I mean shipping intentional malware should get you banned off github let's be honest. Hate AI all you want, and there are absolutely legitimate reasons to do so, parts of a program intentionally created to do harm to a users machine shouldnt be encouraged.
There is no harm done to the user's machine. What are you talking about? The malware as you call it is limited to the project folder and Claude itself specifically asks you if you trust the contents of a newly opened folder.
I think in this context they're only talking about apps that are no longer maintained. So it is the OG reddit replacement that isn't being maintained. But yeah, kind of weird wording all throughout.
The tricky part with self-hosting isn't just getting it running, it's managing upgrades across the whole stack without breaking dependencies. You need a solid rollback strategy, or you're just asking for trouble when the next CVE drops.
At a certain point I learnt to do things in docker containers, VMs, or separate bare metal. Running multiple services on one bare metal system will get you into trouble.
using docker to maintain all my services is the only way I can selfhost anymore. running things natively just isn't worth it anymore.
I run my own gitlab instance and have repos dedicated to pulling updated images and caching them locally so even if the internet goes down I can still deploy services. what images I don't trust, I build locally from locally cached os base images. and then there's all my custom built apps/services.
I take monthly snapshots of imaged and deploy them. I've actually thought about setting up my own scanner to inspect images for vulnerabilities just to make sure nothing gets deployed that shouldn't.
22 Comments
slazer2au@lemmy.world · 27 pts · 90d
Lol that prompt poisoning from kitty is hilarious.
warmaster@lemmy.world · 9 pts · 90d
Meow
Vendetta9076@sh.itjust.works · 4 pts · 89d
Oh boy I love installing malware on my machine.
slazer2au@lemmy.world · 0 pts · 89d
Don't we all mate.
Vendetta9076@sh.itjust.works · -3 pts · 89d
I mean shipping intentional malware should get you banned off github let's be honest. Hate AI all you want, and there are absolutely legitimate reasons to do so, parts of a program intentionally created to do harm to a users machine shouldnt be encouraged.
EarMaster@lemmy.world · 5 pts · 88d
There is no harm done to the user's machine. What are you talking about? The malware as you call it is limited to the project folder and Claude itself specifically asks you if you trust the contents of a newly opened folder.
EarMaster@lemmy.world · 2 pts · 89d
It is, but unfortunately Claude detects it immediately and ignores it.
slazer2au@lemmy.world · 4 pts · 89d
Boooooo!
Vendetta9076@sh.itjust.works · -1 pts · 89d
Shocking to me that you seem to be upset that the malware doesn't work.
EarMaster@lemmy.world · 1 pts · 89d
I am not upset, but I am busy setting up puppygram.com
BuboScandiacus@mander.xyz · 2 pts · 89d
Uninstalling it rn
I don’t want that type of intentional malware
slazer2au@lemmy.world · 4 pts · 89d
Good, uninstalling Claud will make you a more skilled individual.
tofu@lemmy.nocturnal.garden · 5 pts · 90d
Weirdly worded I think, Lemmy has been going for years before kbin. I've been hosting kbin for a short while, I didn't really get into it admittedly.
kobra@piefed.social · 10 pts · 90d
I think in this context they're only talking about apps that are no longer maintained. So it is the OG reddit replacement that isn't being maintained. But yeah, kind of weird wording all throughout.
Shadowfetch@indieweb.social · 2 pts · 90d
The tricky part with self-hosting isn't just getting it running, it's managing upgrades across the whole stack without breaking dependencies. You need a solid rollback strategy, or you're just asking for trouble when the next CVE drops.
Couldbealeotard@lemmy.world · 4 pts · 89d
At a certain point I learnt to do things in docker containers, VMs, or separate bare metal. Running multiple services on one bare metal system will get you into trouble.
GreenKnight23@lemmy.world · 1 pts · 89d
10 billion percent agree.
using docker to maintain all my services is the only way I can selfhost anymore. running things natively just isn't worth it anymore.
I run my own gitlab instance and have repos dedicated to pulling updated images and caching them locally so even if the internet goes down I can still deploy services. what images I don't trust, I build locally from locally cached os base images. and then there's all my custom built apps/services.
Couldbealeotard@lemmy.world · 2 pts · 88d
I haven't copied down images locally, but it's something I've considered.
GreenKnight23@lemmy.world · 1 pts · 88d
I take monthly snapshots of imaged and deploy them. I've actually thought about setting up my own scanner to inspect images for vulnerabilities just to make sure nothing gets deployed that shouldn't.
irmadlad@lemmy.world · 2 pts · 90d
freshdock looks pretty interesting.
BuboScandiacus@mander.xyz · 2 pts · 89d
"Wealth beyond measure, outlander"
huquad@lemmy.ml · 2 pts · 89d
Why walk when you can ride?