Hello and welcome to episode six. Nah! Oh yeah, I guess I don't even know how many of these have Christmas avatars on them, but this one certainly does. Jingle all the jingles, um... Merry Christmas, jingle merry, uh, Noel. Happy life day. There should be a Christmas episode of Mando. Will they do it? Who knows. Mando should wear a Santa hat. Yeah, Mando. Maybe the the Mandalorian code means he can't wear two hats. This is not the way. Just the one hat is allowed. I had to really push my emotions there to impersonate him. Yeah, he's got a lot of character and inflection when he talks. That's right. I knew you could do it. Very good. He's really exciting to listen to. Cannot train him. What? Hey, what does Mando like think about anything at all? He sounded almost like he was setting that up as an interesting discussion on character. You're like, so what do you think Mando thinks about anything? I mean, I don't know. That's the thing. I don't know who he is. The tough one.  Other than that, this is the way sometimes. Yeah, the way, exactly, sometimes. This is the way is probably some of the most work I think a sentence has done to try and account for a lack of character.  This is the way. Kick is a lie. The kick is a lie. The kick is a lie. The antagonist is basically anti-character, but whatever. As soon as Ray says this is the way in episode 10, they're all going to be like, eh, this is the way it's been written. You can't say that. That's the cool guy's line.  I think that's the most damning part of his personality, because he does have one for any.  All right? Oh, that's true. I take issue with you trying to say that there's nothing there. It's like we've seen plenty to imply that he's, he's like God issues. He doesn't understand how anything works, but he relies on his brain issues. We've really talked about this like a couple days ago or whatever, but like, you know, like Iron Man has a suit that goes all the way around him, and it's made of, you know, like nanotech in certain portions. There is no iteration of Iron Man film where his armor doesn't get torn away over time through damage, and thus the stakes are not ruined. I feel like the Thanos fight is the clearest example of that. Like every punch is taking more and more out of his armor, and like then it becomes so bad that he has to use, he has to make parts of his himself vulnerable to even like shoot things. Meanwhile, Mando has a suit that doesn't cover, what would you eyeball a percentage? Would it be like 60% exposed? Something like that? I think 60% is probably right. Yeah.   It's just funny as a sort of... It's like half of his body is basically uncovered. Yeah. And yet he shot constantly. It always hits the armored parts, and he acts as if he knows it will always hit the armored parts.  See that contradiction right there, guys? You got to work on your commentary, because that...  Well, I just, I figured comprehension-wise, you guys might have picked up in the viewer audience there that what we want is for people to aim at his non-armored parts. That is... Yeah, like his molo chest. That is the key. Yeah, especially when they're literally point blank and they're shoving their muzzles up to him.  Like, what are you doing? Are you... Like, we got to have a discussion.   How dumb... Well, good thing that... ...the antagonists have to be before you start to go, well, actually, you know, that is... Good thing that episodes three, four, and five are all great examples of bad guys being competent and defeated with skill. Yeah.  For people who defend this show, I want to know how low of an IQ does an enemy faction have to have before you start to think that your protagonist isn't that great for beating them? It would be more interesting to watch, like, Jar Jar Binks fight these stormtroopers, because at least it would be fair. Of course, Jar Jar has the advantage whether or not he has a weapon. I'm just saying that it would be more interesting because you don't have just terminators walking around, I think. Regardless, as I said in whichever episode, it would be interesting to try and grab up some things here and there. We pointed this out as, like, when it was mentioned with the baby, the frog person is like, we need to go to the only planet, whatever world. It's like, what, the only planet? This is the top coin on the episode right now for Jay. She could only survive on one planet. I don't know, seems like she's doing okay in that ice cave. It's like, it's weird. Of all the places you'd think a species might have trouble in, it would be an extreme temperature of one or the other. But, like, she's... Especially a reptilian-looking critter. But yeah, she's doing all right. She's even happier than she'd want to leave. Yeah, splashing around, having a great time in that random hot spring that they found. Not even sure... That was 50.  Like, yeah, 20 or so, but still. It's just like, they crash land, and there's a hot spring in the ice cave? Like, what? Like, also an army of spiders lives right next to it. Like, this is a good episode, okay? That's where the spiders drink. They drink from the hot spring. That's how they live. He's a baby. He doesn't understand you. Like, that's something that we said, and they're like, boy, their face is gonna be red when we watch Chapter 13, which is the Ahsoka one. So, to go over the references we have in total, he often tells Baby Yoda to do things, and Baby Yoda is either confused or doesn't do them whatsoever. Yeah, there doesn't seem to be really much in the way of him actually understanding, Manda. Oh, no, there is. So, Ahsoka says that she can understand Grogu, and then she says, in a way, at the end of the sentence, and you're like, all right. That's more than we even expected, but okay.  And then he doesn't understand what I'm saying, and then Ahsoka's like, oh, no, he does. He's like, okay.   Odd design for a ship, but okay. And he got pretty close as well. So what I find amusing about this is like, the comment section is like blushing and happiness over the idea that we don't know what's coming. And it's like, oh, no, I don't think any, there is no answer to this. Like, does the baby understand Mando?  Baby Yoda, don't eat the eggs. It's like, I don't think Baby Yoda would understand that. I don't know. They're going to have a level of understanding that is preferable to them for the moment in the story. And you can train people in the force before they can understand what you're saying. She like talks to Baby Yoda through the force or something? I don't know if that's... Yeah, kind of communicate, maybe intuitively, I guess that's the best way to rate it. I do think it's funny though, he may have been trained for as much as like two decades.  So it kind of... We got, in the EU, every hyperspace-capable ship projects a stasis field around itself, seemingly as necessary condition of even being able to enter hyperspace, which protects the ship and its passengers and all sorts of things, like relativistic time dilation, radiation potential, lethal tidal forces, and so on. In the Disney universe, lol, if the eggs go into hyperspace, they go poof for reasons. This comment, and there was another one that said, you do have to strap in for hyperspace, so it makes sense that the eggs could die. Why do you have to strap in for hyperspace? So I'd have to check the many times we've seen hyperspace going, but I'm almost certain, this is just a hunch, I'd have to check, that when hyperspace activates, there have been people who haven't been strapped in, who at most will, it'll be like a car moving from zero to like 10 miles per hour.  Yeah, there's a little bit of inertia involved, but... Nowhere near enough to come across as threatening to the eggs if they can survive your average sort of jostling around as you walk across the average place. Like I don't believe it whatsoever, but the funny part is that whether or not any of this is true, whether or not the eggs can survive hyperspace, they should have died from all the shit they went through in episode two regardless. Oh yeah, like when he goes in freefall, and he's just going around and everything and they're holding on for dear life, all that cargo and the hold is just getting well slammed around and jostled and thrown against the walls and... Interesting thing about that is, I think the only time they show a shot of the eggs is when he's falling through the ground and it's a quick shot to show the egg sliding from one side of the room to the other. The visual is now on screen. But then, if you think about that scenario that you're seeing right now, look at the looseness of all of the objects in that room. Picture that room, but then this scene... Doesn't make much sense, does it? That little... I wouldn't be surprised if it smashed and the eggs just went all over the place. It would have been a tragic moment because Mando failed Frog Lady as he fails everyone. This was getting a lot of appreciation.  Is that something you couldn't notice because it's really kind of obvious? Our coverage was like... Oh, I guess it's... What?  All of us picked that up. There's no way they thought that looked good. And the bonus funny is that they could have edited it so you just cut that scene. Frog Lady walks into the ship with Baby Yoda and then you cut it. You don't need to show her putting Baby Yoda on the floor and he wheels away. He wheels away as if somebody's pulling a string. I can't believe they kept it. Really? It was so awkward. And the last comment I would like to highlight... At least Fringard got a frog laugh to it. I was keeping an eye out for critical comments.  I don't know what happened between episode one and two. Oh, wow. I think episode one just had a... Because it was like the first coverage of it. So you have people unsettled, but I think already the sentiment is turning hardcore on this show. Went a little bit quicker than season one, which was something we figured would happen. Yeah, I think most people would still say season one's good, if not great. Yeah, and I think most people are saying season one is better than two. I don't know where we stand on that for now.  So if Mando season two can, you know, walk it in, Yeah, I don't know yet. They're both pretty bad. I don't know. The tough call to make. I have no idea which one's worse. So there's a couple of clarifications I wanted to do. Some of these are definitely criticism. Some of them are just questions, but you know when Mando arrived on a water planet, the whole point of that was to ask frog lady husband where they can find Mandalorians. And it's because frog lady husband, I guess, knew about Mandalorians and frog lady knew about that and frog lady had managed to let the ant person in more sizely know about that.  It's just really funny to think about that series of connections. Yeah, who had just coincidentally met Mando. It was insane. But then of course, just to add one more, Mando lands and like the blue Mandalorian girl is just happens to be keeping an eye on, I guess, new entries. Like what's the logic there? Did frog lady husband tell the Mandalorians that Mando's coming? Hmm.  So that's because I was thinking about where my main issue lies with all of that through line. And they just, they just happen to be, they're just there. They're just keeping an eye on him. And it's like, I don't know how or why that happened. But there's no lines about like how, oh yeah, our contact let us know you were coming, which is all they needed to do. Yeah, it's just pretty much just lucky we were here. Yeah, and yeah, and they comment on that.  So why didn't they reach out to Mando before he went into the trap? Like he could have been killed. Yeah. In fact, he should have been. Which by the way, I guess we didn't comment on it. But what do you guys think about the idea that he probably should have used his whistling birds? Are they called whistling something? Yeah. Yeah. Probably should have used them while he was under the grate in the boat. That would have been an insta-kill for all of them. Pulls out a gun and just shoots everybody there before he shoots in. So the whistling birds I think is the best one. Gun is certainly great too. Even the flamethrower, like all of his weapons are useful. Yeah. He just never used it. Almost like he has a vast arsenal of weapons.  I guess their plan was they throw the carriage into the pit, which means that they can't get the prize for Baby Yoda if they think it's going to get destroyed by feeding it to that monster. But I guess they want the best scar. Surely they couldn't have predicted that Mando would instantly jump into the water pit as well. Meaning they couldn't get the prize if you like sank down or something. Like just after he does it, they start sealing him in as if they like it was planned. Which yeah, that's another- What a weird plan. Yeah. I wanted to re-bedge this as well. So in episode four where he saves the day for our team of heroes right before they're about to get blasted away, it means that he would have jet-packed from the reactor place all the way to the Navarro town to the school to collect Baby Yoda, then jet-packed to his ship that they would have repaired in time to pristine condition to then pilot it back to the canyon like seconds away from it being too late. That's kind of all insane. And I think the only reason that he picked up Baby Yoda before leaving was just so that it's an easier end to the episode where he sails on a comms thing. Like, oh, bye, by the way. And he's like, yeah, Mando, have fun, whatever you're doing. And I was wondering, did they have comms the whole time? Because it might have been nice for Mando to be like, I'm on the way, but I'm XYZ. Instead of just surprise saving them and stuff. I don't know, it's all so strange and it's all constructed just to have the moment of yes, we did it. Right in time, we didn't spot the thing that apparently a whole bunch of people spotted, which was there was a guy in the background in one of the scenes. I knew about that. I didn't look for it. I didn't even know the episode. I'd seen the pictures, but I didn't look for it. In the moment, I guess I was too blown away by just the incompetence of all the stormtroopers and stuff. For those curious, there it is on screen right now. Look at that. Look at that guy.  Wow, look at that dude with his clothes. There was a Twitter post that was like, they'll complain about the disappearing knife, but they don't complain about this. So let me lay this out. We would complain about that if we had spotted it. Just like I didn't complain about the knife until it was shown to me and now I can't unsee it because it's just horribly there. Secondly, random dude in strange clothing in the background isn't a knife that would have killed someone disappearing before they can use it. Yeah, I'd say that that one's a lot worse. The thing is that if someone's trying to make the argument like that dude's clothing, it's from Planet Earth in a different dimension. What does this mean for the narrative? I should be like, well, it could just be a guy wearing weird clothes. Also, this is like the car in the Fellowship of the Ring. It's a clear out of universe. Can you even tell it's a car? Because we know it's a car. Yeah, but it's pretty difficult. Yeah, it's just like a weird light and a thing moving in the background. It could just be Gandalf waving his staff. You don't know. There's a clip I play in the Episode 4 edit that we don't really comment on. I'm not sure if we all missed it. Oh, we felt that we had kind of covered it, but I wanted to bring it back up. I guess I'll play it now. Controls are useless. They're melted. Well, it's probably not rated for lava. Imperial trash. When they built this base in this lava place that has a lava lake that rises and falls consistently, they built it with controls they put on normal things and they didn't account for the fact that the lava would destroy their controls and they also haven't replaced their controls since they were destroyed.  Apparently very. And then Mando flies up and I guess he presses a button that calls the elevator down to them and opens up. It's kind of like a weird moment, but yeah, that's what happens, I guess. I think they'd be waiting at the elevator or they would lock it or something. Do you think they'd just have brains? Everything is so pristine in these Empire bases, but they didn't have a control panel for their entrance because the lava melted it? Like the fuck? It's just mind-blowing for how much they just don't care to portray them in any way other than retarded. Speaking of which, the reactor that you press a few buttons to overload without any sort of main level access, rather than just guy walks in room, because of course you might have thought, well, still you have to get through the base, you have to have that keycard thing that Grief Cargo gave to Blue Man, if you remember. I don't even remember what that was, he just gave him a thing and he put it in and it opened it. I don't know if they were trying to imply that some kind of like hacking gear. You don't need any of that. If you have, right, let's start big first. If you have a spaceship, you can actually fly over that area and go down and hover and let someone out to get to the reactor and blow it up from the outside. You wouldn't need to get into the station at all. If you had a jetpack, you could do it really easily. Then if you repelled down, you could do it.  Or is this a self-destruct button that you could access without getting into the base? I don't know, I just feel like maybe the design phase of making this base, they could have left that one out. See, that would have caused nothing but trouble. And yeah, I suppose the only other thing that was partially on my mind was the interesting element of how much Mando can tank damage. But Season 1, it's the explosion that goes off near him and it hurts him in the direct back of his head despite the helmet. In the last episode season?  I don't even remember what it was. It was like one of those ammo crates or something, is it? Yeah, so I'm guessing despite his helmet being made of Beskar, despite him being shot in the helmet directly, I guess some piece of shrapnel went through it? It went up through it. And I don't know how. It's interesting to think about because he's just never injured, but other than that one time. It blocks lightsaber. Yeah, yeah, blocks lightsabers, but it can't block damage provided by exploding ammo. So weird. This is a very good show. I guess we can soldier on. This is, I guess, a prelude would be that I have heard. This episode is like masterpiece work. This is putting Star Wars back on track. This is the best episode in the season.   However, I've seen some sentiment in the Discord and I think some people on Metal Stream are saying, no, this is possibly the worst episode in the season. Yeah, man. Excitement ahead because I think that means, I was saying this to Frank earlier, that stuff probably happens in this one. Yeah, this won't be filler, like the last several episodes. The last season and a half. Yeah. Let's hope. Let me see. Previously on Mando. This is Boba Fett. He's like, oh, look, there's a guy. He got shot. Oh, well, I guess we know who's coming back to see the episode. Yeah. I mean, I assume it's Boba Fett.  Didn't she get killed? Well, yeah, but this is Star Wars. Oh, right. This is Star Wars. Nobody's really gone. Nobody's ever been gone. Fennec is surely dead. I don't know why else they would have shown us that. This is what I said about previously. To show that Boba Fett was the one who walked out. Yeah, the Boba Fett was the guy. I think she's coming back. And Boba Fett was like, okay, well, I'll guess I'll turn in this bounty. I guess I'll just turn in this pile of money.  He hadn't already done that either. Oh, yeah. We have our killer robots. Either that or she's coming back. And yeah, yeah. Like I said, either these are called dark or death troopers. I'm not sure yet. Shadow troopers would have been another option. Edge troopers. Where are the pink and rainbow robots? Death droids, storm bots, storm droids, shadow droids. Edgy the Hedgy droids.  I said that already. He and Mel already made these. You said edge ball after it. Wow. They completely ignored all of our jokes, Mel. He laughed. Yeah, the whole character development he's ever had. He did an emotion. Look at me, the ball.  Come on. Watch training exactly what it takes. I don't know.  We're going to find that. That's where we're going to try and find you a Jedi. But you have to agree to go with them if they want you to. Understand? You're going to understand these concepts I'm giving to you, right? Don't you want to learn more of that Jedi stuff? Jedi stuff. I agreed to take you back to your own kind. So that's what I need to do. The audience now is understanding where we are, I guess. The tragedy. So this is definitely an important episode. Yeah. It's probably going to set up the two-part finale, right? Because it's seven and eight. I guess. Yeah. This is our second act's low point. Oh my God. That might be, yeah. He's going to put him on the stone and then it'll explode. Everybody does. Sabi Yoda flash everywhere. Wow. All right. There it is. Oh, cool. He didn't get ambushed? Well, I guess it's not clear. It's amazing. Wow. He just gets to go to where he needs to be. This is a planet. Did she give him coordinates or something? I mean, we didn't see that, but I don't know. Looks like we're going to have to travel the last stretch. The leg goes down. Is there going to be like an old Jedi here? You're like, dangnabbit, these Mandalorians. You need to go baby, amen. These bushes are sacred. These juniper berries. Did you bring me some of that blue juice? I feel like reading a book here would be nice. Yeah. I guess you sit right here. Yeah. Do the thing. Dude, be a Jedi. I'm falling to it. Is the seeing stone. Are you seeing anything? Maybe a soaker should come with you to do an instruction. Yeah, it would have been useful to have a soaker for this. Maybe there's some kind of control or something. It's like a button. Go Jedi. Oh, sweet. It's a rock button. Excellent. Staircase comes down. They'd go to a secret chamber underneath it. I'm pretty chill so far. Hopefully this is actually something. Oh, come on, kid. A soaker told me all I had to do was get you.  Come on, fall down. Just have a sit down, man, though. Go to sleep. Yeah. Well, it's a ship that's fresh, so you don't need to sleep. Well, that's pretty obvious of you. Maybe Boba Fett's not intending to be antagonistic. Oh, yeah. Maybe maybe he's a good man. Well, maybe he's there to like literally meet him. I suppose Boba's allegiance.  He's a bounty hunter. Yeah, I think he's a bounty hunter. I don't think he had really cared who was paying the bills. Yeah. Oh, neat. Oh, okay. We don't have time for this. We got to get out of here. Yes, you do. Yeah, you don't know. You're all right. Chill. Just stay there. Relax. Boba Fett's a long way away and you have a jet pack. Yeah, just keep an eye on that guy. Yeah, I was about to do that. Yeah, you've got a perfect time. And please hurry up. You just wait because that guy hasn't walked really far. Yeah, let's just stay here. Stay. It's a force field, man. You're at the top of a hill with a force field. And you've lost him. Now you don't know where he is. Dude, what are you doing? Maybe you're just going to get him back. How are you going to bump into him this way? Yeah, baby Yoda will get taken by somebody else. I'm thinking probably the empire by the robots, the death robots. Hello, Boba Fett. Are you Jedi?  Like I'm revealing his face beats nothing to bad. I need to pull the armor.   I don't want your armor. I want my armor that you got from Cobb Vanpeck on Tatooine. Why didn't you take it off? It belongs to me. Are you Mandalorian? I'm a simple man making his way through the galaxy. Like my father before me. Did you take the creed? I give my allegiance to no one. The Beskar belongs to the Mandalorians. He was looted from us during the purge. The armor was my father's. Now it's mine. What's to stop me from dropping you right where you stand? Because I have a sharp shooter up on that ridge. Knew it! With a lock spoke that will unload by the time my body hits the ground. I'm the one wearing Beskar. As soon as I see that muzzle splash- He just won't shoot you in the armored parts. It's both dead. I didn't mean she was going to shoot you. My friends locked on to that little companion of yours up on the hinge. And if you remember, I don't miss. I don't miss. I don't miss. I don't miss. Phenic? You have a keen ear, Mando. Yeah, he's got a shield. How are you, Mando? I don't even- Are they going to address it? How are you alive? Point that gun away from the kid, or I'll drop you both where you stand. Dude, Mando, this kid's fine. Let's all put down our weapons. No need for bloodshed. Why? Tell her to drop the gun. After you put down the jetpack. What? Why? Because I guess we can fly away. What? The weapons are the problem.  The weapons are more important. Why is he taking it? What? Someone's going to steal his jetpack? Probably. That's important. They made him take the jetpack off. Yeah. Fates sometimes step in to rescue the wretched. In my case? The plot. The plot. That's the end of Davis. What? What?   What? Boba Fett built her a new stomach in the middle of the desert. I'm always good to do my father Django. The bounty on your little friend has risen significantly. You can buy 10 suits of armor for the price on its head. Clearly not. No one cares about him. Yeah, no one's doing anything about it. Oh my god. How inconvenient is all of this? Everyone's showing up at once. Get your... What? Did you just walk off without the jetpack? Why would he just walk off without the jetpack? What? He was right next to you.  He's just coming back to life. Oh my goodness. Dennis, you could have been here hours ago.  So this option is off the table. Is he knocked out? Whatever the plot needs to happen. So he's lost the jetpack and he's knocked out. Oh no, it's just gonna be... Oh jeez. Oh jeez. Why do they look like CGI? They were shot. They were CGI kind of.  They're literally just walking forwards without utilizing cover in any way. I'll move up. Wait, why are they... Their position was fine. Why didn't they use their ship and the cannons on the ship to kill these guys?  Like go back on the ship and use your ship cannons. Or run up the mountain the open. No, we got to show a bunch of stormtroopers getting killed. There's literally... That wasn't flanking. That was you heading right towards them.  Oh boy, here we go. He's got his club.  Why did he swing that twice? It's a club. You see that? He swung it around and then swung it again. Oh, they missed him, of course. Oh, what? How did you get that? I don't know where I'll be. Oh Jesus. Oh my God. Dude, guys. One shot to BoBernie's dead. You can stab through it? One shot. You can break the arm with a club? Yeah, I guess so. Oh, they're dragging it on the ground. Wow, he can hit him with a club and it breaks their armor. It's not armor at this point.  It's like plastic. All right, team B, your turn. BoB's being awesome. Now it's time to snipe again. Really? Just follow the... Oh my God, they have more. They have more. Wow. Mortars. They're just casually brought to Mortar. Oh my... Oh God, this is so cringe. Yes, shoot, shoot, shoot. Shoot him, shoot him. Shoot the guy. Get plenty of time. Okay. God. You are... How is he missing?  What is this? I know, right? Just shoot him. Mortar is killing me. Mortar guy, he's out in the open. This is what we call in battle kill fun, a free kill. That's your cover. That's your cover. That's your cover. What? Oh my God. Jebo! They're from the school of running away from things. Oh my God. He's in Indiana Jones. Oh my God. What was that guy doing? What are you all doing? He gets stabbed through the armor with his stick. Why is the ship there and open? I'm speechless. I'm speechless. He left it open in case he needs to do something. To get his armor. He's just going to... Oh no. But why would the ship be locked down? And I'm guessing that he's going to fly in it when everything looks bleak and blow everybody up in his mortar phenomenon. Whoa, she's so cool. God, oh look at it go.   God, Rags, place some FPS for this. She's going to die. Why are you taking your helmet off? So I just got to play with her because the other team is worthless. It parked right next to Mando's ship. Why don't you just use the gun? Why did you use your helmet as a weapon?   Oh, Mando's up. He's okay now. Come on, Mando. Let's do it. We're good. Oh, what are we doing? Just kill them all. You did this already. That knocked you out. Why didn't it happen? It gets progressively worse every time you try it. What is he? The kid's trying. I don't get it. What is wrong with this person? Do you think he sustained like I was before? Do you think he sustained incredible brain damage for all the times he's been shot in the helmet? Maybe it'll knock something back in place. Oh, it stopped right as he left. Right as he left. Why did you take?  They refused to shoot.  We don't want you. We want the child. That's why you didn't shoot them. Why aren't you shooting?  You're dying. Wow, okay. Yep, there's one right in the chest. I only shoot him. He got stabbed again. He got shot again. Oh my God. They're not, none of them are shooting here. Oh, they got shot. I'm sorry. He's the last guy. Let's do it again. He's the last one. Whoa. Dude. Oh, here we go. Here we go. Yeah, it's Barbara Fett. Oh God. Dude, this is, this is fadsivist, the episode. Yeah. He's a little chunky, but you know. Yeah, no, you still got it. He's looking pretty cool. Yeah. Except they're all acting retarded, as per usual. Yes, usual. Yeah, it's maddening. Seemed unnecessary. Oh my God, what's that? I don't know. Should we get guns? They were, they were. What? He's got knee rockets. He's got knee rockets. Knee rockets. No, no. Back to the ship with the guns on it. All right, and then he's going to use the rocket to blow up the ship. Wait, where is there another rocket? Why do you have another rocket? Yeah, what did he get? Where would you go in the rocket room? There wasn't a rocket in his jetpack, was there? They have guns? They're clearly not using them.  Why haven't they sent them? Is he going to hit one and then it crashes into the other? He's good. Yeah, he'll hit one and it'll crash into the other.  They have, I'll see ships have no countermeasures, these military landing craft. Yeah. Yep.  Yeah.  Somebody uses their ship to blow up his ship. I'm happy about this.  This is a tragedy. Bye.  Hey, lucky they didn't shoot slave one. Yeah, lucky they didn't shoot slave one. Get your jetpack. Jetpack. You're jetpack. You're jetpack. Dark troopers. I'm the dark trooper. Oh, no, the edgy trooper. Why didn't you send these things first? It's going to be your first ship.   This is the science fiction world. You can do stuff.  Oh, red eyes, black armor. Hear the robot iron men.  Dun dun dun dun dun dun dun dun dun dun dun dun. I bet they're going to be blast approved too. Oh, they're going to be everything approved. He really didn't get the jetpack, did he? Yeah, no. If he had gotten the jetpack, this wouldn't have happened. None of this would have happened.  Why are they walking so slowly? Men are saying. Oh, they got him. Okay, okay. Oh, wait, wait, wait, wait. Just stop. Boba Fett. You can still save the baby. Boba Fett's got slave one and he's got a jetpack.  There he is. All right. Wait, why does, why do they care? I guess they, he got his armor, so he's going to help out Mendoff. I guess so. I guess so. Do not harm the child. Copy. I'll do a loose follow to where they're headed. It's Mark decision that was made by character. I was going to say, I'm okay with that one moment. Yeah. Though, couldn't he get blown out of the sky? I assume they could just shoot him once. They wouldn't destroy slave one. No, they wouldn't have destroyed slave one. Fett now.  The Empire, they're back. Oh yeah. You know you were fighting stormtroopers a moment ago, right? I'm surprised they haven't let loose time fighters or just trying to destroy that ship, but okay. Yes, there's nothing left of the ship.  No dude, he'll take all of the pieces to a local mechanic and it'll be the razor crest. He'll resurrect Quill from the dead just like her and then he'll put it together in a couple days with his spark gun. Dude, it'll be like in Simpsons hit and run when your car explodes. You just take it to a mechanic and they fix it up. Oh really?  Of course, the ball survived the explosion. The best car ball. Yeah. I like these two are just like he's having a moment with his ship. It's fine. Treating the ship like it's a character. Yes, the best car's fear. He's going to use that to stab Moff Gideon in the middle. Yeah, he'll impale him. Yeah. I wonder if he's going to be like, hey, Boba, you want this? Also, I guess he doesn't care about Boba having the armor anymore. I think he's going to get us jetpack fat. See, this is me. Boba fat. This is my father, Jango fat. Your father was a foundling. And fought in the manual of the Civil Wars. I don't know. Then that armor belongs to you. Then our deal is complete. Not quite. We agreed in exchange for the return of my armor. We will ensure the safety of the child. Child's gone. You took the armor, though. Charlie's returned to you safely. You're in your debt. Fuck, Boba's a super nice guy. Jeez, code of honor.  Can we just sub- Boba's a good guy. Can we just follow Boba now? Fuck, Mando. Yeah, Mando. I want the Boba fat show instead. Boba did like a smart thing. One smart thing. He's already leagues ahead of Mando. His ship is so awesome. That's pretty cool. Very odd, but certainly... That's why I like it. Oh, we're back here? Okay. Oh, so she's a marshal. Didn't she have a death sentence on her that she had to flee the Republic? No, that's fine. Name it. I need you to locate someone in the prison registry. That's what I can do. He didn't tell you who yet.  Megs Mayfeld. Oh, it's Bill Burr. Oh, we're getting the gang back together for the finale, huh? Why did you ever want this guy? I need to bring him to help me locate Moff Gideon's like cruiser. Help locate Moff Gideon's like... Because he's ex-empire? No, just use the fob that Baby Yoda's attached to. No, we don't do that. Talk to grief and get a fob for Baby Yoda. No, we don't do that. Oh, you better not have any eggs on board. Yeah, that was a dramatic twin. He looks so small. Well, maybe those Stormtroopers are just really tall. Yeah, uh-oh. I do like his name. But then again, I like all the music in this show. I think with the show it's good. Yeah.  Why are you shitting with me?  Oh, this is perfect. It's the Mandalorian's opinion about Stormtroopers. They've got Baby Yoda tossing them around the room while they go, I'll lose.  Wow. Oh, Stormtroopers. You're so silly. Trained for decades. You've gotten... Have you ever seen one of these? Oh, edge labor. Oh, it's so edgy and cool. Quick touch it. You're not ready to play with such things. Put it in shackles. He didn't miss. Impressive. He didn't miss. Infinis Rags is a big circle, so... Give this guy a promotion. Let him know we've got our donor. Yes, sir. They have the donor. You can slip out of that. He's all you need. You can just flip right off. I'll just pull his hands out of those. Little baby shackles, I love it. Ronald Rodriguez directed that. Oh, wow. Okay. Jesus. What else did he do? For some reason, Planet Terror is the fifth thing that comes to mind. He did need to do all the Machete movies as well. Yeah, he did Machete once upon a time in Mexico. He did Predators. Oh yeah, he did Sin City. Oh, Spy Kids 2. Oh, we lost Frankie. Oh, bye, Frankie. Oh, no. Couldn't take it anymore. Hey, welcome back. You're right, man. Hey, you're mine and I dropped. Did you guys keep the episode going? Baby Yoda's face.  I got you. I got you. Oh, man. Okay. So for sure, we're season to season, we're episode of season two. Not sure if we're episode of Mandalorian as a whole. Oh, yeah. I think four is still going to be tough to beat. Yeah, that was terrible. That was really bad. Really bad. It's nice to know. And the funny thing is, I know exactly why. People are calling this the best episode.  Hit him with the club. And she's so cool with the way that she shot all the storm troopers. One of them had a mortar and one of them had a gun. And then you got hit by a rock. It was so cool. And then the dark troopers, robots. Oh, my God. You see the dark troopers so clear in red eyes. And it's so cool.  Embarrassing. They could have done so. I can't believe all of this episode hinges on Mandalorian forgetting he has a jet pack. He just puts it down and never picks it up. It's insane. The funny part is that the writer's new is like, we can get it so that he'll forget it when it's on the floor. That's not a problem. The problem is getting him to take it off. That's where we have to use our writing skill. So how about we have a Mexican standoff with Boba Fett. And he says like, okay, you lower your weapon and I will lower my weapon. And it's like, okay, actually you put your weapon on the ground as will I. By the way, Mando just disengages the whistling bird things.  But Boba's just like cool with it, whatever. But then he's like, so please put down your jet pack.  Why? Why? Why did you want him to put down the jet pack? That's strange. God, that's some incredibly honest writing. It's insane. It's so bad.  He is officially blaster proof despite half of his body not being covered in a best scar. I will get shot like 20 times in this episode. I will find out in the editing, but I am almost certain I'll do a count. I think he gets shot in this episode in that one scene, more than he got shot in the, in the whole way scene in episode three. Hey, let's move in. I think so, because I think it literally was about 20 times here that he got shot just standing there casually. And she's right next to him, by the way. She never gets shot standing right next to her and he gets shot like 20 times. If she gets shot in like the spleen, Boba Fett can just make her a mechanical spleen. I love that you were, you know, we all sort of see it and we're like, okay, what's the explanation? I thought they weren't even gonna explain it, but I actually think they did a worse job. They said like, oh, Boba Fett just fashioned her a mechanical torso, I guess. Excuse me. You know when they had the mechanical hands? I think the writers were like, we can do mechanical stomachs, right? That's something people are okay with. That makes any sense. I can't have anything too spicy, but other than that, I'm fine. I don't get it. Mando, first time trying to get big baby Yoda up. Okay, it doesn't work fair enough. I'll buy some time. Second time. Oh, it still doesn't work. And it's like, okay, that's enough, right? Okay, I'll try a third time. And it's like, I guess I'll protect you and run away. And the second later baby Yoda is like, oh, I'm sleepy now. Like it's so clunky.  He would have seen the second person come out of slave one if he had just stayed up there and kept his eyes on him. How far away he walks the first time. Let me see if I can find this, the frame. Like it's super far away. It's insane. By the way, Boba Fett, you know, he blasts off as soon as Mando ship is destroyed.  Slave one might get blown up too. You should go and get it, Boba. So this is like two stupids in one to counteract each other. Because the thought I had, oh, I'll put that on the screen.  He walks all this way over here. What's the long way? That takes a while to travel that distance on foot. It's super far away.  Ian, I also love that he knows that Baby Yoda is immune to blast a fire right now.  But I was just going to bring up, so had the Empire blown up slave one as well, either Boba might even have died, but it just, it changes everything. It's basically the point I'm going with that one. Simultaneously, if Boba hadn't blasted off to go and rescue his ship from potentially being blown up, which apparently the Empire had no interest in for some reason, we've seen the people who own these ships just mowing down your stormtroopers from up there, so I guess that's just not enough evidence to consider him hostile.  Oh yeah, yeah. But it's funny because that problem gets dwarfed by Mando forgetting he has a jet pack. Didn't even need to do that. Like they all have the whole surprise element of them being in orbit, sending down the dark troopers. Yeah, dark troopers. Like they already have the surprise element. They could have just sent like 12 of them and just like a hard fight and they still get Baby Yoda. They don't need to make Mando like a retard again. Why wouldn't the Empire sent down the troopers at the same time the stormtroopers came down?  It's so incredibly lucky that this weird force ritual that Baby Yoda was doing didn't last another minute, because if it did, everything would be different. Yeah, I guess so. Yeah, robots wouldn't have been able to grab them.   But man, it should be testing your ability to take the show seriously. Eddie went out there who still thinks this is great.  Dude, I guarantee you many people in the audience were like, oh, because that's what he used to, that's what Baby Yoda's play was. Have I made out of the best guy or what? Yeah, obviously. I, yeah, I'm calling. He stabs Moff Gideon with the best guy. Definitely. Yeah. And then as Moff Gideon dies, he's going to say, you have no idea what you've done. He's going to be like, oh no. Because they need to have maybe he needs the best Garstiel to fight the Dark Saber because they're going to have a melee fight with the Dark Saber. Yep, yep.  Oh, and let's not forget, like Boba, Fat and Mando are going to have a moment in seven or eight with it probably for reference. I actually feel like this is so probably on point that I want to reference this before the episode's out. Okay.  Oh yeah. And they're back, back. They're going to do that with Boba and Mando. Either a hallway or an arena, but they're both just going to be shooting their guns together. Mando might say like, we make a good team. And then Boba's like, I work alone. Even though I don't. Even though he doesn't. Even though I don't. I work alone normally. It's a cool line. I'm saying it anyway. And while they're doing it. So yeah, I picture that they're going to, it's going to be Bill Burr, Sniper Girl, Boba Mando, possibly Gina Carano. And they're all going away. Bill Burr is the guy I need to find baby Yoda.  I mean, yeah. So next episode is going to be them getting Bill Burr out of jail, I guess. And then episode eight is going to be the big finale climax.  Oh, maybe. Like they have someone being in some situation. Oh, it's all from Bill Burr's POV or something. And he's like, what the hell's going on? And then they grab him. Something's going on here. Let's go. Well, they can't fight the New Republic because that would make a many of these of that faction. And Cara Dune, I guess, is a marshal with them now inexplicably. Well, obviously, who knows what's going to happen. I'm expecting hallways with all of them walking down them. Stormtroopers turning corners and getting shot down. It's going to be epic. Can't wait. Oh, yeah. There's going to be a lot of dead Stormtroopers these next two episodes, as if we didn't have enough because like, guys, this, the Stormtroopers are worthless. True.   Also, I just want to bring it back up. Knee rockets. Knee rockets. They were there with projectiles, whatever they were. They shot little rockets. Yeah. Instead of him just shooting the two guys with his gun, he shot them with his rockets. Are we going to see the scene where Boba goes to this shop to get extremely specialized knee rockets to replenish the ones he used? I don't know why he took the time to prep and fire knee rockets instead of just shooting his gun. Just shooting them, yeah. The knee rocket thing was pretty dead.  My guy's got knee rockets. Yeah. You're like, oh, that's so cool, man. This is one of the things I think I want to, I want to, you guys, I've made aware of this kind of funny. It's just the opening of this. This is, so this is Star Wars theory, which is one of the most popular channels for what he does, which is just instant reaction review of an episode, I guess. And his video is called The Mandalorian Season 2 Episode 6 Breakdown. Oh my God. And the top comment says, Boba is amazing and he's pinned it himself. Yeah, so it is that simple, isn't it? Well, just listen to this opening. Here we go. This was my absolute favorite episode of the entire season. It was action packed and everything that the 10-year-old me would have loved. Yeah, I can see why a 10-year-old would like this. Yeah. So on the face. It's everything 10-year-old me would love. It's like, yeah, good job. Also, I see someone has made this. Gotta give it up for Boba Fett. I do, I do remember Boba Fett. Give it up for the man and the man, The Mandalorian, Arm of Babies and Gentlemen. Boba Fett. Boba Fett, Boba Fett. He's coming back. Boba Fett. He's got a backpack and he flies. He's so cool and mysterious, he wears a mask. Oh, I love that. That's awesome. I feel like it's so clear. All you have to do is have an old Star Wars character doing cool stuff. I can't stress enough. The writing of that episode was really bad. Yeah, worst episode of the season. Easily. And we had some doozies already. Yeah, episode one was still really bad. Three was really, really bad. Four was pretty bad as well. Yeah, so, see you for the next ones, folks. Yeah. Bye-bye, Boba Fett.  Help. But you bring me. Let this serve as your warning.  Get out. We're gonna need to find something stronger.  You just made this way too personal. It's war. Walk it all down and find me the Bat. New Star Wars show episode with Green Mandalorian sniping lady and the robot people stealing the Gremlin dude was epic. There was a lot of action, rocket slash sticks and ray guns, scenes, boulders slash mortars and ships. Can't wait to get the EFAP coverage out. Was so cool. It really felt like Star Wars. Also correction, Green Mandalorian is called Django Felt. And I just missed it. But the episode felt very excellent and was visceral in the tactile approach to action. You have to admit it's better than the sequels. How many people do you think will take this seriously? You put it out right now.


Hi everyone. I'm Michael Roth. I'm from AMD and I'm here to provide a development status update on SCV-SMP support for Linux. So a quick overview of SCV-SMP and the features that it adds. This was introduced with the Zen 3 CPU architecture. Previously, before SCV-SMP, we had SCV, Secure Encrypted Virtualization, which provided guest data confidentiality through encrypted guest memory. And we also had SCV-ES, which extended guest data confidentiality by encrypting the BCP register state. And with SCV-SMP, we build on SCV and SCV-ES to also provide guest data integrity, and that's through the Secure Nested Paging feature, which is the namesake of SCV-SMP. But there's also some additional security features that fall under the SMP umbrella. These mostly relate to control flow security, so things like CPU ID security. So when you issue CPU ID instructions and the guest, those are generally emulated by the hypervisor. And in some cases, guest code might rely on well-defined behavior based on how hardware implements things like CPU ID leads. But in emulated context, some of those assumptions could potentially be broken. So there's some features to guard against that in the case of CPU ID, and also similarly with Interrupt Security and Secure TSE. So here's a quick overview of where we're at with the overall upstreaming status of these features. One big milestone that we recently hit was the guest SMP support for both the main Secure Nested Paging feature, as well as a CPU ID security, our upstream as of kernel 5.19. And the SMP security feature doesn't rely on any hypervisor support, so technically that's done as well. But the core focus at the moment is on the Secure Nested Paging hypervisor support. The latest patch set was version 6, and we'll be following that up with version 7 fairly soon. And most of this talk will sort of center around where we're at with implementing that, and some of the recent developments upstream related to getting that code merged. So before we get into how Secure Nested Paging works, just a quick overview of how Regular Nested Paging works. So with Regular Nested Paging, we have a guest page table that maps the guest virtual address to a guest physical address, and a nested page table, which then takes that guest physical address and maps it to a host physical address. And in the case of SEV and SEVES, there's a seed bit that could be set in the guest page table to to know whether or not that guest physical address should be treated as a private page or a shared page. And in the case of private pages, we use encryption to provide data confidentiality on access to the accesses to that table. So whenever the guest tries to write to a GPA with the seed bit set, the memory controller will encrypt that data using the guest's encryption key and then same for when we read from that encrypted GPA. So that mechanism for controlling whether or not a page is shared or private sort of lives inside the guest page table as far as the host, the nested page table, and accesses to the host memory pretty much appears just like regular guest memory, except if the host tries to write to that, it's just going to end up writing garbage because when the guest reads it, in the case of a private page, it's just going to try to decrypt it using its encryption key and then it'll end up reading garbage because it wasn't originally written using the guest's encryption key. So that provides data confidentiality because you can't get the contents of what's in those guest pages due to encryption, but you're still susceptible to things like remap and replay attacks because since the host still has full control over the nested page table and host memory, it can do things like potentially save an old copy of a particular guest page and even though it's encrypted, maybe due to the time of boot that page was saved off, an attacker might have a good idea of what's supposed to be in that page. So if he then tries to write that page back into the guest by writing directly to the host memory later, potentially he could try to manipulate the guest in that way or he could just straight up write into the host memory to corrupt the guest data and the guest won't be aware. But in reality, there's actually some mitigations in place that guard against most of the more common sorts of attacks of that sort, but with enough experimentation you could potentially get the guest to do something that it's not supposed to. So that's where the secure nested paging comes into play. So in the case of secure nested paging, we still have the guest page table that maps the GBA to the GPA and then the nested page table that maps the GPA to an HPA, but now there's also a reverse map table which maps the host physical address back to the guest physical address and also provides some additional metadata that could be used to provide some additional integrity checks on accesses to that page and the host physical memory. So to get a better idea of how this works, let's take a closer look at the data that's actually in those RMP entries. So for instance, in this case, guest A has a private page at GPA 2000 H and the nested page table maps that guest physical address to the host physical address 7,000 H and oh, I just realized my cursor doesn't show up there and so and then 7,000 H, the host physical address then has a corresponding entry in the RMP table with some additional metadata that tells the that the hardware uses to enforce certain restrictions on on accesses to that page. So here you have the assign bit set which tells the hardware that host physical address 7,000 is assigned to a guest with ACID 2 in this case and the guest physical address that it should be mapped to in the nested page table by the nested page table is 2000 H and one important detail here is the validated bit. So when the host sets up the RMP table entries for the guest, the host can use this RMP update instruction that can pretty much manipulate all of the entries in this table but the real security comes from the fact that it can't set the validated bit in that table. So in order for the validated bit to be set, the guest prior to using the page has to issue a pValidate instruction and when it issues that pValidate instruction, that's when the validated bit gets set and then from that point forward, if the host tries to manipulate the RMP table so that it can manipulate the guest data, the validated bit will be on set and then if the guest tries to access that address later on, it'll get a virtual communication exception, pound VC and generally the guest will terminate itself in that case. So let's take a closer look at what is involved in implementing this secure nested page table support in KBM. One thing we need to do is we need to set up the memory that the hardware will use to store those RMP entries. Another thing is when the guest is created and set up, we need to make sure that those pages are pinned and there's actually a SCV and an SCVS have a similar requirement in this regard because the encryption algorithm that's used to encrypt those pages is sort of tied to the physical address that backs those pages. So we actually already have a KVMI octal that's used in those cases to register those pages that might be used for encrypted guest memory and also pin those. So in the case of SMP, we reuse that KVMI octal but we also need to add some additional handling to make sure that we update the RMP entries to correspond to the initial state of guest memory. So when you initially boot a guest, you'll have the initial guest image like the OVMF ROM and those will be stored in guest memory as encrypted pages. So we need to make sure that we update the RMP entries to reflect that before booting the guest. And then after booting the guest, the guest can potentially issue page state changes in the form of GHCB requests to change the state of the page from shared to private or private to shared. So we need handling in KVM to deal with that as well. Another thing we need to deal with is the RMP fault handling. That's sort of the mechanism that's used to enforce the restrictions that are placed on host memory accesses. Those can be surfaced in the form of a host page fault in the case of host threads that are trying to write to particular host physical address. And then we also have the analog for when a guest tries to access guest physical addresses if those accesses don't align with the state of the RMP, the corresponding RMP entry, then those will result in nested page faults, which we also need to add handling for. So let's take a closer look at the host page fault handling. So in this particular case, we have thread A, that's a vCPU thread that's running in guest mode. We have the guest page table that maps a 4 kilobyte GPA as a shared page, and the nested page table maps that to address 602,000 H in host memory. And we also have, in this case, thread B, which could be a user space thread like the VMM process itself that's running the guest, or it could also be a kernel thread. And in this case, that thread has a huge page mapping that overlaps with that same address, 600 and 2,000 H. And in this case, everything's fine because the page in the guest page table doesn't have the C bit set. So it's just a shared page, so it's treated like any other host page. And there's no issue here, but if you attempt to, if you switch the page to a private page, then you'll have problems, because in the case of thread B being a user space thread, because that huge page mapping overlaps with the private page, if you try to write to any page within that 2 megabyte range, even if you're not overlapping with that particular private page, you'll still trigger an RMP fault, because as far as the hardware is concerned, you're writing to that 2 megabyte region, which contains a private guest page. And in the case of user space, that's fairly easy to deal with. We just split the mapping in the user space page table, and then at that point, there's no overlap, and the process can continue executing. But in the case of a kernel access, for instance, if the kernel has a completely unrelated thread that's trying to access some subpage in that range using the kernel direct map, because the direct map uses 2 megabyte entries by default, in that case, you'll get a host page fault for that kernel access. And in that case, it's basically a host bug, there's no way to dynamically split the host arm, the direct map dynamically like we do in the user space case, but we do have interfaces to split the direct map in advance. So that's how things are currently implemented, or at least that's how things will be implemented in version seven. We use a similar approach in version six of the SMP hypervisor patches, but instead of directly splitting the direct map using set memory 4k, we actually unmapped the private page from the direct map, and then that ends up splitting the direct map in this particular case, because if you remove one entry from the direct map, then you have to split it in order to remap all the other entries that you didn't remove. So in either case, we basically end up splitting the direct map to avoid this scenario here. And another situation we need to deal with is in the case of just a normal 4k write, if you try to write to that particular page, then you'll get an RMP fault because hardware enforces that the host can't arbitrarily write garbage to private guest memory. And in the case of user space, if this situation happens, like the VMM tries to write to a page that the guest has flipped to a private state, then we'll basically just signal the process to terminate using SIG bus. And currently in version six of the hypervisor patches, if the kernel tries to do the same thing, we'll basically just crash the host because that's considered a host bug, and it's better to crash the host than to silently let it do this. But in version seven, we'll likely be changing that behavior because there's a situation here where maybe the kernel thread that's trying to access that page is trying to access it for something like a KVM clock or a Verdi O buffer where the host thinks it's supposed to be shared, but then the guest tries to maliciously switch it to a private page so that the next time the host tries to access it, it generates that page fault. And we don't want to crash the host in that case. So for version seven, we're exploring an approach where we just flip the page back to shared if the host thinks it's supposed to be a shared page. And if we do things that way, the guest, in the case of a malicious guest, if that ends up breaking things, that's okay because a malicious guest or a buggy guest because a guest isn't supposed to be switching pages to private out from underneath the covers. So that's undefined behavior. It's okay if the guest breaks in that case. But we do need to watch out for the case where maybe the host does this in error. It flips the page to a shared page because it thinks it's supposed to be shared, but it's actually a bug in the host. And if that happens, we don't want to silently corrupt the guest's memory. But because of the way S&P handles things, if we flip the page to shared and the guest isn't expecting it to be shared, it's expecting it to be private, will unset the validated bit in the RMP table. So the next time the guest tries to access that page, it'll see that that validated bit was unset, and then it'll get the pound VC exception so it can terminate itself. So that's how we handle things for host page faults or nested page faults. There's some similar checks in place, but things are a little bit different here. So in this situation we have thread A which has a two megabyte mapping for GPA 200,000 H to 400,000 H, and then the nested page table in turn maps that as a huge page to host physical address 600,000 H through 800,000 H. And then we also, in the RMP table for the RMP entry corresponding to 600,000 H, we set a bit in the RMP entry that tells the hardware that the data in that RMP entry should apply for that entire two megabyte range. So that helps speed up the RMP lookups for the optimal case here. But in order for this to work, when the guest validates that GPA range, it needs to issue the pValidate instruction with the huge page bit set to tell hardware that it does have it mapped as a two megabyte page. And if it does, then everything works fine here. But if the guest actually tries to validate this, that GPA range using anything other than the huge page, for instance, it tries to validate it as a 4K page, then, you know, because possibly it's just not an optimized guest or because it actually has that GPA mapped as a 4K page in its host page, in its guest page table instead of a two meg page, then in that case we'll get a nested page fault. And to handle that, we need to split the nested page table mapping so that it no longer maps that GPA range to a huge page and instead maps it as individual 4K pages. And then we also need to issue a piecemash instruction to split this RMP, this two megabyte RMP entry into individual 4K RMP entries, at which point the guest can retry the pValidate instruction and in this case it'll succeed. And there's another set of checks here with the seed bit. If the guest tries to do an implicit page state change by instead of issuing a GHCB request to tell the host that it wants a particular page to be shared or private, it might just update the seed bit in its page table. And if the state of the seed bit in the guest page table doesn't match the state of the page in the RMP table, then that'll also result in a nested page fault. And in that case, the nested page fault will have the RMP bit set as well as a bit to indicate what type of access the guest was trying to make. And to deal with that, we have some handling to update the entry in the RMP table to match what the guest is expecting. And so that's how things are sort of implemented for the secure nested paging support for the current version of the SMP hypervisor patches. And the handling there hasn't changed much since version five. There are some changes that we're looking at for version seven, but things are mostly sort of stable in how we have things implemented. But there's a new development upstream that we've been looking at, and that's called UPM, Unmapped Private Memory. And UPM basically refers to some proposed kernel infrastructure that's used to back confidential guests with pages that can't be accessed by user space. And the initial implementation of that UPM support is a Chao Peng's Private Memslot patch set. So when I refer to UPM, I'm basically referring to the changes introduced by that patch set. And UPM has been proposed by a number of different people for a number of different reasons, but as I understand things, sort of the main driver for UPM is Intel TDX, where in the case where user space tries to write to a private guest page, in our case, we just killed the guest. We get a page fault, and we signal the process to terminate. But in the case of Intel TDX, that results in a machine check, which would crash the host. So it's important in that case to have some infrastructure in place so that user space can't write to guest memory, guest private memory. And so we've been looking at how to leverage that for SMP, and there's also, I think, a prototype that was recently implemented for PKVM that makes use of it as well. So just a quick overview of what UPM, what the flow of things look like with UPM. So with UPM, you have this new private Memslot structure. So before getting into that, in the case of a normal Memslot structure, if you have a nested page fault for a guest, and you need to do a GPA to HPA lookup to figure out what host physical address to map into the nested page fault, into the nested page table to handle the nested page fault, you take the GPA, and you use that to basically index into the Memslot and figure out what HBA is supposed to back that GPA, and then you walk the VMM processes page table to get the host physical address that that corresponds to. And then that's what you program into the nested page table. And that happens the same, both for shared pages like 2000H in this case, or for private pages like 3000H, the handling is the same for either. But in the case of the private Memslot structure for 2000H, the shared page, the handling is the same. But for 3000H, there's now this X array structure that's used by the KBM MMU to check whether or not the GPA is supposed to be mapped to a normal page or a private page. And in the case of a private page, when we try to look up the corresponding host physical address, we will use that GPA to get an offset into this special MemFD back end. And that MemFD back end can then be used to get the host physical address to program into the nested page table. And that special MemFD back end has some safeguards on it so that user space processes can't read or write to those pages. And they also can't use MMAP to map them into the processes address space. I mentioned implicit conversions, implicit page state changes earlier. This is sort of how things look like when we implement them with UPM. So in this case, you have the GPA 3000H, which in the X array was originally mapped as a shared page. But in this case, the guest has flipped the C bit on so that it's now a private page. So when that happens, you get a nested page fault. And the KBM MMU, when it gets that page fault, it'll look in that X array and see that the current state of the GPA 3000H is shared. So in response to that, there's now this new KBM exit memory fault, which will exit to user space to the VMM. And then the VMM in response to that will make sure that there's a page allocated in the MemFD using an fallocate syscall. And then the VMM will issue this KBM MMCrypt register region iOctl to tell KBM that that GPA is now backed by a private MemFD. And at that point, if you restart the guest, then the next time it generates a page fault, the KBM MMU will be able to map it to 8000H without having to exit to user space. And we also have the case of explicit conversions, which in the case of SMP are in the form of GHCB requests. So in that case, we don't need the KBM MMU to determine whether or not it needs to call out to user space because the guest is specifically telling us that it wants that page to be treated as a private page. And normally in the current SMP patches, that request is handled completely in the kernel. But with UPM, we have a new KBM exit VMG exit, which basically forwards that GHCB request to user space. And then user space in response to getting that will basically do the same thing that it does for an implicit conversion. You may reuse the, okay. So yeah, the question was, is there any reason to not to reuse the KBM exit memory fault exit instead of introducing this new KBM exit VMG exit? And yeah, that's a good question. And that's something that we've been looking at. The main reason not to do that currently is the GHCB requests can do batching. So you could have over 200 individual page state change requests in the GHCB buffer. And by batching them, we get a little bit better performance. But yes, something I brought up in the LPC micro conference. We did a talk there on UPM was potentially adding the support for batching to the KBM exit memory fault exit so that we can basically take that GHCB request and package it up into this KBM memory fault using like a scattergather list or something like that. And if we do things that way, then maybe there could be some common handling between SMP and TDX if we both end up taking that approach. So yeah, that's something to consider there. So that's sort of what the flow of things look like with UPM. There's a lot of different pros and cons to consider. Most of the cons are sort of in the user space implementation of this, because now you have the normal memory allocations and then you also have this private FD. And if you're not careful to deallocate pages from the private MEM FD in the case where you're flipping from private to shared, or deallocate from the normal memory in the case where you're flipping from shared to private, then you could eventually end up using twice as much memory. But sort of the flip side of that is if you do that for every single conversion, then there are some cases where allocating and deallocating frequently because pages are getting flipped frequently can cause some performance issues. Like there's one case in OBMF where to handle bounce buffering, it will flip a page to shared, do the DMA, and then flip it back to private, and it will do that hundreds of times, and all of those allocations and deallocations can hurt performance pretty dramatically. So there may be potentially some balance that you might want to strike on the user space side where you don't necessarily deallocate and reallocate on demand. Maybe you have some threshold where after a certain point you decide that it's time to discard pages from one backend that are no longer being used. And thank you with that. We're a time. Well, that's what we're looking at currently with UPM. And currently in version seven, we won't be utilizing UPM yet, but we're sort of working with the community to see if we can make that workable, but otherwise we're happy to stick with the non-UPM solution as well. Well, sorry for going over time on that. We should have kept better track. If anybody has any questions, feel free to grab me after. If anybody doesn't have a better question, would you make a one-minute summary of the UPM discussions as slumbers, so that they also get recorded for people who don't have slum yet? If anybody doesn't have a better question, make it one-minute. Yeah, so yeah, the summary was basically, yeah, so it wasn't necessarily the UPM implementation as it exists today, except in the case, we did mention the batching support for KVM exit memory, I think some folks from Google there, we're sort of interested in that solution so that we don't have multiple different sorts of implementations that need to be done in user space. But there's a couple questions around things like how to deal with the kernel DirectMap. I mentioned that we split it currently for SMP and I think for TDX there's similar requirements where they may need to split the DirectMap, so maybe that's something that UPM could potentially address as well, and I think those are the main ones.


Discord Chat Services, initially released as a chat service for gamers, has been gaining traction since its release in 2015. Now it's looking to take the top spot of chat services, so it's time to take a closer look at Discord. With more than 140 million active users and 4 billion minutes of conversation happening each day on Discord, we ask the question. Would Discord be the new king of the video chat platforms? What is it that Discord offers that has so many people leaving Skype and moving to Discord? Discord lets you make video calls, audio calls, scream sharing, and also offers what it calls servers. Servers are like group chats but with many more options to play with. It works across all platforms like iOS, Android, PC, and even your own favorite browser. In terms of data usage, Discord offers greater efficiency than Skype as it does not require as much bandwidth. This translates to sharp video calls and high quality audio. How about privacy? Discord takes privacy very seriously. It auto-encrypts chats and all other data. Even more than this, Discord protects your IP address keeping your location hidden. Its privacy and security features gives it a real advantage over other major video call platforms. Burn to Learn is working to help you understand the changes in technology as they happen. Stay in the know. Subscribe today.


Hello and good evening everybody. Welcome to the Adafruit show and tell. I'm Liz I'm gonna be your host this evening if you would like to join the stream to show up your projects You can find the link to the stream yard in the discord server at adafruit.it slash discord First we're gonna kick things off from with some Adafruit folks and then we'll hear from people in the community So kick things off. We're going to hear from Scott Hey Liz. Thanks for hosting. No problem Oh, I just had a huge yawn. I'm like, yep, I'm still a little jet lag. Yeah Yeah, things are all right. I'm back Working on stuff and one thing I did manage to do because I was just I got it and I couldn't help myself Because I got this giant e-ink It was 150 bucks which is actually pretty cheap so it's a 13.3 inch screen Okay, and usually the these screens are While they're there like hundreds of dollars not just 150 bucks and they're usually like much harder to drive But this one is Still drives like the smaller ones. It's just giant. Yeah, that's very cool I had one thing that and you see I actually there's debugging code on here that was printing out as well I don't actually haven't plugged in But I did have to figure out how to get it working So that's on my to-do list is to add one more knob that we can turn so that these displays will work There's also like a 10-inch display that also has the like uses the same Uses uses the same control chip I think so I thought that was really cool. It's giant and I'll be adding the little knob to make that work in a little bit Then the only other thing I wanted to plug is that I will be doing deep dive on Friday. Yes, and I want I want to go take a look back at Circuit Python 2023 posts Which is We always do these annual planning sorts of rounds of hearing from folks And so in prep for a circuit Python 2024 and post for that I wanted to go take a look back at the stuff that we said in 23 And then next week all right my 24 posts so check out deep dive 2 p.m. Pacific 5 p.m. Eastern on Fridays great and where should folks if they're writing their own 2024 posts send them Yeah, so if you write one If you blog it up use the hashtag circuit Python 2024 and there's also a circuit Python 2024 at Adafruit email that will go to like Phil and I and then we'll start Blogging those up in the blog and we got new graphics and stuff too. So excellent Yeah, excited to see that from everyone. Yes me too. All right. Thanks so much Scott Thank you Now we're gonna hear from Brent Hi, Liz Scott, I'll be blogging that up soon. I also want the yank display so this week I worked on the doorbell project for the memento Which actually has an ESP 32 s3 on the back so you can send images to your favorite IOT platform such as Adafruit IO so I have like this Um This is we sell this native resource like a momentary button. Yeah, and it's wired up really nicely. I've been making these like Wiring harnesses that go to like JSTPH and they're really nice and keep these projects like very simple like minimal amounts of soldering Yeah, so yeah, it's great and like especially the doorbell. It's like really nice. So you press the button and it makes a little noise and this takes a picture and It sends an image to Adafruit IO and encodes it It's really small Because the amount of data we want to send needs to be really quickly like we don't want to send a huge amount of data like a really large image And then on Adafruit IO. Oh, wow, it gets the image. So Yeah, that everything's like working properly and I think that no way is going to work in a case for this and then we'll do a project on it So like really simple project like a hundred and three lines of code total and It's like a build your own Nest doorbell kit Yeah, that's great. And that was an excellent live demo too. I'm looking forward to the guide for this Yeah, thanks. All right. Thanks for coming by Brent. Totally Next we are going to hear from Jeff. Oh, sorry, I'm sorry next we're gonna hear from maker Melissa Hi, how are you? I'm doing well. I also have a not quite to the giant key display that I want to try and get working But excellent. It's like seven inches or something. Anyway, so what I actually came by to show is I actually have the On the press very high five. I got the desktop showing on the TFT for a bookworm Including some touch here. It's kind of what I've been working on sweet and So I'm gonna be working on updating making sure that The strategy I'm doing is gonna keep lasting for it and then write up some information about do that on a guide That's awesome. And What is exactly is involved in doing that to get like the support working like what have you been having a kind of hack on? Um for this one try various things what I ended up settling on is I'm actually loading two different Overlays one amusing the nippy DPI spy overlay and I had to give it like what the GPIO is for the Data command line and then I'm also loading a second one where it's loading for the touch driver So that way you can Mix the match a little bit Very cool. Well, thank you for working on this and making it easy for folks to get everything working with all of our raspberry pies Thanks. All right. Thanks, Melissa And now we're going to hear from Jeff Hey Jeff. Hi there So I don't have a hardware project today But I wanted to show you a little item that I wrote up as a native for playground So on github if you've used it for a while you end up with a lot of repositories. Apparently I've got 428 because either you start a project of your own or you create a fork of some other project and I'm inspired by Scott with the idea that these that things should be short You know, he concentrates on the number of open pull requests in circuit Python But I set myself a goal of I should really have just a couple pages of Projects on github. So I went through manually like with my my own original projects and archive the ones that I wasn't gonna work on anymore But that left all of my forks Which was the vast majority of them And so here we're down to just 51 but you know based on this 428 I had like 300 plus of these things and archive one you got to go into the project You got to click the gear you got to scroll down You got to click archive you got to type in the name of the project and click okay, and I'm like this This is awful. I'm not going to do this for for two or three hundred items. So Github has an API and you can interface to it with a package called pie github. It's really pretty easy and so I Wrote up this guide you have to create an access key with certain permissions and run this code and the code ends up Being just really simple. I decided if I hadn't worked on my project in two years Then I could archive it Also because I'm in the Adafruit organization things were coming up in my list of projects that were actually Adafruit projects So I'm like we need to filter that out. So that's why I'm checking my owner name And then you just looped through all your repositories If it wasn't already if it was already archived you don't need to do anything If it's owned by some of the organization that you're a member of don't do anything And I only wanted to work on forks not my own original projects And then this prints a line and if you actually want to archive it you and comment that line and run the script and like two Minutes later you're down from from 300 to just a screen or two full of Fork repository. So in my case that still leaves me with two screens full Stuff but it's a lot more manageable And you know when people search for you on GitHub It's nice if they're not seeing a bunch of stuff that you have no interest in not working on That's true and ask you questions or whatever. So anyway, that's what I've been up to that is on Adafruit playground website And I will drop the link on discord if you want to actually check that out. Excellent. Thank you so much That's really helpful. I'm I appreciate you sharing that All right. See you around. Thanks for hosting. Have a good one And now we are going to hear from Aaron Hey, how are you good? How are you good? I am Working on I just launched a new tutorial for these I like glasses.  I can oh, yeah. Yeah Here we go. Nope. This is yeah So you're finding your Yes, I got it. Okay. So this is Basically, I have some kids that wanted to play with these and they were just so excited So I wanted to come up with a project that was pretty easy where they could make up their own designs. So We're I I figured out how to use this free online app called Pisco, which makes spray sheets And what that is is basically a whole bunch of little frames of animation Which then you can upload to the glasses and then we made one that's a Christmas tree This sort of decorates itself and then the the highlights driver actually has an accelerometer on board So what we did was turn it so that when you tilt the glasses up it will change to the next image So we made some little flames and tilting again And we have these little bubbles that blink and pop and wiggle. So I'm also added a brightness There's a little button on board this thing. So there's a brightness indicator, too So every time you press the button it will cycle through brightness modes, which is real nice because these can be blinding Yeah, right, but if they're you know at a dim setting, then they're not bright enough during the day So I wanted to add that control to and I just launched this guide And again, this was like the bubbles were designed by my my friend who's a 10 year old and Is it really fun sort of collaboration to do with the kids and the two kids that I've gotten this house? Just absolutely can't take these things off. So they love that's awesome I love that you were able to kind of show them how the stuff works and get them interested. That's so cool Absolutely. All right, Aaron. Thank you so much. Thanks. Have a good one and Now we will hear from John Park Hey, hello. Hello. How are you? Good except? I had this bowl of crater Joe's checks mix that I thought was gonna tide me over while I waited But I finished it way too quick. So I've been I've been excitedly waiting to get on because I'm gonna go back in there and just plow through the rest of that bag That's my mini mini review this. I don't know what they call it many things. I think they call it But it basically checks mix and supreme nice But that's not actually what I'm here to talk about I want to talk about a remote control I built for the Memento so with some of the projects I've been doing on the Memento including in particular time-lapse and Stop motion projects. I wanted some Remote control so I'm not bumping the camera if I want to keep things locked down There's a few ways you can do that like with wired buttons Which are much simpler than what I ended up doing here and are probably a good addition to your arsenal of of camera tools but in order to Remotely and wirelessly talk to the camera since this has ESP 32 s 3 Wi-Fi is a particularly good option for doing wireless stuff on it I don't think we have Bluetooth and circuit Python for this chip yet so I looked at Wi-Fi solutions and the one I came up with is using OSC which is The name is misleading because it stands for open sound control, but it is a Sort of a more modernized take on MIDI that was developed probably now 15 or more years ago 20 years ago, but that's much newer than MIDI and it is Not only a sort of a communication protocol for sending messages between devices But it tends to have a lot of really great applications for developing a user interface So I'm gonna add my my camera view here. So this is the moment though I just have it like hooked into a little tripod and Over here is my iphone and on the iphone I've got an application that I is called touch OSC and then within touch OSC I Moved widgets around and gave them names and sizes and colors and behaviors And am able to essentially with the micro OSC library on the memento in circuit Python It hosts a little server that's then just looking for clients like this to tell it things about button presses So for example if I press the big red one in the middle You can see it just said snap over here So it's gonna snap a picture every time I do that if I want to change the focus I can hit this and you'll see it Refocus if I put like my an object close up to it. You should see it shift a little And then we can take more pictures and we can also run through the different modes on the camera So this is sort of default JPEG mode. I can go into Game Boy mode Which gives us this black and white dither just like the Game Boy camera We go into stop motion mode the GIF mode shoot a little 15 frame GIF animation this is recording and then finishes and then there are also a whole bunch of settings which Typically, you can use this is by the way Jeff's Really cool Jepler's really cool camera application Example code that he wrote one of the things you can do with it is change the resolutions as well as the LED ring on the front of it to light things up and Pick different effects.  That's now this is really impressive I can turn on the LED ring light pick the different colors They're just some preset colors here. No color mixing and then we can also go and change The effects so I can do a black and white I can do reddish blueish sepia tone Solarize it I go over to invert one of the fun things with the invert is that it or actually both with invert and solarize It's impacted a lot by your colors that you're blasting into the image So you can really change kind of what things are emphasized by blasting it with with the LED ring And then while that while that's all doing its thing you can head back over here and start taking pictures So I'll show that off on the show tomorrow the app as well as how it was built OSC is kind of an open thing like the name implies and then there are different applications I happen to be using touch OSC which costs just a few bucks on I think maybe 12 bucks right now for the the newer version of the app on your phone and about 30 bucks for the desktop authoring But you can use a lot of other free tools to do that. That's just a nice option out there And so that's what's going on with my my camera mode and I should show you and no strings attached It's an actual iPhone. I also have it running on my iPad for testing purposes That's so cool and the UI looks so sleek and it's really fast with how it responds. Yeah I'm really impressed with how fast it is and there are a lot of opportunities to go deeper I might show some of that stuff tomorrow. I'm new to touch OSC, but I started using Lua scripting in the Individual elements so you can do things that both update the UI so you can do little bits of scripting where like colors change in here When one thing happens or another thing happens As well as providing functionality that are not in these sort of default widgets that you drag around and name and position so Exciting fun and you can use it a lot of other things, but it seems like a really nice option for Remote control in this camera here. I agree 100% so looking forward to your show tomorrow. Thanks so much. All right Have a good one. Enjoy your checks mix All right, now we're gonna hear from some folks in the community and we're gonna start things off with Sun and Moon couture Hello, everyone. Thanks for having me. I'm Anthony. I'm the assistant designer at Sun and Moon couture We make bespoke tech fashion couture focusing on LED wearables for festival audience If you don't know my wife does miss Chia couture So she has her own line and she makes these like chain gem outfits That are for mainly for women in festival attire And I asked her can we kind of expand and make something that's more for men and could even be worn outside of the festival Audience right and so she designed this jacket. It's like a kind of a vest Yeah, I really like it and I'm wearing it over like a business jacket So you could wear this to a lot of different types of events And it if this was the only thing I was showing you would ask why am I doing this on Adafruit? So there is a battery box. I'm gonna turn that on real quick This has the fixed address neo pixel Fairy strands behind each one of these gems And it's all Adafruit hardware. It's like your buttons your USB-C port the lipoly backpack The lipo battery The only thing that's not is the controller is pixel blaze. I don't think you guys stock that but you should I'm gonna talk to you about that later But you could just as easily make this with like a cutie pie using Adafruit's neo pixel library That's excellent and the diffusion is really nice. They have there like yeah These gems are you can't really tell from my web camera, but they're like dichromatic So they kind of sparkle with different colors in the sunlight even without the LEDs. They can look like kind of rainbow Very cool That's awesome. Now it works should folks go if they want to see more of your stuff for yeah I have an Instagram. I don't have like an Etsy Etsy shut down my shop Where should I just post that in the three to put any links in the discord chat and folks can see it All right, so I'm gonna link to Sunamoon couture. That's like the LED stuff and also miss Gia couture That's my wife's fashion line where she does all of the chain gems just without the LEDs Excellent. Well, thank you so much for coming by this been great If you do more things with I'm actually I'm planning on doing this every week I'm starting now. So next week. I'm gonna show you this poi that I made that's loosely based off of the Adafruit like supernova Genesis poi that was posted a long time ago, but we've got a new version where you can upload images from your phone So you don't have to plug in the USB to the compile and deploy the code to get a new image So I'll be showing that next week. This is all part of a series I'm trying to do to promote a fashion show that I'm doing in New York for New York fashion week in February So I'll be in New York February for that. All right. Well, it's awesome. Looking forward to seeing more of your stuff then next week Thanks. See you guys then. Have a good one. Yeah, and now we're gonna hear from Peter All right Hi, this is a button board that I built for my dog. So all this looks like camera a little bit There's some words on there and they all every button has an electronic button underneath and when pressed it plays a recording of my voice It's not hooked up to a speaker right now. That's stairs But I actually have the audio output split and it also feeds into a box under that desk back there So even when I'm downstairs in the lab, I can still hear when she asks for things So the reason this is an Adafruit thing is because I have an ancient raspberry pie here And this would have been incredibly complicated if it went for the Adafruit Blink a library that makes it possible to just write Python easily and connect buttons and For for this this proof of concept I Didn't use the matrix keyboard library. I'm actually looking at upgrading it In the near future because I'm running out of pins. Yeah I'm actually already built This is the adapter plate and there's a bunch of diode soldered on here and an army of wires on the back Yeah, that's the matrix keyboard and so that's gonna get installed in here and I'm gonna break out to other boards for new buttons It's actually fairly simple if you want to build it yourself. Maybe I should write a guide for this Yeah, we have the Adafruit playground now where anyone could go in and write of a guide So, yeah, definitely write this up there. Yeah, I've been tinkering with that and this is the one I've been starting starting documenting It's no nowhere near ready. So particularly had it looks empty. It mostly is But yeah, the one challenge I will note with this was If you use ancient hardware like I did like this pie has one USB port Yeah Program something with one USB port like that either has to be the Wi-Fi adapter or the keyboard You're using to input stuff right? Yeah, and so you end up with like a chicken and egg problem where you want to update the Library or update the pie and I ended up having to use the serial headers to have another way of Sending commands and then use the one USB port for a Wi-Fi adapter but Anyway, that's great and also you're using that old pie giving it new life in this project and Yeah There's the old pies really aren't good for much other than audio and I didn't have anything else that had an audio output So normally like yeah, this kind of project you could do with a microcontroller and it Adafruit has lots of great ones for Exactly this kind of thing. Yeah But I didn't have any of those and this was sitting around so yeah, I love that. Yeah, that's great Well looking forward to your progress. Maybe come by one night with the hooked up to the speaker so we can hear it Yeah, I'll have to figure out how to get the camera set up upstairs, but cool. Yeah, and looking forward to a player I know if you end up writing one Alright, thank you. Have a good night All right, so that is gonna do it for show until tonight amazing projects from everyone We had clothing dog buttons fantastic in about seven minutes Stay right here because ask engineer will be starting off right at 8 p.m Until then hope everyone has a great rest of your week. Bye