New
#300
What is KB after 17763.107 and one after that ?
I had my values 400 and 400 in tests.
I had used Inspectre tool when it came out and disabled both meltdown/Spectre so my values for disabled were FeatureSettingsOverride 3 and FeatureSettingsOverrideMask 3, if you enabled both with the tool you get FeatureSettingsOverride 0 and FeatureSettingsOverrideMask 3.
Now I rechecked what FeatureSettingsOverride 400 and FeatureSettingsOverrideMask 403, the PS script gives the same output values as 400/400 values.
So I don't know if there is a difference, to enable SSBD you would need 408 for FeatureSettingsOverride.
I am not sure on 400 verse 403 with FeatureSettingsOverrideMask as I didn't enable it or test it.
If you have installed the latest microcode, suggested by Intel, from a BIOS/UEFI update from the manufacturer of the system, or if you have installed the latest Microsoft microcode updates for 1803/1809, you don't need the old registry entries neither with 8 nor with 0 for FeatureSettingsOverride. So, just the Retpoline values of 400 for FeatureSettingsOverride and 400 for FeatureSettingsOverrideMask, are sufficient.
More info here
Enable Retpoline to mitigate Spectre variant 2 (CVE-2017-5715) Solved - Windows 10 Forums
" 408 for FeatureSettingsOverride ".........made my system slower in performance , I went to "0" ............
" I was hoping the reptoline would bring the I/O back up a bit but I am not seeing that at least with Crystaldiskmark. "........same on my rig ; Z97-K Asus .
Wish Asus will update BIOS , still on 2017-version.........
Have set both values on 400 , safe but certainly not faster then disabled....!
Always the question which to go for ; maximum protection ( costs performance) or go for speed ( maximum performance , no optimal protection )...............
Just for the record, and to avoid confusion, it's 'retpoline', not 'reptoline'.