00:16:14 is there a version of randomx-sniffer that runs on linux, that github could run on their CI servers? 00:30:23 would it theoretically be possible to monitor rounding mode cpu register from outside the VM? 00:30:55 if you had detailed knowledge of the VM 00:31:04 and if it's not running inside an encrypted VM 00:31:56 ^ if the VM itself is not encrypted 00:32:14 probably both of these should be possible for github 00:32:24 they don't encrypt the VM anyway 00:32:29 I would imagine anyone doing multi-tenant hosting with AMD Epyc would be using encrypted VMs tho 00:33:26 hmm possible 00:33:37 https://twitter.com/hyc_symas/status/1388285793794461698 00:33:54 everyone writing articles about how the free CI platforms are all having to clamp down 00:34:07 nobody talking about how these miners can be detected and killed 00:34:53 it's as if people don't realize all of this stuff is open source and they can actually come and talk to the developers who created it all 00:35:37 the InfoQ article is particularly frustrating since I'm a frequent speaker at InfoQ conferences 00:40:13 it also is impossible to reach a person at these large companies so we can't even tell them in case they are unaware 00:46:04 right 00:58:13 almost seems like they dont really care 01:00:13 they must care at some level, or they wouldn't be talking about it to press 01:03:05 well ya acknowledgment and min effort 01:03:44 im just being pessimistic. it must cost them in some way 🤷‍♂️ 03:07:13 what's an encrypted VM? 08:31:50 most ppl are dumb asses who dont care hyc