Originally posted by ElectricPrism
View Post
I've wanted to switch so I could do an experiment -- go hardcore with a hardened profile with all mitigations in effect and compare that to a regular profile with no mitigations or things that will slow code down. Just curious how all these mitigations have effected us and that's the only real way to tell. Would also like to throw in two other tests -- GentooLTO+Hardened & GentooLTO+no_mitigations. I'll never do that, but damn am I curious about the results.
No disrespect to Michael, but his benchmarks with kernel mitigations enabled/disabled only show us so much and the only way to see the full extent of the damage done would be to use the same sources with and without the mitigations at the compiler level as well as the kernel level.
Leave a comment: