Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

On Servury

I purchased a Blackbox VPS from Servury a but under a month ago. I love the concept and I haven't seen any other provider that offers this, so I was excited to try it out.

When I first spun it up it took a while before it was ready to setup, I was confused for quite a while when I couldn't login to the machine / it was stuck on some sort of awaiting encryption state -- turns out I needed to attempt to SSH in and then follow their encryption setup flow first. Set it up and everything worked fine.

Since then I've been using it as a relay node for privacy. It works most of the time, but there's been quite a bit of downtime with their scheduled maintenance (much more than other providers). I've had multiple hours of downtime, which is a bit annoying as I can't access any of my content on the box during these outages.

Also, take this with a grain of salt but I remember seeing at the beginning of the month that Blackbox had unmetered bandwidth... and I checked in the internet archive and it was marked as unmetered... but I was just notified I had met my bandwidth limit and turns out the limit is now 4TB. Though I may be misremembering this.

Ah also, their Blackbox system is pretty clearly vibecoded (along with the rest of the site). I have nothing against LLMs, I just hope a human reviewed it at least before they shipped :D

So, tl;dr: great idea, mediocre execution, less than optimal uptime. A bit annoying to work with, but it serves its purpose.

Thanked by 3oloke monsoon73 servury

Comments

  • They don't allow uploading custom boot image though, and I don't really like how they implement the boot procedure. Onidel allows measured direct boot with custom image and also highly available.

    Thanked by 1oloke
  • servuryservury Member, Patron Provider

    @averagedatahoarder said: When I first spun it up it took a while before it was ready to setup, I was confused for quite a while when I couldn't login to the machine / it was stuck on some sort of awaiting encryption state -- turns out I needed to attempt to SSH in and then follow their encryption setup flow first. Set it up and everything worked fine.

    This has since been overhauled, I simplified the machine statuses since you weren't the only one to find them confusing.

    @averagedatahoarder said: Since then I've been using it as a relay node for privacy. It works most of the time, but there's been quite a bit of downtime with their scheduled maintenance (much more than other providers). I've had multiple hours of downtime, which is a bit annoying as I can't access any of my content on the box during these outages.

    We're aware of the downtime - We launched Blackbox recently, and we had to fix a few issues / modify BIOS settings on the nodes 2 times so far. You can expect immaculate uptime from now on.

    @averagedatahoarder said: Also, take this with a grain of salt but I remember seeing at the beginning of the month that Blackbox had unmetered bandwidth... and I checked in the internet archive and it was marked as unmetered... but I was just notified I had met my bandwidth limit and turns out the limit is now 4TB. Though I may be misremembering this.

    Answered this in another post of yours - some users used insane amounts of bandwidth in short amounts of time, so we had to implement these limits to mitigate that. I also implemented one of the community's suggestions in a topic I wrote a couple months back :
    https://lowendtalk.com/discussion/215138/what-features-would-you-like-to-see-the-most-on-your-server-provider/p1

    Basically, you get a set amount of TB of bandwidth @ 10 Gbps, and then unmetered @ 10 Mbps.

    @averagedatahoarder said: Ah also, their Blackbox system is pretty clearly vibecoded (along with the rest of the site). I have nothing against LLMs, I just hope a human reviewed it at least before they shipped :D

    I do use LLMs to write code for Servury, but I also review the output before shipping to production. That said, I would appreciate if you could specify what feels vibecoded so I can update it.

    @averagedatahoarder said: So, tl;dr: great idea, mediocre execution, less than optimal uptime. A bit annoying to work with, but it serves its purpose.

    Fair enough. If you have other things to say / suggestions, please share them. Servury is heavily feedback driven and unlike a lot of hosts, we will go out of our way to implement your ideas/feedback.

  • servuryservury Member, Patron Provider

    @matheny said:
    They don't allow uploading custom boot image though, and I don't really like how they implement the boot procedure. Onidel allows measured direct boot with custom image and also highly available.

    That was true until Sep 26, not since. A measured Blackbox now boots your own image: either a UKI, or a bzImage plus initramfs plus command line, given by URL and SHA-256. It is loaded with -kernel/-initrd/-append under the same public AmdSevX64 firmware as our release, with kernel-hashes=on, so the SNP launch measurement is a function of the public firmware, your bytes and your command line, and you recompute it with sev-snp-measure without anything of ours in the path. You can also write your own pre-encrypted disk image over the volume, so the template and the console never touch your data. Sections 7 and 8 here: https://servury.com/guides/measured-boot/#byoi

    Boot procedure : the firmware, kernel and initramfs are hashed into the CPU-signed launch measurement, the release is rebuilt byte for byte from pinned public sources (repo linked on that page), and the initramfs binds its per-boot SSH host key to the attestation report's REPORT_DATA, so the key your client shows you is the one the report vouches for before you type a passphrase. If there is a specific step you think is wrong, let me know.

    Thanked by 1oloke
  • @servury said: That was true until Sep 26, not since. A measured Blackbox now boots your own image: either a UKI

    oh nice, afaik you are the second provider on LET implements measured boot properly. Looking forward to @advinservers joining the train!

  • jsgjsg Member, Resident Benchmarker

    @servury said:

    @averagedatahoarder said: Ah also, their Blackbox system is pretty clearly vibecoded (along with the rest of the site). I have nothing against LLMs, I just hope a human reviewed it at least before they shipped :D

    I do use LLMs to write code for Servury, but I also review the output before shipping to production. That said, I would appreciate if you could specify what feels vibecoded so I can update it.

    Sorry, NO. One might be lenient and consider vibe-reviewing (btw 'reviewing' code isn't even a thing in hardcore security) but vibe-[whatever] and coding don't go together in that field, period.
    Real secure software looks like this (in the form of questions):

    • did you formally model (and verify!) your design?
    • did you then implement it in an adequate language (like. e.g. Ada)?
    • did you fully statically verify the complete code?

    Just using (or have some llm use) a "magic" language like Rust may help to avoid some typical/common errors but it does not make your software somehow secure.

  • @matheny said:
    They don't allow uploading custom boot image though, and I don't really like how they implement the boot procedure. Onidel allows measured direct boot with custom image and also highly available.

    I remember there's a way to dd the image directly onto a running machine. This is often done to wipe any possible traces of spyware on the VPS itself, esp from hosting companies from China.

Sign In or Register to comment.