I thought the idea of digital sovereignty means you host services in the same legal domain or country, not that you literally "self host" things. For example, nobody is calling that the EU organization should self-host anything, only that they would use European cloud services.
Or does "host it myself" actually mean that someone else would host it for you? I don't believe that's the common way to understand it.
I actually believe this is an unwinnable scenario for clients. Just whenever the block app/db updates, automatically check if ads are blocked. If they are, have an engineer or AI iterate until it no longer is the case.
And the reason why blocking solutions can't do the same is that there's cery kittle money in it and not enough people working for free on it. Or that's atleast my hypothesis..
Recently nginx had an RCE, so if your web server interface has an RCE, it doesn't matter if jellyfin code is top-notch, if you happen to use a proxy with RCE in front of it. Wireguard has never had an RCE and I'm relatively certain it never will, because I believe you must be in possession of some keys to go very deep in the wireguard code, which in itself is not very large piece of code.
But yes, in principle I agree that we should code securely instead of depending on VPN to solve it for us, unfortunately it's not the reality today. Memory safe programming languages help, but don't completely protect against logic errors. VPN is general is pretty good for defence-in-depth.
I went with the approach of giving it its own Google account, so that it can create docs and calendar events and then add me, rather than getting access to my Google account.
I wonder though: if Google can link this account to you as its actual owner, I wonder if there's a risk if the bot does something against the ToS?
On the other hand, Vaultwarden can only be updated online. While I do use it, I consider it a major downside, along with the inability to sync attachments.
I mean if your OS was "smart" as not to send IO to devices that indicate critical failure (e.g. by marking them read-only in the array?), and then thinks all devices have failed critically, wouldn't this happen in that kind of system as well..
They don't need to use semantic versioning. I doubt coreutils itself uses it, though I admit I haven't checked. Actually I think semantic versioning is less popular in practice than it looks like.
For a set of tools to that completely replaces another one, announcing a 1.0 version would be a message that the developers think the project has actually reached its initial goals. "0.2" does not.
Rust is great, but might it be a bit premature to replace the venerable coreutils with a project boasting version number 0.2, which I imagine reflects its author's view on its maturity?
When user enters a prompt, the backend may retrieve a handful a pages to serve that prompt. It won't retrieve all the pages of a site. Hardly different from a user using a search engine and clicking 5 topmost links into tabs. If that is not a DoS attack, then an agent doing the same isn't a DDoS attack.
Constructing the training material in the first place is a different matter, but if you're asking about fresh events or new APIs, the training data just doesn't cut it. The training, and subsequenctly the material retrieval, has been done a long time ago.
Perplexity argues that Cloudflare is mischaracterizing AI Assistants as web crawlers, saying that they should not be subject to the same restrictions since they are user-initiated assistants.
Personally I think that claim is a decent one: user-initiated request should not be subject to robot limitations, and are not the source of DDOS attack to web sites.
I think the solution is quite clear, though: either make use of the user identity to walz through the blocks, or even make use of the user browser to do it. Once a captcha appears, let the user solve it.
Though technically making all this happen flawlessly is quite a big task.
You configure vlans per physical port, so in a properly implemented system your attack won't be possible. When the packet comes to the switch the vlan tag is added to it according to the configuration for the port it was received from.
Depends on you hw. That seems rather poor implementation.. I believe my TP switch might handle that, because it rejects traffic to its management interface from mac X from vlan 20 because it sees the same mac in vlan 10.. (only vlan 20 is allowed for management)
Well, if these devices required any sort of authentication (e.g. pairing) to free access to their ram and flash, we wouldn't be having this particular story..
It's nice that this exists, but even for this I'd prefer to use an open source tool.
And it of course helps with migration only if the old HS is still online..
I think most practically this migration function would be built inside some Matrix client (one that would support more than one server to start with), but I suppose a standalone tool would be a decent solution as well.
ESP32-S3 seems rather properly sized computing power -wise for this kind of device. And it's quite low-power as well.
Granted there are some tasks where even this kind device could use some computing, like extracting, indexing and rendering pdfs.
I thought the idea of digital sovereignty means you host services in the same legal domain or country, not that you literally "self host" things. For example, nobody is calling that the EU organization should self-host anything, only that they would use European cloud services.
Or does "host it myself" actually mean that someone else would host it for you? I don't believe that's the common way to understand it.
I actually believe this is an unwinnable scenario for clients. Just whenever the block app/db updates, automatically check if ads are blocked. If they are, have an engineer or AI iterate until it no longer is the case.
And the reason why blocking solutions can't do the same is that there's cery kittle money in it and not enough people working for free on it. Or that's atleast my hypothesis..
"Only" 70%, though of course the point stands.
Recently nginx had an RCE, so if your web server interface has an RCE, it doesn't matter if jellyfin code is top-notch, if you happen to use a proxy with RCE in front of it. Wireguard has never had an RCE and I'm relatively certain it never will, because I believe you must be in possession of some keys to go very deep in the wireguard code, which in itself is not very large piece of code.
But yes, in principle I agree that we should code securely instead of depending on VPN to solve it for us, unfortunately it's not the reality today. Memory safe programming languages help, but don't completely protect against logic errors. VPN is general is pretty good for defence-in-depth.
I wonder though: if Google can link this account to you as its actual owner, I wonder if there's a risk if the bot does something against the ToS?
I hope you have backups of your Google account..
Factorio is on sale, I thought that never happens?! Also, it's not on sale for me.
Factorio is nice, but maybe not the one to pick at this budget.
Oxygen Not Included is a solid choice, though.
I'm curious how could it be unclear that this post is about the TTS part? Espeak is provided as an example.
On the other hand, Vaultwarden can only be updated online. While I do use it, I consider it a major downside, along with the inability to sync attachments.
I mean if your OS was "smart" as not to send IO to devices that indicate critical failure (e.g. by marking them read-only in the array?), and then thinks all devices have failed critically, wouldn't this happen in that kind of system as well..
The problem isn't the tool, it's the user: they don't know if they're getting good code or not, therefore they cannot make the prompt to improve it.
In my view the problems occur when using AI to do something you don't already know how to do.
They don't need to use semantic versioning. I doubt coreutils itself uses it, though I admit I haven't checked. Actually I think semantic versioning is less popular in practice than it looks like.
For a set of tools to that completely replaces another one, announcing a 1.0 version would be a message that the developers think the project has actually reached its initial goals. "0.2" does not.
Rust is great, but might it be a bit premature to replace the venerable coreutils with a project boasting version number 0.2, which I imagine reflects its author's view on its maturity?
When user enters a prompt, the backend may retrieve a handful a pages to serve that prompt. It won't retrieve all the pages of a site. Hardly different from a user using a search engine and clicking 5 topmost links into tabs. If that is not a DoS attack, then an agent doing the same isn't a DDoS attack.
Constructing the training material in the first place is a different matter, but if you're asking about fresh events or new APIs, the training data just doesn't cut it. The training, and subsequenctly the material retrieval, has been done a long time ago.
This is not about training data, though.
Personally I think that claim is a decent one: user-initiated request should not be subject to robot limitations, and are not the source of DDOS attack to web sites.
I think the solution is quite clear, though: either make use of the user identity to walz through the blocks, or even make use of the user browser to do it. Once a captcha appears, let the user solve it.
Though technically making all this happen flawlessly is quite a big task.
The poor sap was probably trying to get the wifi working :/.
You configure vlans per physical port, so in a properly implemented system your attack won't be possible. When the packet comes to the switch the vlan tag is added to it according to the configuration for the port it was received from.
Or are you talking about mac-vlans?
Depends on you hw. That seems rather poor implementation.. I believe my TP switch might handle that, because it rejects traffic to its management interface from mac X from vlan 20 because it sees the same mac in vlan 10.. (only vlan 20 is allowed for management)
Well, if these devices required any sort of authentication (e.g. pairing) to free access to their ram and flash, we wouldn't be having this particular story..
It's nice that this exists, but even for this I'd prefer to use an open source tool.
And it of course helps with migration only if the old HS is still online..
I think most practically this migration function would be built inside some Matrix client (one that would support more than one server to start with), but I suppose a standalone tool would be a decent solution as well.