGL Bench =147.64FPS

Post Bios UPD

CPU Benchmark=942CB

OpenGL Bench=147.36

 

3D Mark timespy extreme BEFORE

3998

AFTER

3997 ????

NVidia Driver Update

3971

Post Bios UPD

3955

 

Novabench 

2713

After

2703

NVidia Driver update

2677

Post Bios UPD

2618

 

RealBench BEFORE

Image Editing 212,486/ Time 25.0745

Encoding 93,501/time 56.9829

OpenCL 113,529/ Ksamples per sec 20877

Heavy Multitasking 110,647

Time 68.9761

System Score 132,540

RealBench AFTER

Image Editing 208.830/Time 25.5135

Encoding 92,841/time 57.3881

OpenCL 113,529/ Ksamples/sec 20922

Heavy Multitasking 103,867/Time 73.4779

System Score 129,766

Post NVidia 

Image Editing 108,788/ Time 48.9757

Encoding 84,939/time 62.7273

OpenCL 113,529/ Ksamples per sec 20948

Heavy Multitasking 99,848

Time 76.4357

System Score 101,776 

Post Bios UPD

Image Editing 91,665/ Time 58.1242

Encoding 80,259/time 66.3843

OpenCL 112,996/ Ksamples per sec 20798

Heavy Multitasking 94,712

Time 80.5809

System Score 94,908

 

Hmm taking it with a pinch of salt, as i noticed post BIOS upd i left the OC as auto, so its at 4.37Ghz, not 4.5Ghz I benched with before...DOH

 

ill redo it tomorrow and update.

Expand  

Mando, is RealBench only for ASUS gaming boards bench utility? Thx for the update, btw :)

  On 10/01/2018 at 13:44, Yogurth said:

Mando, is RealBench only for ASUS gaming boards bench utility? Thx for the update, btw :)

Expand  

not 100% its via ROG aspect.

 

give it a whirl, it may work

http://dlcdnmkt.asus.com/rog/RealBench_v2.56.zip?_ga=2.161564219.660284626.1515594169-1054940240.1499777541

 

 

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft 365 Word gets SharePoint eSignature, now you can ditch third-party signing tools by Paul Hill Microsoft has just announced that it will be rolling out an extremely convenient feature for Microsoft 365 customers who use Word throughout this year. The Redmond giant said that you’ll now be able to use SharePoint’s native eSignature service directly in Microsoft Word. The new feature allows customers to request electronic signatures without converting the documents to a PDF or leaving the Word interface, significantly speeding up workflows. Microsoft’s integration of eSignatures also allows you to create eSignature templates which will speed up document approvals, eliminate physical signing steps, and help with compliance and security in the Microsoft 365 environment. This change has the potential to significantly improve the quality-of-life for those in work finding themselves adding lots of signatures to documents as they will no longer have to export PDFs from Word and apply the signature outside of Word. It’s also key to point out that this feature is integrated natively and is not an extension. The move is quite clever from Microsoft, if businesses were using third-party tools to sign their documents, they would no longer need to use these as it’s easier to do it in Word. Not only does it reduce reliance on other tools, it also makes Microsoft’s products more competitive against other office suites such as Google Workspace. Streamlined, secure, and compliant The new eSignature feature is tightly integrated into Word. It lets you insert signature fields seamlessly into documents and request other people’s signatures, all while remaining in Word. The eSignature feature can be accessed in Word by going to the Insert ribbon. When you send a signature request to someone from Word, the recipient will get an automatically generated PDF copy of the Word document to sign. The signed PDF will then be kept in the same SharePoint location as the original Word file. To ensure end-to-end security and compliance, the document never leaves the Microsoft 365 trust boundary. For anyone with a repetitive signing process, this integration allows you to turn Word documents into eSignature templates so they can be reused. Another feature that Microsoft has built in is audit trail and notifications. Both the senders and signers will get email notifications throughout the entire signing process. Additionally, you can view the activity history (audit trail) in the signed PDF to check who signed it and when. Finally, Microsoft said that administrators will be able to control how the feature is used in Word throughout the organization. They can decide to enable it for specific users via an Office group policy or limit it to particular SharePoint sites. The company said that SharePoint eSignature also lets admins log activities in the Purview Audit log. A key security measure included by Microsoft, which was mentioned above, was the Microsoft 365 trust boundary. By keeping documents in this boundary, Microsoft ensures that all organizations can use this feature without worry. The inclusion of automatic PDF creation is all a huge benefit to users as it will cut out the step of manual PDF creation. While creating a PDF isn’t complicated, it can be time consuming. The eSignature feature looks like a win-win-win for organizations that rely on digital signatures. Not only does it speed things along and remain secure, but it’s also packed with features like tracking, making it really useful and comprehensive. When and how your organization gets it SharePoint eSignature has started rolling out to Word on the M365 Beta and Current Channels in the United States, Canada, the United Kingdom, Europe, and Australia-Pacific. This phase of the rollout is expected to be completed by early July. People in the rest of the world will also be gaining this time-saving feature but it will not reach everyone right away, though Microsoft promises to reach everybody by the end of the year. To use the feature, it will need to be enabled by administrators. If you’re an admin who needs to enable this, just go to the M365 Admin Center and enable SharePoint eSignature, ensuring the Word checkbox is selected. Once the service is enabled, apply the “Allow the use of SharePoint eSignature for Microsoft Word” policy. The policy can be enabled via Intune, Group Policy manager, or the Cloud Policy service for Microsoft 365 Assuming the admins have given permission to use the feature, users will be able to access SharePoint eSignatures on Word Desktop using the Microsoft 365 Current Channel or Beta Channel. The main caveats include that the rollout is phased, so you might not get it right away, and it requires IT admins to enable the feature - in which case, it may never get enabled at all. Overall, this feature stands to benefit users who sign documents a lot as it can save huge amounts of time cumulatively. It’s also good for Microsoft who increase organizations’ dependence on Word.
    • It's always good to have an option to secure your stuff to another medium. I did that with DVD/CD collection, and run my own media server now. It's more convenient that way and no need for separate players anymore.
    • Google Search AI Mode gets support for data visualization and custom charts by Aditya Tiwari Google announced it is rolling out support for data visualizations and graphs for finance-related queries in Google Search's AI Mode. Introduced last month at the Google I/O 2025 keynote, the feature lets you analyze complex datasets and create custom charts simply using natural language prompts. The updated AI Mode lets you compare and analyze information over a specific period, Google explained. It generates interactive graphs and provides a comprehensive explanation for your questions. AI Mode utilizes Gemini's multimodal capabilities and multi-step reasoning approach to comprehend the question's intent while accessing historical and real-time information relevant to the question. For instance, instead of manually researching individual companies and their stock prices, you can use AI Mode to compare the stock performance of different companies for a specific year. Once the graph is generated, you can choose the desired time period using the mouse cursor and ask follow-up questions based on the data presented. These new data visualizations for finance queries are available to users who have enabled the AI Mode experiment in Labs. AI Mode was introduced earlier this year as an experimental feature in the US. The feature is an upgraded version of AI Overviews, and Google closely worked with AI power users through the initial development process. It uses the “query fan-out” technique to perform multiple related searches across subtopics and different data sources, then combines them to come up with a comprehensive response. Google updated AI Mode last month to use a custom version of the latest Gemini 2.5 model. It added several new features, including Deep Search, live capabilities, agentic capabilities of Project Mariner, a new shopping experience, and the ability to add personal context by linking Google apps. The search giant is planning to turn AI Mode into its bread and butter. It has begun testing ads for the feature, which will appear below and be integrated into AI Mode responses where relevant.
    • Guys, you should find another way to promote your deals... It's the third article in the last months that promote this deal for an upgrade from 10. Considering that upgrade from 10 to 11 is free it's a total non-sense.
    • Store should be a shrine of useful applications, vetted and verified. Easily sorted by publisher. Windows should start with not much installed and have things as options in the store. Not the wild west mess that it is. You could delete 95%+ of the crap on there and no one would notice. They need to add a better UI to the updates, it's awful right now.
  • Recent Achievements

    • Week One Done
      luxoxfurniture earned a badge
      Week One Done
    • First Post
      Uranus_enjoyer earned a badge
      First Post
    • Week One Done
      Uranus_enjoyer earned a badge
      Week One Done
    • Week One Done
      jfam earned a badge
      Week One Done
    • First Post
      survivor303 earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      431
    2. 2
      +FloatingFatMan
      239
    3. 3
      snowy owl
      212
    4. 4
      ATLien_0
      211
    5. 5
      Xenon
      157
  • Tell a friend

    Love Neowin? Tell a friend!