Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)H
Posts
1
Comments
82
Joined
2 yr. ago

<a rel="me" href="https://layer8.space/@helix">Mastodon</a>

  • Looks cool! I really like some aspects of LLMs but cloud hosting always turns me off.

    You might want to rethink the name though as Loki already is a well known log server: https://github.com/grafana/loki

  • Yep, that's one way. I bet creative hackers can chain some nice exploits together and figure out things we currently don't think of. Better give them the smallest surface possible :)

  • Yeah, exactly my sentiment :)

  • There are different levels of compromise: you could have local access or root access. This might allow a hacker to gain root access by faking an SSHd and asking for a password or something like that. Host key verification would save you in that case, but then again, there's probably funny MITM things you can do with an existing SSHd.

  • Mostly true, however the thing saving you would be host key verification, not pubkey authentication.

    I'm just not into security by obscurity coupled with compromising the inbuilt mechanisms for making sure only root can open an SSHd.

    Do you think high ports are irrelevant or only in this case for SSHd? If the former, why do you think the distinction exists in the first place?

  • Wouldn't use a high port since they're unprivileged.

  • WTF, sorry you had to endure this. Sad to see that silencing seems to work, still. Please report their messages.

    To the people messaging you privately: grow some courage and do it out in the open so we know who you are.

    Trans people are just people born in the wrong gender's body. People who feel the need to attack minorities like this are pathetic losers.

  • Can you please point out the hate speech you received? I can't find any in the comments here, just people having different opinions.

    As the time of writing the comment I am replying to has 15 up- and 3 downvotes. Doesn't look like it has warranted hate speech.

  • https://sqstorage.net/ could be used for that. Just add storages corresponding to the various locations where the items actually are and add meta information like the owner.

  • Syncthing. If you run it on your phone you can keep it always running :)

  • No one does that in a project they’re building for themselves.

    Speak for yourself, I always did that and I found it easier with LLMs nowadays.

    I hate most AI shite with a passion but when it helps my colleagues write commits which are more than "add stuff", "fix some things" I'm fine with it.

    I rarely use AI to generate code, usually only when I need a starting point. It's much easier to unfuck AI code than to stare blankly at a screen for an hour. I'd never commit code I don't fully understand or have read to the last byte.

    I hope OP is doing the same. LLMs fail at 90% of coding tasks for me but for the other 10% (mostly writing tests, readmes, boilerplate) it's really OK for productivity.

    Ethics of LLMs aside, if you use them for exactly what they're built for – being a supercharged glorified autocomplete – they're cool. As soon as you try to use them for something else like "autocompletion from zero" aka "creativity", they fail spectacularly.

  • OK, then all your friends are best friends. What are their theme songs in your head?

  • I'm not a capitalist, I don't care about outages. I can live with Facebook being down for a few days, or my bank not accepting transfers for a day or so. Then again, I grew up with the internet in the 90s and prioritise good software and tools over availability, I guess?

    Obviously at my job I have to do what my employer thinks. But if nobody cared I'd definitely do our Gitlab upgrades once a week once they're out and not in some weird "maintenance window" mandated by SLAs and stakeholders.

  • most trouble is probably caused in the first few days. Doesn't matter if it's 45 or 90 days, it would have to be a few hours to be meaningfully short. Given that automating things like this is annoying sometimes, you'll be sure people will max out the 45 days…

    I'm pretty sure it's the SSL seller lobby just wanting more money, tbh. Selling snake oil security.

  • Could you please elaborate or link to further information?

  • So you think techaro paid them?

  • There are also ham-adjacent projects like Meshtastic that I’m not as familiar with.

    Why don't you buy a node and try it out?

  • Why don't you simply build your own network aswell? https://dn42.net/

    Packet radio has such a low bandwidth usually. You should get more out of directional Wi-Fi, as in 60GHz point to point connections. One downside: if it rains you're out of luck. You'd better run cables ;)