Just purchased a server license (for life). Not only is this update jam packed full of nice features, but a lot of their updates are. I've been self-hosting it (on a VPS) for the past year and it's about time I supported them
As long as caches have existed, very similar styles of side channels have been demonstrated since the late 90s. A lot of the terminology we use (flush+reload, flush+flush...) are attack techniques that have been already demonstrated on CPU caches, and these demonstrations are at least a decade old.
The one really big difference between the page-cache side channel and other side channels is the "monitor" primitive. There are methods that the OS provides which directly report the presence of a page in cache. These are syscalls like mincore (mitigated in 2019), preadv2 + rwf_nowait (unmitigated), and cachestat (mitigated in 2025).
With these syscalls, we don't even have to rely on timing information (is page access fast -> cached; is it slow -> not cached). These syscalls really set the page-cache side channel apart because you can nondestructively figure out whether a page is in cache.
I haven't seen anyone here mention Psyllium husk. I bought 450 capsules on Amazon (ew I know) and it's been a game changer for me. Seriously. I take two a day and that's been enough for me to be comfortable throughout the day, especially while traveling.
You can implement a counting-thread that's even more precise than the CPU's timer (TSC on x86) platforms. This was shown in attacks on Intel SGX, where the rdtsc instruction to access the time-stamp counter is unavailable.
I need a recognisable domain name website that google or duckduckgo has picked as the product.
This doesn't always work. For example, I used to (and still do) see a lot of fake websites when I l type revanced (https://revanced.app/) on duckduckgo, and I've nearly fallen for two of the fake ones before (I think two of .com / .org / .to...?)
Thankfully ublock origin warns users of this:
Otherwise, I'd have 100% downloaded some malware-loaded crap.
Not exactly what you asked, but do you know about ufw-blocklist?
I've been using this on my multiple VPSes for some time now and the number of fail2ban failed/banned has gone down like crazy. Previously, I had 20k failed attempts after a few months and 30-50 currently-banned IPs at all times; now it's less than 1k failed after a year and maybe 3-ish banned at any time.
There was also that paid service where users share their spammy IP address attempts with a centralized network, which does some dynamic intelligence monitoring. I forgot the name and search these days isn't great. Something to do with "Sense"? It was paid, but well recommended as far as I remember.
Edit: seems like the keyword is " threat intelligence platform"
My personal website is made using Hugo, sitting behind Caddy, and hosted on Racknerd. I see elsewhere in the thread that you're looking for something akin to a $5/month VPS, but racknerd is MUCH cheaper for much more vCPU + vRAM (older hardware, but that's not a deal breaker for hosting a static website).
I used to do $6/Month on Digital Ocean for 1 vCPU + 1GB vRAM + 1TB bandwidth, but now I'm somewhere like $3/Month for 2 vCPU + 2.5GB vRAM + 5TB bandwidth [1]. In fact, I paid $6 extra to have the server in France. Otherwise it's $30 a year.
Check out racknerd tracker [2]. I found out about it through lemmy many months ago [3]. The person who made the website gets some affiliate stuff.
I'm unsure whether your formatting messed up, but you shouldn't have a space between the shebang (#!) and the interpreter path (/bin/bash). Also add a new line before your command:
sh
#!/bin/bash
gnome-terminal -- sh -c gotop
I tried this on my system (with htop instead of gotop) and it worked.
Just purchased a server license (for life). Not only is this update jam packed full of nice features, but a lot of their updates are. I've been self-hosting it (on a VPS) for the past year and it's about time I supported them