• 2 Posts
  • 85 Comments
Joined 2 years ago
cake
Cake day: July 30th, 2023

help-circle

  • Software passkeys can’t provide attestation and don’t. A service requiring it would reject every apple and google device too. Its a feature for hardware like yubikeys and smart cards used by governments to ensure it’s not a knockoff with backdoors.

    No thats actually not an issue at all if your device is secure and uses full disk encryption.

    Oh I see your computer is secure well then nothing to worry about 🤣

    If i want to write down my private key on a piece of paper and type it in by hand then thats my issue to deal with and not theirs.

    With a hardware FIDO2 key, the private key never leaves the device, instead it signs challenges. Malware on the PC can’t access the private key and make it’s own copy.

    Using software keys, they are at least encrypted in the vault until you open it, then there’ll be a window of time with a plain copy in memory that malware can potentially grab.

    Your plaintext private key file can be stolen by malware easily and immediately. You would actually be better off with it written on a post it note.

    Course in real life malware is gonna be stealing your browser cookies to gain access to your accounts and avoid the whole keypass thing. In the world that FIDO was born, authentication is happening all the time and any possibility of key theft is considered a compromise.




  • calamityjanitortoSelfhostedApparent issues with ZFS on RPi 5
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    1 month ago

    Ah kay, definitely not a RAM size problem then.

    iostat -x 5 Will print out per drive stats every 5 seconds. The first output is an average since boot. Check all of the drives have similar values while performing a write. Might be one drive is having problems and slows everything down, hopefully unlikely if they are brand new drives.

    zpool iostat -w Will print out a latency histogram. Check if any have a lot above 1s and if it’s in the disk or sync queues. Here’s mine with 4 HDDs in z1 working fairly happily for comparison:

    Here's mine with 4 HDDs  in z1 working fairly happily for comparison

    The init_on_alloc=0 kernel flag I mentioned below might still be worth trying.



  • calamityjanitortoSelfhostedApparent issues with ZFS on RPi 5
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    1 month ago

    After some googling:

    Some Linux distributions (at least Debian, Ubuntu) enable init_on_alloc option as security precaution by default. This option can help to prevent possible information leaks and make control-flow bugs that depend on uninitialized values more deterministic.

    Unfortunately, it can lower ARC throughput considerably (see bug).

    If you’re ready to cope with these security risks 6, you may disable it by setting init_on_alloc=0 in the GRUB kernel boot parameters.

    I think it’s set to 1 on Raspberry Pi OS, you set it in /boot/cmdline.txtI think.

    Exhaustive ZFS performance tuning guide


  • calamityjanitortoSelfhostedApparent issues with ZFS on RPi 5
    link
    fedilink
    English
    arrow-up
    10
    ·
    1 month ago

    sync=disabled will make ZFS write to disk every 5 seconds instead of when software demands it, which maybe explains your LED behavior.

    Jeff Geerling found that writes with Z1 was 74 MB/sec using the Radxa Penta SATA HAT with SSDs. Any HDD should be that fast, the SATA hat is likely the bottleneck.

    Are you performing writes locally, or over smb?

    Can try iostat or zpool iostat to monitor drive writes and latencies, might give a clue.

    How much RAM does the Pi 5 have?


  • OpenAI noticed that Generative Pre-trained Transformers get better when you make them bigger. GPT-1 had 120 million parameters. GPT-2 bumped it up to 1.5 billion. GPT-3 grew to 175 billion. Now we have models with over 300 billion.

    To run, every generated word requires doing math with every parameter, which nowadays is a massive amount of work, running on the most power hungry top of the line chips.

    There are efforts to make smaller models that are still effective, but we are still in the range of 7-30 billion to get anything useful out of them.


  • Personally I think it’s fallen out of fashion. For my blog I’d either use a meme or other dump picture for each post. When generated images first came out I used a few for blog posts, it was new and interesting and said “I’m interested in technology and like playing around with new things”.

    Nowadays I’m back on the meme pics. I feel now it’s so much easier to generate images, it more says “I want to look professional but also spend no money and have no standards”.





  • lol. Nicholas Kristof was in Beijing at the time, his contemporaneous article was critical of China and the CPC, but said “There is no massacre in Tiananmen Square, for example, although there is plenty of killing elsewhere.” The original article is paywalled, but here is a 2004 interview where he repeats that no one died in the square, and sticks to his death toll estimate of 300-800.

    The Chinese Red Cross deny saying that, so I mean insert your own conspiracy for that one. No idea who the Swiss Ambassador was at the time, the reference is to a book.


  • Like Hawke said it seems like the graphics card or driver crashing. Very hard to troubleshoot, especially when it’s random. Bazzite probably already has very recent drivers, there’s this post on the bad website listing some things to try. This stuff can lead to superstitious thinking, with people changing something, rebooting to have it work fine for a while then they post that change as if it fixed it.

    God speed.



  • This is why I find this stuff so bewildering, even Wikipedia says no one died in the square. It was hectic around Mudixi, with buses of soldiers being torched and the burnted bodies being strung up. People there were absolutely shot at and killed.

    It was an insane week with a lot happening, many different groups with their own motives, and so many details unclear. It’s weird that anti China rhetoric insists on something that didn’t happen, pushing a false narrative that’s so easy to dispell and distracts from the real violence and politics of the time.


  • Your motherboard wouldn’t happen to be an AsRock? There’s been reports of ASRock mobos in particular causing problems with 9000 series AMD chips, especially the X3D. Mate of mine running windows has been having it crash especially when idle at desktop.

    I’m not familiar with a green Linux equivalent to the BSOD. Is it completely green? In that case it may be a graphics problem…



  • My understanding is that it’s technically against their TOS but loosely enforced. They don’t specify precise limits since they probably change over time and region. Once you get noticed, they’ll block your traffic until you pay. Hence you can find people online that have been using it for years no problem, while other folks have been less lucky.

    Basically their business strategy is to offer too-good-to-be-true free services that people start using and relying on, then charging once the bandwidth gets bigger.

    It used to be worse, and all of cloudflare’s services were technically limited to HTML files, but selectively enforced. They’ve since changed and clarified their policy a bit. As far as I’ve ever heard, they don’t give a toss about the legality of your content, unless you’re a neo Nazi.