• 0 Posts
  • 16 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle

  • How are the alternatives any better? Download a DEB that executes arbitrary code, signed with some .asc that’s sitting in the same webserver? Download an EXE?

    Your comment is so rambley that I can’t understand whether you’re criticizing the distribution method or the packaging. Both of those are very different in terms of attack surface, if you’re talking about supply chain attacks.




  • I could be wrong here, but I think the common interpretation here is wrong. The risk is not that the wires overheat and cause a fire. The risk is that the card draws too much current from a single 12V power rail on your PSU, sustained for a long time, and that burns out the power rail on your PSU.

    I have a 6950 XT that I used with a 850W PSU that was connected incorrectly according to the diagram, with multiple connectors coming off a single rail. After about 6 months, one day my SSD stopped working, and after some tinkering, I realized that if I plugged it into a different 12V connector, it started working! I had burned out one of the 12V rails on my power supply, and I strongly suspect it was my incorrect wiring into my 6950 XT that caused it. (edit: I got a new PSU and never looked back)




  • I’m a huge Doom (1/2/3/2016) fan but I’m not sure how I feel about this. Eternal just seemed like more or the same so I never even bothered playing it. The Dark Ages is starting to feel a little too Anime and just outside the whole space-based Doom universe. This just doesn’t seem like Doom to me and the gameplay looks like more of the same basically from the trailer.






  • I don’t see anyone else actually telling you how to figure out if you’re being DoSed, so I’ll start:

    Check your logs. Look at what process is eating your CPU in htop and then look at the logs for that process. If it’s a web application, that means the error and access logs for it. If you see a flood of requests to a single URL, or some other suspicious pattern in the log, then you can try blocking the IPs associated with them temporarily and see if it alleviates the load. Repeat until the load goes down.

    If your application uses a database, check your database logs too. IIRC postgres logs queries that take longer than 5 seconds by default, which can make it easy to spot a slow query especially during a time of high load.

    I don’t think DNS amplification attacks over UDP are likely to be a problem as I think most cloud providers filter traffic with forged src addresses (correct me if I’m wrong). You can also try blocking all inbound UDP traffic if you suspect a UDP flood but this will likely break DNS lookups for you temporarily. (your machine should not have any open UDP ports in any case though if you’re just running Lemmy).

    If you want to go next level, you can use “perf” to generate a system-wide profile and flamegraph which will show you where you’re burning CPU cycles. This can be extremely useful for troubleshooting performance or optimizing applications. (you’ll find that even ipfilters takes CPU power, which is why most DDoS protection happens on dedicated hardware upstream)


  • Steve/GN strikes me as the annoying guy who just waits you for you to make a mistake and then shouts GOTCHA and makes a video exposing why you’re an idiot to the world. There’s just this weird antagonistic tone/vibe I always get from Steve’s video. (IMHO LTT and GN are both great at what they do, and that’s why they’re both successful.)

    Edit: this is also a “there’s no such thing as bad publicity” situation. GN makes a 44 minute long video about this (lol) and I’m sure LTT will make at least one reply video. If they go back and forth, it’s just more content and clicks for both of them. Win win.



  • They always say the same opinions because it’s part of a massive astroturfing campaign by Chinese and Russian state actors. They’re both attempting to sow discord in the West and lay the foundation to ramp it up to interfere in the 2024 US election.

    Do you remember what a shit show Reddit became in 2016? We’ve seen this exact pattern before, where a deluge of people with the same carefully calibrated opinions on everything appear out of the blue. They want to create the illusion that there’s some popular movement towards all these inane opinions, and you can even see from the comments on this thread. They’re using the same known troll tactics to push this (eg. “Just asking questions”).

    This a good test of Lemmy’s moderation and federation model and will be indicative of how it fairs next year when these campaigns really ramp up. Good on the admins for taking this seriously and nipping it in the bud.