I've been saying this since the LLM explosion. What used to be the domain of hard-core UNIX ricers exclusively is now accessible to most people. Are their apps secure? Fuck no! Are they riddled with subtle bugs? You bet! But that's true of most custom software I've written to rice my desktop too. When the userbase is all within yelling-shot, and fixes take minutes, rough code is fine.
Its the safety critical and/or large scale applications where LLMs aren't quite ready to "be in charge" just yet... Plus domain specific areas where lack of training data really shows through (I had to write a handler for an unusual non-ethernet layer 2 protocol recently, claude was happy to help me ... by writing a decent ethernet parser)
That they are fluent enough in Arabic and they purposefully lied?
Umm, yeah? I know this may come as a shock, but sometimes Bibi is less than truthful.
I know that any criticism of Hamas immediately brands me as some kind of Zionist shill, but I'm under no delusions about the fact that Bibi is a war criminal. I am surrounded by many extremely pro-Israel family members. The amount of times I've heard "technically its not really a genocide" and had to tell them that "technically I only committed manslaughter, not murder" isn't exactly a good thing is ridiculous.
For the record, I personally believe the Israeli government is probably committing a genocide, even by technical terms. But even if by technicality they aren't, I don't think that absolves their government at all. I just dont think that millions of people should be kicked out of their homes, on either side. Sadly that seems to be a largely minority opinion these days.
Moral obligation is a good point. Maybe I'm just lucky that authorities really dont enforce DMCA complaints much where I live, so I dont worry too much about that.
Has anyone actually had the police come to complain about pirated media?
Yeah. A lot of inexperienced self-hosters probably don't appreciate how much their ISP has protected them honestly. The first time you open a port on a truly public trunk line at a datacenter is certainly an eye-opening experience!
Fair. I guess what really prompted this question was a chat with a "normie" relative who was self-hosting jellyfin on their main computer, no security (username: user, password: pass, SSL: disabled). I had to explain all the issues (even no fail2ban on their server with an exposed port 22). They thought I was paranoid. But even my suggestions weren't as extreme as many people put.
That's actually a good point. Especially since I think most of us share our services with family members who may be less equipped to protect themselves.
Yeah, my thought here is that dockerization isn't a security measure really. I, for one, run my jellyfin on bare metal with nixos, but secure it behind a keycloak SSO system.
That's fair. Though a compromise enough to run arbitrary scripts on a system to use it in a bot net doesn't take nearly as much security as some people install.
I'm not saying 0 security. A VPN is sensible, or in absence, some good firewalling, a&a, ddos&bot protection, etc. But I've seen posts of people seemingly worrying about security while running a system that's more secure than some systems that hold top secret data.
I just wanted to know why they do it (since I do it too lol).
I never equivocated the Israeli actions and the Palestinian ones. I would say anyone arguing in good faith should agree that both sides have done bad things. The scale may be wildly different, but that doesn't magically make it okay. The axis powers did the most wrong in WWII, but internment of japanese civilians by allied powers is still not okay.
Not to mention Israel doesn't really make those kinds of translation mistakes. Most Israeli's are at least partially bilingual, and almost all signage/packaging/etc is written in hebrew and arabic. I would be extremely surprised if anyone who has lived in Israel for more than about a year didn't know the names of the week in arabic. Any more than someone living in Canada not knowing them in french. They may forget whick ones correspond to whick, but they should recognize that that is what they are.
I have a cousin who refuses to watch anything animated because "that's for kids". He is the kind of person that they make some of these for. He is incorrect. Hopefully they will learn that eventually.
This is the kind of thing entities like Hamas need to learn to crack down on. Its a lot harder to say "oops we missed your valid military target and hit a school instead" if the valid military target is a decent distance from civilian infrastructure. Even Iran is pretty bad at that.
As an ontarian whose previous vehicle died on monday, I'll be buying a BEV of some kind tomorrow most likely. Torn between the Kia EV4 and the Fiat 500e atm... Wish there were more EV sedans :/
I've been saying this since the LLM explosion. What used to be the domain of hard-core UNIX ricers exclusively is now accessible to most people. Are their apps secure? Fuck no! Are they riddled with subtle bugs? You bet! But that's true of most custom software I've written to rice my desktop too. When the userbase is all within yelling-shot, and fixes take minutes, rough code is fine.
Its the safety critical and/or large scale applications where LLMs aren't quite ready to "be in charge" just yet... Plus domain specific areas where lack of training data really shows through (I had to write a handler for an unusual non-ethernet layer 2 protocol recently, claude was happy to help me ... by writing a decent ethernet parser)
Umm, yeah? I know this may come as a shock, but sometimes Bibi is less than truthful.
I know that any criticism of Hamas immediately brands me as some kind of Zionist shill, but I'm under no delusions about the fact that Bibi is a war criminal. I am surrounded by many extremely pro-Israel family members. The amount of times I've heard "technically its not really a genocide" and had to tell them that "technically I only committed manslaughter, not murder" isn't exactly a good thing is ridiculous.
For the record, I personally believe the Israeli government is probably committing a genocide, even by technical terms. But even if by technicality they aren't, I don't think that absolves their government at all. I just dont think that millions of people should be kicked out of their homes, on either side. Sadly that seems to be a largely minority opinion these days.
It would be hilarious if the more security focussed hobbyists were to pen-test that link, eh? Careful where you spam.
Yeah. I'm still too scared to host my own email. Its too vulnerable an attack surface for me to be confident in my security.
Data bandwidth is a good point. Especially where some people either have data caps or pay per data.
Moral obligation is a good point. Maybe I'm just lucky that authorities really dont enforce DMCA complaints much where I live, so I dont worry too much about that.
Has anyone actually had the police come to complain about pirated media?
Yeah. A lot of inexperienced self-hosters probably don't appreciate how much their ISP has protected them honestly. The first time you open a port on a truly public trunk line at a datacenter is certainly an eye-opening experience!
Fair. I guess what really prompted this question was a chat with a "normie" relative who was self-hosting jellyfin on their main computer, no security (username: user, password: pass, SSL: disabled). I had to explain all the issues (even no fail2ban on their server with an exposed port 22). They thought I was paranoid. But even my suggestions weren't as extreme as many people put.
That's actually a good point. Especially since I think most of us share our services with family members who may be less equipped to protect themselves.
Yeah, my thought here is that dockerization isn't a security measure really. I, for one, run my jellyfin on bare metal with nixos, but secure it behind a keycloak SSO system.
That's fair. Though a compromise enough to run arbitrary scripts on a system to use it in a bot net doesn't take nearly as much security as some people install.
I'm not saying 0 security. A VPN is sensible, or in absence, some good firewalling, a&a, ddos&bot protection, etc. But I've seen posts of people seemingly worrying about security while running a system that's more secure than some systems that hold top secret data.
I just wanted to know why they do it (since I do it too lol).
I never equivocated the Israeli actions and the Palestinian ones. I would say anyone arguing in good faith should agree that both sides have done bad things. The scale may be wildly different, but that doesn't magically make it okay. The axis powers did the most wrong in WWII, but internment of japanese civilians by allied powers is still not okay.
Not to mention Israel doesn't really make those kinds of translation mistakes. Most Israeli's are at least partially bilingual, and almost all signage/packaging/etc is written in hebrew and arabic. I would be extremely surprised if anyone who has lived in Israel for more than about a year didn't know the names of the week in arabic. Any more than someone living in Canada not knowing them in french. They may forget whick ones correspond to whick, but they should recognize that that is what they are.
I have a cousin who refuses to watch anything animated because "that's for kids". He is the kind of person that they make some of these for. He is incorrect. Hopefully they will learn that eventually.
This is the kind of thing entities like Hamas need to learn to crack down on. Its a lot harder to say "oops we missed your valid military target and hit a school instead" if the valid military target is a decent distance from civilian infrastructure. Even Iran is pretty bad at that.
Not to mention the obvious anti-synergy of other people's eyes and book sword. Reading from other people's eyes would be tricky to say the least.
Classic Kanata ngl. Happy Canada Day from the east end of Ottawa. ;)
Someone should create a new internet that uses SSH to access it. Call it An SSH On-Line Environment.
As an ontarian whose previous vehicle died on monday, I'll be buying a BEV of some kind tomorrow most likely. Torn between the Kia EV4 and the Fiat 500e atm... Wish there were more EV sedans :/