Hi Sergey!

Yes, I know, we can switch off the patch(es) on our servers, but fortunately we 
have customers and we have to answer their questions if they have. 😉

These tests covering the business logic, which is a good starting point for 
what customers expect when installing the patches.

András

From: Sergey Mereutsa [mailto:s...@dqteam.com]
Sent: Tuesday, January 9, 2018 11:25 AM
To: For discussion among Firebird Developers 
<firebird-devel@lists.sourceforge.net>
Subject: Re: [Firebird-devel] Meltdown and Spectre

Hi!

Just for your information - if this is your own dedicated server and you do NOT 
run untrusted code on it (which can potentially steal your data and send to 
someone) - you can safely disable this patch.

Just because you do not defend yourself from yourself :)

Both vulnerabilities are LOCAL :)




--
Best regards,
 Sergey                            
mailto:s...@dqteam.com<mailto:s...@dqteam.com>


On Tue, Jan 9, 2018 at 11:52 AM, Omacht András 
<aoma...@mve.hu<mailto:aoma...@mve.hu>> wrote:
Hi!

Just for the shake of information.

Our test system running on Debian 9.3.
processor       : 7
vendor_id       : GenuineIntel
cpu family      : 6
model           : 23
model name      : Intel(R) Xeon(R) CPU           E5420  @ 2.50GHz
stepping        : 6
microcode       : 0x60b
cpu MHz         : 2500.117
cache size      : 6144 KB
…

We’ve done some test runs with the ’old’ kernel (linux-image-4.9.0-4-amd64) and 
the ’new’ one (linux-image-4.9.0-5-amd64).

No. of tests: 6014
No. of result checks: 253555   (checking column values, stored procedure 
results, etc.)

Average running time on 4.9.0-4: 466 secs (7 mins 46 secs)
Average running time on 4.9.0-5: 635 secs (10 mins 35 secs)

The database file and the tmp directory located on ramdisk.

András


__________ Information from ESET Mail Security, version of virus signature 
database 16706 (20180109) __________

The message was checked by ESET Mail Security.
http://www.eset.com

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to