Windows 11 has been quietly trading away a sliver of CPU performance since 2018, and most people running it have no idea.
The culprit is a set of mitigations Microsoft built into the operating system to defend against Spectre, a family of attacks disclosed that year against a CPU technique called speculative execution. Nearly every modern processor uses speculative execution to stay fast, guessing ahead at which instructions it will need and discarding the wrong guesses. The problem is that traces of those discarded guesses stick around in the cache, and a carefully written program can use them to pull sensitive data out of memory it was never supposed to see.
The specific variant Windows guards against, known as Spectre variant 2 or branch target injection, lets an attacker train a CPU's branch predictor to steer speculation toward kernel code that handles secrets. Windows's fix restricts speculation at the boundary between regular apps and the kernel, and that boundary is exactly where the performance cost shows up. Programs that call into the kernel constantly, like storage operations and code compiling, feel it more. Anything that stays entirely on the CPU cores without touching the kernel barely notices.
How much it actually costs
When Microsoft rolled out the mitigation in 2018, its own testing showed single-digit percentage slowdowns on Windows 10 machines with Intel's Skylake chips or newer. Older Haswell-generation processors took a bigger hit. Spectre's companion flaw, Meltdown, turned out cheap to patch, which left variant 2 as the one that actually cost performance.
That calculus has shifted since. Windows adopted a lower-overhead mitigation technique called retpoline back in 2019, and newer Intel and AMD silicon fixes parts of the problem directly in hardware, making the rest of the software-side defense cheaper to run. On a recent Ryzen or Intel chip, disabling the mitigation through the registry probably won't produce a measurable gain.
The toggle, and why it's riskier than it sounds
The setting lives in a registry value called FeatureSettingsOverride. A handful of free utilities exist to flip it without touching regedit directly. Setting it to 3, the value most commonly shared in online guides, disables Meltdown protection along with the Spectre variant 2 fix. A value of 1 turns off only the Spectre mitigation.
The risk isn't hypothetical. In 2021, researcher Julien Voisin found working Spectre exploits for Windows and Linux uploaded to VirusTotal, traced back to the commercial penetration-testing tool Canvas. In 2024, researchers at Vrije Universiteit Amsterdam demonstrated an attack called Native BHI that leaked kernel memory on Intel systems running Linux even with existing protections in place. Microsoft has kept publishing guidance for new variants since.
For a machine that only runs games or streams video, with no untrusted code ever executing, the exposure is minimal. For anything else, the handful of benchmark points on offer probably aren't worth the trade.
CDFiled by The Computing Desk
Laptops, desktops, processors, graphics cards and the operating systems that run on them.
More from this desk →
Be the first to comment
Join the argument. No password, just your email or a passkey.