is there a version of randomx-sniffer that runs on linux, that github could run on their CI servers?

would it theoretically be possible to monitor rounding mode cpu register from outside the VM?

if you had detailed knowledge of the VM

and if it's not running inside an encrypted VM

^ if the VM itself is not encrypted

probably both of these should be possible for github

they don't encrypt the VM anyway

I would imagine anyone doing multi-tenant hosting with AMD Epyc would be using encrypted VMs tho

hmm possible

everyone writing articles about how the free CI platforms are all having to clamp down

nobody talking about how these miners can be detected and killed

it's as if people don't realize all of this stuff is open source and they can actually come and talk to the developers who created it all

the InfoQ article is particularly frustrating since I'm a frequent speaker at InfoQ conferences

it also is impossible to reach a person at these large companies so we can't even tell them in case they are unaware

right

almost seems like they dont really care

they must care at some level, or they wouldn't be talking about it to press

well ya acknowledgment and min effort

im just being pessimistic. it must cost them in some way 🤷‍♂️

what's an encrypted VM?

most ppl are dumb asses who dont care hyc