At this point I'd like to try and involve our more advanced users. Folks are talking about disabling hyper-threading in ones BIOS. This to avert the effects of Intel Micro code vulnerabilities.
This seems a bit radical. Can someone put this in perspective for me?
1. How vulnerable am I as an average user?
2. Is it worth the up to 30% hit in performance to guard against this vulnerability?
Should I blame turrmmy or is this a French thing?
30% is rather extreme; for most workloads the hit is much lower, particularly for user workloads, although it likely will still run in the realm of 10 - 15%, based on what I've read.
The likelihood of having your PC compromised by this is essentially 0; it's not (at least currently) a way to get malware on your computer. It IS a way to steal information OFF your computer; passwords, account information, that sort of thing. However, the only successful demonstrations of these attacks that I am aware of required something like HOURS to get BITS of data.
As a matter of prudence, anyone running a server with sensitive information should make sure they have all patches and BIOS updates applied. Depending on the sensitivity of the information, they may also want to disable hyper-threading.
For ordinary users.........well, let me put it this way........<I'M> not going to disable HT, and I imagine that I am more paranoid than most. I've applied the patches and the BIOS updates, and for my day-to-day operations, I haven't noticed a significant performance impact. As always, your mileage may vary.