Hello Maurice!

26 Jul 2023 03:12, Maurice Kinal wrote to Benny Pedersen:

 MK> Which zenblead fixes?
 
why do you ask me ?  :=)
 
 MK> I just booted it up on this machine earlier 
 MK> today but see little to no difference.

then you possible are fine with zen3 or zen4 with dont have this bugs to be solved in ucode

 BP>> keep away from zen2 hardware is safe on its own

 MK> I am not convinced but it isn't like I can cite any unsafe behavior so 
 MK> far.  This machine is deploying a AMD Ryzen 7 5800U which if I am not 
 MK> mistaken is a zen3.  The Europoint is on a zen1 (AMD Ryzen Embedded 
 MK> R1505G).  I also have a zen2 but it is an Epyc and isn't part of the 
 MK> fidonet mix.  I am using it solely for R&D.

does it say epyc in uname -a ? :)

there exists zenbleed tarball that have tools to test if something is missing in ucode, i dont know if the ucode is part of kernel, but imho only 6.4.6 have zenbleed fix, not currently older kernels

i still don't have any epyc cpu, so i am happy :=)

 MK> As for the www it is even more fsck'ed than it ever was.  No surprises 
 MK> there.  I note many a site that won't support my webbrowser anymore 
 MK> and it was probably the safest any browser ever is/was.  Very sad 
 MK> although I never really cared for the www so I wan't be missing it.  
 MK> How about you?

gopher is not well designed for roundcube webmail, lol :)

i dont know if there exists webmail based on gopher protocol, i will let it be upto the reader to find why it does not work

sadly dovecot have planed to support jmap, but so far only cyrus-imapd have it, on the other hand cyrus-imapd miss support for weakforced, it complicated for secureity, i could just make reject rules in iptables change to accept for a limited ip ranges where i have users, it would be rock solid, firewalls should be static rule set, not dynamic, and this is why i think fail2ban is designed for the incorrect problem


 Regards Benny

... too late to die young :)

--- Msged/LNX 6.1.2 (Linux/6.4.6-gentoo-dist (x86_64))