Monocultures proved multiple times they were risky not only in the IT world. When you plant only one type of vegetables, you risk losing everything when an insect or a disease chooses you. Today, time has come for Intel CPUs to suffer.
Intel's monopoly 🔗
Intel is a leader in CPU for many decades and sometimes it becomes a monopoly. It's like this for at least ten years. AMD is just recovering thanks to its new Zen architecture after ten years of despair. Intel is alone in the server world (Xeon are everywhere) and only some left overs is shared to AMD in the laptop/desktop world. We can also notice that those last 7 years, CPU's performances stalled a bit. My current computer hasn't changed for six years and is still competitive today (but it's another story). The actual monopoly is a strong monoculture of Intel CPUs in the amd64 world.
So what ? 🔗
Well, a security breach has been found. We still don't know everything as there is an embargo for now to let some time to the devs to publish patches. Apparently every Intel systems are affected (from the last 10 years).
This breach comes from a bug in the hardware architecture of the cpu. There is a patch for the linux kernel but it comes with a major drawback. There is a 5 to 50% performance loss on some syscalls
We also now know that AMD isn't affected thanks to a second patch.
Official logo of the Meltdown attack
Is it serious SERIOUS or just serious ? 🔗
It is SERIOUS. This breach is exploitable on many levels. Virtualized systems are impacted. Apparently it can even be used through specially crafted javascript.
So, even a personal machine could be affected through a web page. Every VM hoster is probably patching as soon as possible.
We don't know for now every details but as usual we don't know if it's already used in the wild.
Official logo of the Meltdown attack
What to do ? 🔗
Patch as soon as your OS release the update.
And for the next time, buy some AMD system to lessen the Intel monopoly. The new Zen architecture is performing more or less the same as Intel and you can have more cores for the same price.
A bit more reading : 🔗
PS : 🔗
We have a lot more information. First there is 2 breaches. One called Spectre and another one Meltdown and there is now an official website which confirms more or less everything we suspected. It's still unclear if AMD and/or ARM is affected or not.
PS2 : 🔗
05/01/2018 : We now know that this breach can be exploited from javascript. Web browsers need to be patched. You could disable javascript while waiting for a patch. You'll see that the web from 2018 is quite fast without js.