ripatel

[manofdutch @manofdutch]

@sniffalt Finished a cool map! Based of metro 2033!

[ripatel @fd_ripatel]

@visegrad24 Deportation is the humane option

[ripatel @fd_ripatel]

@wedtm @only01Essential At that point just yeet the disclosure onto a public mailing list.

[ripatel @fd_ripatel]

@BasilTheGreat W MANCHESTER 🔥

[ripatel @fd_ripatel]

@MartinSellner_ Absolut undemokratisch

[ripatel @fd_ripatel]

@readylayerone @alessandrod Frankendancer has been running XDP for 2 years

Agave improved replay quite a lot by copying a bunch of other FD features, like speculative execution (a bit incorrectly hence 4.0 patch releases on mainnet)

They have not yet caught up to full FD's performance but still good work

[ripatel @fd_ripatel]

@deanmlittle IBT has a 0x3e notrack prefix that disables enforcement for individual jumps.

i.e. notrack jmp rax

Weakens the sandbox but at least the rest of the app gets function pointer integrity still.

[ripatel @fd_ripatel]

Linux 7.0 still does not support Intel CET indirect branch tracking (IBT) in usermode.

Intel CPUs supporting IBT first appeared in 2021.

Here's my patch series: https://t.co/NoKvTvUgwU

[ripatel @fd_ripatel]

@deanmlittle The Agave JIT already tracks valid call targets and enforces them. They just need to emit endbr64 instructions.

[ripatel @fd_ripatel]

@canadianbryan very cool, hopefully some motivation for Linux to accept my patches 🙂

[ripatel @fd_ripatel]

This came up while adding control flow integrity to Firedancer's sandbox.

One of the best Linux x86 jails out there, enforcing process isolation, namespaces, strict seccomp, landlock, MPK (user protection keys), CFI, and soon more.

https://t.co/RH40zdEG8u

[ripatel @fd_ripatel]

IBT enforces that indirect calls and jumps can't land on any arbitrary instruction, but one of these:

[f3 0f 1e fa] endbr64

"jmp rax" to elsewhere causes a segfault SEGV_CPERR, defending against control flow hijacking (e.g. corrupt function pointer).

[ripatel @fd_ripatel]

@soundsonacid Direct Loss of Funds

[ripatel @fd_ripatel]

@toly @SolanaSensei @solana @SolanaFndn @bw_solana 😴😴😴 Why do let the majority client pick protocol limits instead of giving validators a config option? Frankendancer has supported XDP for 2 years, so we're waiting on nothing. Just switch back to Agave once they sort out their performance issues

[ripatel @fd_ripatel]

@cavemanloverboy We are winning very bigly

[ripatel @fd_ripatel]

@JohnAlanWoods Solana (Sinon from @jump_firedancer) wrote *the* fastest Falcon implementation from scratch, using AVX512.
The author is upstreaming their contributions: https://t.co/nK6ZtclqP9
Expect more good OSS contributions from them 🙂

[ripatel @fd_ripatel]

@gf_256 ❌

[ripatel @fd_ripatel]

@RaphaelBrinkert @ergroovt Ja natürlich ist das Absahnen von Steuergeldern sehr profitabel für die diebischen Freunde der regierenden Parteien.

[ripatel @fd_ripatel]

@TheWattenhofer @toly @solana Bank

[ripatel @fd_ripatel]

@WiMJapan Es ist nie zu spät zu kämpfen solange dein Herz noch schlägt