Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
Dravs
Mar 8, 2011

You've done well, kiddo.
I work in infrastructure.

E-mails are coming in about the new KPTI bug.

Looks like it's going to be worse than the old Pentium floating point bug. This will be a fun few weeks.

:smithicide:

Adbot
ADBOT LOVES YOU

Dravs
Mar 8, 2011

You've done well, kiddo.

Sickening posted:

So basically this shortcut has given intel a massive competitive advantage for the last decade in performance?

It's not really a shortcut, it's just architecture that they didn't realise (at the time) could be leveraged this way. Essentially the issue exists because when one of the affected chips has to do a calculation that has to be handed off to the kernel, it keeps the kernel loaded into temporary memory to make the processing faster rather than having to reload the kernel for every subsequent calculation (I think; it's a bit over my head as well tbh).

Some boffin somewhere figured out a way to exploit the kernel while it is loaded into temporary memory, allowing them to do all kinds of fuckery. The fix means that Intel chips will now have to call the kernel up every time it is needed rather than keep it in temporary memory which will slow down processing time hugely.

Honestly, I wouldn't be too worried about regular desktop computers since they don't really see the number of IOPs where this will really be a problem. The big issue will be seen on clusters where IOPs are required at a premium and things like SQL processing. That is why AWS and Microsoft will be so badly impacted because their butt processing is massive. I'm sure they will be able to brute force spend their way out of it, however a 30% slowdown across their entire estate is the thing of nightmares.

Edit: Also this only seems to be affecting CPU architectures in between Sandy Bridge and Coffee Lake (so like the 3000 series to the 7000 series?), so if you are still running a 2550k on your home PC like I am then you shouldn't see any problems.

Dravs fucked around with this message at 16:15 on Jan 3, 2018

Dravs
Mar 8, 2011

You've done well, kiddo.

Jaded Burnout posted:

When you say "in between" do you mean inclusive? As 3000 series are Sandy Bridge.

Also what's your source on this? I can't find any detail.

There was a tool that someone wrote to find out what is affected. I will try to find it again and edit this post with it.

Edit: Bear in mind that nothing is gospel at the moment, there is so much speculation and chaos we might as well be running around in Hyboria being chased by giant dick eating lizards.

Edit: Oh God, the exploits are starting to appear, AMD and Arm are also affected it seems?

http://www.theregister.co.uk/2018/01/04/intel_amd_arm_cpu_vulnerability/

Also, it looks like the CEO of Intel dumped as much of his stock as possible just before Christmas.

There is still an embargo on the actual information, but now I have seen some sources that all chips from the Pentium Pro onwards are affected, Jesus.

:tif:

From that article:

quote:

Finally, if you are of the opinion that us media types are being hysterical about this design blunder, check this out: CERT recommends throwing away your CPU and buying an non-vulnerable one to truly fix the issue.

lmao :tif:

:tif: :tif: :tif: :tif: :tif: :tif:

Pretty good article here if anyone wants to nerd out about it:

https://arstechnica.com/gadgets/2018/01/whats-behind-the-intel-design-flaw-forcing-numerous-patches/

Update: Just got some info from a security tech at one of our vendors. Some choice quotes:

quote:

Summary
Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal data which is currently processed on the computer. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to get hold of secrets stored in the memory of other running programs. This might include your passwords stored in a password manager or browser, your personal photos, emails, instant messages and even business-critical documents.

quote:

Scope
Desktop, Laptop, and Cloud computers may be affected by Meltdown. More technically, every Intel processor which implements out-of-order execution is potentially affected, which is effectively every processor since 1995 (except Intel Itanium and Intel Atom before 2013). Currently only validated on Intel based processors.

Cloud providers which use Intel CPUs and Xen PV as virtualization without having patches applied. Furthermore, cloud providers without real hardware virtualization, relying on containers that share one kernel, such as Docker, LXC, or OpenVZ are affected. This is basically all the providers Azure, AWS, Google Cloud.

:tif:

Dravs fucked around with this message at 11:44 on Jan 4, 2018

Dravs
Mar 8, 2011

You've done well, kiddo.

Happiness Commando posted:

What would cause a Server 2012 machine to insist that no logon servers are available to service a logon request, even though the firewall insists that traffic is being passed from that machine to the DC and back? Local accounts are disabled so there's literally no other way to get in short of maybe inserting a bootable ISO and rejiggering the local accounts. I dont know if the machine is in production, though, and can't necessarily bounce it.

Would wireshark help here? Watch for packets heading to and from the DC, if I can't trust the firewall logs as authoritative (loving lol)?

Edit: Me too :yotj: Just finished my first week.

As has been said it has probably just lost the trust relationship. If you viewed the event log you would probably see errors about the RPC server being unavailable. This is just a Windows bug since forever and is the reason why you should always have a plan B to log onto a server (not disabling all of the local logon accounts would be a good way to start).

How important is the server, can you just rebuild it?

Dravs
Mar 8, 2011

You've done well, kiddo.

Avenging_Mikon posted:

Oh, that's totally from forcing it in upside down.

I think this is correct. Someone has tried to plug in a USB device and when finding it doesn't quite fit, instead of trying it the other way round, they have just rammed it harder and harder until it fit in the hole (that's what she said etc).

This is why USB-C is so good. It can go in either way. I'm sure a user would still find some way to gently caress it up though.

Dravs
Mar 8, 2011

You've done well, kiddo.
Those pictures don't make me annoyed or angry, they just make me very sad.

Dravs
Mar 8, 2011

You've done well, kiddo.

Bob Morales posted:

"Hey, can you give NON_MANAGEMENT_USER access to the file \\MANAGEMENT\SOMETHING\ELSE\REPORTS\BLAHBALH ?"

:mad:

My old job had something like this and because the requests came from director level and my boss was a bit dumb we ended up with the most hosed up folder structures where really important files and folders accessed by regular staff would be hidden behind management level only folders. It was like little parts of the folder structure were Switzerland that just did not give a poo poo about any of the permissions above it and operated by itself.

So a huge amount of permissions on the folders went something like -> Read only -> Modify -> list folder contents -> list folder contents -> list folder contents -> FULL CONTROL.

It was an utter shitshow and before I left I recommended that they just build a brand new folder structure for their data and force the users to migrate it themselves so they could at least have a semblance of logic behind their folder structure (nothing ever changed and is probably even worse today).

Dravs
Mar 8, 2011

You've done well, kiddo.
Generally, non tech execs see what a proper DR plan costs and after finding out what it is for just scrap it (or severely neuter it) because "well we've never had that happen before :downs: "

And then they look great for saving the company a bunch of money. Of course the moment they realise that a DR plan needs to be enacted they are the first ones out the door swanning into a new job leaving everyone else to deal with the fallout. In the end, nothing is learned and the circle of life continues.

Dravs
Mar 8, 2011

You've done well, kiddo.
When I was young I had an Atari ST with an attached tape drive. My favourite game was some 4-bit Bruce Lee thing. This must have been in 1986 or something.



Edit: the tape drive took around 20 minutes to load a game. While it was loading you had to stare at some psychedelic flashing lights. Almost certainly would have triggered seizures in some people with hindsight.

Dravs fucked around with this message at 15:39 on May 30, 2018

Dravs
Mar 8, 2011

You've done well, kiddo.

CitizenKain posted:

I don't know how people got through shooting that without losing it.

Because their actors, they haven't lived through the actual horror of meetings like this. If I tried to do it I would probably break down crying halfway through.

Dravs
Mar 8, 2011

You've done well, kiddo.
I was once asked to name a bunch of meeting room calendars in one of our sites after various Leicester City football players.

Also, I once worked for an Opera company where all of the servers were named after various Operas which was especially confusing because they had no relationship to what the servers were even used for. Plus I know dick all about opera so that didn't help.

Dravs
Mar 8, 2011

You've done well, kiddo.
Woo wooooooo woooooooooo

:yotj:

Just got a really good opportunity in a senior Devops position for a huge company in the UK. Coming from purely Infrastructure Engineering so it's going to be a fun ride.

Dravs
Mar 8, 2011

You've done well, kiddo.
When I was a bit younger there was a really nice pub on the edge of the forest with a big beer garden with a large lake behind. Periodically a gaggle of geese from the lake would just roll into the beer garden clearing it out because they are cunts. You could walk by the pub and see people cowering inside while the geese took over outside knocking poo poo over.

How did this thread segue into geese?

Dravs
Mar 8, 2011

You've done well, kiddo.

Farking Bastage posted:

I just had a desktop tech basically drop a printer down on a table and send me a ticket to not only mac authenticate it on the network, but to " remotely set the IP and sleep settings." No, you lazy loving useless pile of gently caress. Do you want to know why you are a 50 year old desktop tech? This is why you are a 50 year old desktop tech.

This kind of thing is mad to me. Where I am currently working there is a lady on 1st line who has been there for almost 16 years now. Absolutely no interest in pushing to get out of it. Just happy sitting there resetting passwords for close to 2 decades. I just don't understand the mentaility.

Dravs
Mar 8, 2011

You've done well, kiddo.

Marcade posted:

The display. She got the brightness and contrast so messed up she couldn't see anything. How she got there from trying to change the font is anyone's guess.

It's like when a driver pushes the accelerator in traffic and instead of hitting the brake before their hit someone they panic and their brain just locks and they slam their foot down and smash into the person in front of them.

Like that but with the contrast button?

Dravs
Mar 8, 2011

You've done well, kiddo.

Weatherman posted:

Is the veeam update process relatively easy? I have "install latest update" on my list of things to do but since I only learnt what veeam was last November, I'm a bit wary of changing in production.

You literally run the update file and follow the wizard. I've also found it very resilient, the few times it has had an issue it has rolled itself back without a problem.

Also, the Veeam support is pretty good, you ring up and the 1st person you talk to is the engineer who will be helping you. There is no talking to a call handler who assigns it a priority and promises a call back within 4 hours or so. This is in the UK at least, unsure if their support is different elsewhere?

Dravs
Mar 8, 2011

You've done well, kiddo.

kensei posted:

You're not wrong; we don't have any deployment of servers automated at this time.

Do you at least have a virtual environment with templates you can roll out? Or are you literally going to have to build a bunch of physical servers, cos that would suck and I would say something like "welcome to 2005".

Dravs
Mar 8, 2011

You've done well, kiddo.

Pyroclastic posted:

unless a stock Intel HSF can get knocked out by the case falling over. And this is like the third time I've seen it over the past 4 years. Snap, push, and twist, and it's back to running at 3.2ghz.

No, a correctly installed HSF would literally snap the motherboard in half before it became dislodged itself.

Dravs
Mar 8, 2011

You've done well, kiddo.
Wow, some of these stories are triggering uncomfortable memories and remind me why I got out of production infrastructure and moved into DevOps.

Dravs
Mar 8, 2011

You've done well, kiddo.

shortspecialbus posted:

This doesn't absolve you of risk - my story earlier was puppet code that made a bad assumption about home directories being unique that resulted in significant irreplaceable data loss.

Yeah but if I gently caress up the test environment at 5pm on a Friday I can just shrug and fix it on Monday morning. Plus my projects are all in Azure now, so no more having to do bullshit like power down tests or hardware replacement.

Adbot
ADBOT LOVES YOU

Dravs
Mar 8, 2011

You've done well, kiddo.

larchesdanrew posted:

After being stuck in a basement office for over a year day in and day out answering phones and struggling with the poo poo documentation of the last onboarding tech, this is going to be a dream 😅

Waiting for Act 3 where the old TV station becomes a client and you end up onboarding a bunch of buffalo NAS drives linked together with USB cables.

  • 1
  • 2
  • 3
  • 4
  • 5