A Basil Plant

@A Basil Plant@lemmy.world
4 Post – 40 Comments
Joined 10 months ago

InfoSec Person | Alt-Account#2

It works in a pretty neat way:

We’ve decided to create a new kind of OpenGraph tag—the same kind of tags you have on your website to determine which thumbnail image will appear on the preview for the page when shared on Discord, iMessage, or Mastodon. It looks like this: .

via: https://blog.joinmastodon.org/2024/07/highlighting-journalism-on-mastodon/

You haven't given us much information about the CPU. That is very important when dealing with Machine Check Errors (MCEs).

I've done a bit of work with MCEs and AMD CPUs, so I'll help with understanding what may be going wrong and what you probably can do.

I've done a bit of searching from the microcode & the Dell Wyse thin client that you mentioned. From what I can garner, are you using a Dell Wyse 5060 Thin Client with an AMD steppe Eagle GX-424 [1]? This is my assumption for the rest of this comment.

Machine Check Errors (MCEs) are hard to decipher find out without the right documentation. As far as I can tell from AMD's Data Sheet for the G-Series [2], this CPU belongs to family 16H.

You have two MCEs in your image:

  • CPU Core 0, Bank 4: f600000000070f0f
  • CPU Core 1, Bank 1: b400000001020103

Now, you can attempt to decipher these with a tool I used some time ago, MCE-Ryzen-Decoder [4]; you may note that the name says Ryzen - this tool only decodes MCEs of Ryzen architectures. However, MCE designs may not change much between families, but I wouldn't bank (pun not intended) on it because it seems that the G-Series are an embedded SOC compared to the Ryzen CPUs which are not. I gave it a shot and the tool spit out that you may have an issue in:

$ python3 run.py 04 f600000000070f0f
Bank: Read-As-Zero (RAZ)
Error:  ( 0x7)

$ python3 run.py 01 b400000001020103
Bank: Instruction Fetch Unit (IF)
Error: IC Full Tag Parity Error (TagParity 0x2)

Wouldn't bank (pun intended this time) on it though.

What you can do is to go through the AMD Family 16H's BIOS and Kernel Developer Guide [3] (Section 2.16.1.5 Error Code). From Section 2.16.1.1 Machine Check Registers, it looks like Bank 01 corresponds to the IC (Instruction Cache) and Bank 04 corresponds to the NB (Northbridge). This means that the CPU found issues in the NB in core 0 and the IC in core 1. You can go even further and check what those exact codes decipher to, but I wouldn't put in that much effort - there's not much you can do with that info (maybe the NB, but... too much effort). There are some MSRs that you can read out that correspond to errors of these banks (from Table 86: Registers Commonly Used for Diagnosis), but like I said, there's not much you can do with this info anyway.

Okay, now that the boring part is over (it was fun for me), what can you do? It looks like the CPU is a quad core CPU. I take it to mean that it's 4 cores * 2 SMT threads. If you have access to the linux command line parameters [5], say via GRUB for example, I would try to isolate the two faulty cores we see here: core 0 and core 1. Add isolcpus=0,1 to see the kernel boots. There's a good chance that we see only two CPU cores failing, but others may also be faulty but the errors weren't spit out. It's worth a shot, but it may not work.

Alternatively, you can tell the kernel to disable MCE checks entirely and continue executing; this can be done with the mce=off command line parameter [6] . Beware that this means that you're now willingly running code on a CPU with two cores that have been shown to be faulty (so far). isolcpus will make sure that the kernel doesn't execute any "user" code on those cores unless asked to (via taskset for example)

Apart from this, like others have pointed out, the red dots on the screen aren't a great sign. Maybe you can individually replace defective parts, or maybe you have to buy a new machine entirely. What I told you with this comment is to check whether your CPU still works with 2 SMT threads faulty.

Good luck and I hope you fix your server 🤞.

Edited to add: I have seen MCEs appear due to extremely low/high/fluctuating voltages. As others pointed out, your PSU or other components related to power could be busted.

[1] https://www.dell.com/support/manuals/en-us/wyse-5060-thin-client/5060_wie10_ug/system-specifications?guid=guid-cbeecec5-25ac-4103-8b4b-7d3a975e91f0&lang=en-us

[2] https://www.amd.com/content/dam/amd/en/documents/archived-tech-docs/datasheets/52259_KB_G-Series_Product_Data_Sheet.pdf

[3] https://www.amd.com/content/dam/amd/en/documents/archived-tech-docs/programmer-references/52740_16h_Models_30h-3Fh_BKDG.pdf

[4] https://github.com/DimitriFourny/MCE-Ryzen-Decoder

[5] https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html

[6] https://elixir.bootlin.com/linux/v6.9.2/source/Documentation/arch/x86/x86_64/boot-options.rst

7 more...

No. Fuck this shit. Don't do this.

It's already bad when everyone in this community shoves their distro down potential linux-converts' throats, thereby confusing them even more. Don't tell (or imply to) freshly converted users that they potentially made a wrong choice.

TF do you think they're going to do now? Move to fedora? The commenter above already stated that it was a hassle to install Ubuntu and now you're telling them to change distros already???

Ubuntu is still great... compared to Windows. Sure. It may not hold to your ideals. Compared to other distros, canonical may make some questionable choices. BUT THEY DON'T IMPLEMENT A FUCKING RECALL. So it's fine (for now).

Ubuntu is fine for newcomers. It has a shit ton of support online and you can easily search questions whose answers are likely to be found within the first few results.

So stop shoving distros down people's throats, especially fresh users.

I know you said:

Sorry if I sound too hard... take it with a laugh 😁

It doesn't come across that way. You come off as a gatekeeper.

For those of you still struggling (like me), here's an image:

::: spoiler spoiler :::

1 more...

Looks cool and I'm glad something new has arrived after nitter.

A few things, however:

  1. It doesn't look like I can view comments on tweets; I can only view the tweet. (Firefox mobile if that matters)
  2. It's pretty slow. It's not a big problem, but it is very noticeable.
  3. Somewhat irrelevant, but why is it called TWStalker? It's a... bit of a weird name. 'Stalker' makes me feel like I'm doing something illegal even though I definitely am not.
1 more...

Absolutely. Check out side channel attacks. The problem here isn't about software exploits, but hardware issues. https://en.wikipedia.org/wiki/Side-channel_attack

Some things to get you started: Meltdown and Spectre: https://en.wikipedia.org/wiki/Meltdown_(security_vulnerability), https://en.wikipedia.org/wiki/Spectre_(security_vulnerability)

Rowhammer: https://en.wikipedia.org/wiki/Row_hammer

These are exploited by malicious processes doing something to the hardware which may result in information about your process(es) being leaked. Now, if this is on your computer, then the chances of encountering a malicious process that exploits this hardware bug would be low.

However, when you move this scenario to the cloud, things become more possible. Your vm/container is being scheduled on CPUs that may/may not be shared by other containers. All it would take is for a malicious guest VM to be scheduled on the same core/CPU as you and try exploiting the same hardware you're sharing.

... I am 100% certain that if they switched to being individually wrapped tomorrow, a complaint about excessive packaging would be one of the top posts here.

You're undeniably right. The best situation would be to not have any wrapping at all... but with the crumb situation, that'd be another top post here :/

3 more...

You need to have end cards enabled.

Isn't Angstrom 10^-10 meters? And nanometers 10^-9 meters? So 20A (assuming A = Angstrom) is just 2nm?

Are they trying to say that by moving to this new era, they'll go single digit Angstrom i.e., 0.x nm?

8 more...

You're right, that's exactly what happened. If you look at the top of the trace, it says __handle_sysrq. Moreover, it's in the sysrq_handle_crash. That gets called when a sysrq combo is pressed.

See Wendover Productions' most recent video, "The Increasing Reality of War in Space" (from around 7:54); they talk about SpaceX launching unknown satellites and not reporting it either.

https://youtu.be/V0DmliiUFHk?t=7m54s

Huge +1 for BobbyBroccoli. Most entertaining & gripping documentaries I've watched in a long time. The two part Cloning documentary (Part 1, Part 2) was absolutely spectacular.

Lemmino is great as well.

That title is.... something

Will you (the community) be setting your username to your public username (a username you use everywhere) or something that's different from your public username?

Idk why, but signal feels more... personal(?) and I'd hate for general people to stumble across my signal account just by guessing whether my signal username is my public username.

I'd be fine if they got my Discord account, mastodon account, Lemmy account (they're all different usernames anyway) because they're public-ish accounts. Signal feels less public and I'd want to go with a username that only I can send to people I know.

It looks like there will be a message requests area and it looks like usernames can also be changed (should a username ever be doxxed).

I'm still on the fence.

Tiffany spotted

I knew about the "Thour" meme, but still didn't get why the directory turned compressed. My guess is that by licking the lemon, the directory folds in on itself, thus becoming compressed.

2 more...

In dark mode, the anchor tags are difficult to read. They're dark blue on a dark background. Perhaps consider something with a much higher contrast?

A picture of a website with a dark purple background and dark blue links.

Apart from that, nice idea - I'm going to deploy the zipbomb today!

https://www.gimp.org/news/2024/05/05/gimp-2-10-38-released/

This (possibly last) GIMP 2 stable release brings much-requested backports from GTK3, including improved support for tablets on Windows. A number of bug fixes and minor improvements are also included in this release.

If the release says that this is possibly the last GIMP2 stable release, it feels like GIMP3 is actually on its way. I understand your cynicism, but I'd be more optimistic this time around.

Edit: nvm I'm an idiot, I just got the joke.

https://en.wikipedia.org/wiki/Kerning

In typography, kerning is the process of adjusting the spacing between characters in a proportional font, usually to achieve a visually pleasing result. Kerning adjusts the space between individual letterforms while tracking (letter-spacing) adjusts spacing uniformly over a range of characters.

Probably most speeches by Conan O'Brien.

"Work hard, be kind, and amazing things will happen" at 23:09 in Conan O'Brien's 2011 Dartmouth College Commencement Address: https://youtu.be/KmDYXaaT9sA

Conan Addresses The Harvard Class Of 2020: https://youtu.be/VI2B3sZ1GaY

Very riveting stuff.

I recently had an issue with my computer freezing occasionally on a Deb12 Linux 6.1 where no errors showed up in syslog after a force reboot.

The way I finally found out about the issue was having dmesg open on a different monitor and waiting for the freeze to happen. Just before the freeze did happen, a number of error logs were spewed to dmesg - enough for me to catch a glimpse of the issue: intel WiFi.

I'm not saying that intel WiFi is your issue. I'm suggesting you keep dmesg -w open in another monitor (if you can) and go about your normal activity until a freeze happens.

That's not a very valid argument.

First and foremost, most devs probably see it as a job and they do what they're told. They don't have the power to refute decisions coming from above.

Second, in this economy where jobs are scarer than a needle in multiple haystacks, people are desperate to get a job.

Third, yes, there may be some Microsoft (M$) fan-people who end up being devs at M$. Sure, they may willingly implement the things upper management may request. However, I'm not sure whether that's true for most of the people who work at M$.

Your comment suggests to shift the blame to the devs who implement the features that upper management request for. Don't shoot the (MSN) messenger.

I'm glad you appreciate it! It's always fun digging into kernel internals and learning new things :D

I'm also open to criticism about the writing if you have any.

Hands down, one of the best tools I've used in a very long time:

https://github.com/PJ-Singh-001/Cubic

Download a Debian 12 standard live ISO (or with GNOME or any other iso) and you're good to go. I've compiled custom kernels with it too. If you want persistence, then you use mkusb.

1 more...

I've been using Hugo since 2017. I recommend it wholeheartedly.

This is such a cool photo - I'm going to use it as my laptop wallpaper (if that's okay 🤞)!

  • Got a text-based launcher (Lunar Launcher)

By this, do you mean this launcher for Android? Searching duckduckgo predominantly leads me to a launcher with the same name for Minecraft

Answered this with a screenshot in this thread:

https://lemmy.world/comment/10270597

Are you planning to scrap the CPU? I may be interested in it as I find faulty hardware fun to experiment on.

3 more...

Would you consider sending it to Austria? I'd pay shipping charges (if it's within reason lol). If you are, you can send me an email at: sneela-hwelemmy92fd [at] port87.com

1 more...

Use the live version (thd try without installing option). You can also remove the installer code if you really want to - I think Ubuntu uses ubiquity/subiquity.

See also: Nominative Determinism. If I remember correctly, there was a subreddit about this.

https://en.wikipedia.org/wiki/Nominative_determinism

Nominative determinism is the hypothesis that people tend to gravitate towards areas of work that fit their names. The term was first used in the magazine New Scientist in 1994, after the magazine's humorous "Feedback" column noted several studies carried out by researchers with remarkably fitting surnames. These included a book on polar explorations by Daniel Snowman and an article on urology by researchers named Splatt and Weedon. These and other examples led to light-hearted speculation that some sort of psychological effect was at work.

Worth pointing out that openboard doesn't support gesture typing. The fork I believe @tubbadu@lemmy.kde.social is talking about is:

https://github.com/erkserkserks/openboard/releases/tag/v1.4.5-gesture-typing

I use this one.

Ah, maybe the whole context wasn't added here, but I tried to download an XPI file for a different program that uses Firefox under the hood (called Zotero). I wanted to download the file to install it manually for the other program.

Firefox naturally thought that the XPI file was meant for itself and tried to install it. The XPI file was never intended for Firefox.

Edited to add: probably a pretty obscure thing that I noticed, but it's still bizarre.

I used to have the same exact one. For some reason, I can only find similar ones here (Amazon de, in):

https://www.amazon.de/ZYTB-Mauspad-Schreibtisch-Computertastatur-Teppich-World-Map/dp/B08HLN4B3B

https://www.amazon.in/Sounce-Extended-Spill-Resistant-Special-Textured-Anti-Fray/dp/B0C14RHW4H

However, searching for "world map large desk mat" yields you similar results.

I'm not sure where I bought that one now hmmm

If you are a student and also have Github student, DigitalOcean gives a huge amount of credits:

https://www.digitalocean.com/github-students

I've had my servers (VPS') with them for more than 5 years.

Just know that the credits are valid only for 2 months

Thank you, I'll send you an email within a day.

That checks out - thanks!