Notices by RootWyrm 🇺🇦:progress: (rootwyrm@weird.autos), page 2

#infosec people, THIS is big and you need it in front of management RIGHT NOW.

MITRE has informed the CVE board members that effective TONIGHT, funding to run CVE and CWE is effectively gone. The US federal government contracts MITRE to run these programs including both management, operations, and infrastructure.

This not only could but almost certainly will result in disruptions to CVE and CWE including a halt of all operations if new contracts/funding are not secured.

@silverwizard one look at YouTube comments answers that question. They gave up on it long, long ago because spammers and scammers drive clicks.

@silverwizard a perfect example of this is the LePotato AMLogic boards. Basically none of them have a valid or legal license to the firmware. You HAVE to use incredibly specific versions of everything because of cryptographic signing and encryption, which not only can you not build, *they* can't build or obtain. DTB is completely worthless because the problem is the encryption and signing.

@silverwizard nobody writes it up because honestly, it's borderline impossible to distill into anything resembling that. For the overwhelming majority of Made in China stuff, it is absolutely impossible because you're quite literally dealing with pirated closed-source binary blobs.

No, seriously. Most of those boards do not have a valid license to the processor and rely on very specific versions because that's what they were able to pirate.

@ryanc @cR0w @mochabeau @soatok wait, wait, hold the fuck on.
Stop.
Back up.

THERE ARE FUCKING NORMAL PEOPLE IN INFOSEC?!
SINCE FUCKING WHEN!?

@silverwizard also bear in mind that as of two days ago, ALL supply from everyone evaporated. Customers are scrambling to get hard commits for every single piece of already onshore hardware for literally everything.
And I do mean *everything*.

@silverwizard yeah. Honestly the only way you'll get numbers on a single server is Dell/Lenovo/HPE/etc. and it'll be a 9+ month wait unless you have a multi-million per-quarter relationship.

MOQs on ASRockRack and Mitac/Tyan are... prohibitive to say the least. The delusional are simply buying up all the production, continuously. I can get singles but I only do full cab HPC stuff these days.

@silverwizard sure, if you toss cost considerations out, there's options.
Except my point is, there isn't.

I am VERY good at sourcing hardware, thanks to 30+ years as an ODM/OEM. And I could not get you an RTX6000 Blackwell for anything, and the soonest I could get you an H100 is "maybe."
This is not factoring in tariffs.

It's just the fact that you are fighting every idiot on Earth for some of the worst yields I have ever seen. And NV is restricting most of the supply to high-profit ODM.

@silverwizard so, ballpark, it very much depends on the GPU class. That's your 90% cost, no joke.

ASRock 8U8X-TURIN2 I can't give numbers on, as it's prelim. So, you'd be looking 4U8G-GNR2.

Base chassis, ~$8-10k.
CPU, >=$6k.
RAM, >=$4k
GPU, minimum is going to be NV L40S - MINIMUM.
Those are $12k. Each. Minimum. To actually get them expect to pay $20k. Tariffs push that to $19k before 'fuck you' premiums. That's PER GPU and only 48GB which limits the models significantly.

@silverwizard hoooooboy... uh, exactly how many and what flavor? Also, who's paying? Because, well, you are NOT gonna like the numbers.

@silverwizard depends what _exactly_ you're looking for. Supermicro got themselves on my blacklist. Minisforum is okay if you want a desktop playing dressup, but I don't fully trust them long-term yet.

WaPo: Democracy Dies in Darkness.

That's why Jeff Bezos has ordered all light bulbs removed and smashed immediately.
Anyone found in possession of a flashlight in the newsroom will be shot.

@GossiTheDog but really, if you're trying to get a 5000-series card: Don't.

@silverwizard motherboard manufacturer's QVL, or find an expert like me who knows things.

@silverwizard which is the absolute last thing you should ever use it for. Because it is almost always wrong in every possible way.

@silverwizard that isn't even in the top ten of the things it gets completely wrong.

@silverwizard @hachyderm I feel like anyone who ever wants to run a Fedi instance of any flavor, must both read and subscribe to the Parable of the Nazi Bar, and demonstrate comprehension of the paradox of tolerance.

@GossiTheDog well, here's where it gets complicated. Read that article. We (as in .NET, speaking as a member of the Foundation and NOT FOR) do have reasons.

Basically per MS, *.azureedge.net is a TEMPORARY solution only because of the CDN going poof, and customers should migrate to a custom domain ASAP. So, azureedge.net *is* essentially going away. Just not immediately going away.

@GossiTheDog so I can explain the whole "use azureedge.net wait no don't" thing.

Microsoft is providing a method to migrate to Azure Front Door while retaining the *.azureedge.net domain, but passive (automatic) migrations will only get best effort.

https://learn.microsoft.com/en-us/azure/cdn/migrate-cdn-to-front-door-retain-edge-domain

@GossiTheDog in this case, they actually did. The plane did a fast, hard turn consistent with an emergency return to airport, and was falling at over 5000ft/min.

It's confirmed reliably that he was on the plane. And it's possible - even likely - the plane suffered something that easily could cause a crash. Not necessarily being shot down. Just no proof one way or the other yet.