moldy_rice
@moldy_rice@piefed.keyboardvagabond.com
- Comment on Norway Awards $44M in Grants to Advance Battery-Powered Ships 16 hours ago:
Yeah, that makes sense. A large part of Norway’s highway system is ferrys across fjords.
Relatively short distances. Lots of time on land (loading and unloading cars).
It’s kinda the perfect use case for battery powered ships.
- Comment on What are you using RSS for? 16 hours ago:
Security alerts
Hard to keep up as AI finds all these serious bugs every week
- Comment on British fintech Revolut slashes "AI" coding costs 10x by cutting out Claude and going self-hosted 3 days ago:
Oof, remind me never to get an account with Revolut.
- Comment on Show Your ID to Use ChatGPT? How New York’s New AI Law Ends Online Anonymity 5 days ago:
That…doesn’t help either. Someone who makes doughnuts?
- Comment on Show Your ID to Use ChatGPT? How New York’s New AI Law Ends Online Anonymity 6 days ago:
I won’t show them my ID. And the training material should be public in any case
- Comment on Show Your ID to Use ChatGPT? How New York’s New AI Law Ends Online Anonymity 6 days ago:
Sure, but that list should be public it’s worse if it’s only in the hands of corporations and the government
- Comment on Show Your ID to Use ChatGPT? How New York’s New AI Law Ends Online Anonymity 6 days ago:
What is the meaning of a glazer? Someone who makes windows? I don’t get it
- Comment on Show Your ID to Use ChatGPT? How New York’s New AI Law Ends Online Anonymity 6 days ago:
Wasn’t it always that way?
One of the reasons I’ve not used any of the AI systems is it seems to not allow me to use it anonymously
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 2 weeks ago:
MITM attacks happen all the time. As are there a ton of historical cases of CA compromise.
I can’t think of a time that a Debian maintainer went rogue and put something malicious into the official repos.
And, if they did, everyone would see it. But MITM attacks are not publicly visible because they’re targeted.
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 2 weeks ago:
You’re talking about publishing infrastructure compromise
Compromise of the integrity of the traffic between your server and theirs can happen. Loads of CAs have been compromised. X.509 root stores insecurity breaks https.
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 2 weeks ago:
Apt and most package managers have cryptographic verifications on all packaged by default since the 1990s.
Docker pull does not, so it will happily download a maliciously modified image, without checking.
You can go in the sun, but wear sunscreen. You can have sex with a stranger, but wear a condom. You can download software, but check the cryptographic signature.
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 2 weeks ago:
Apt and most package managers have cryptographic verifications on all packaged by default since the 1990s.
Docker pull does not, so it will happily download a maliciously modified image, without checking.
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 2 weeks ago:
How does it work? Just installs apt packages?
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 2 weeks ago:
This comment is suggesting doing many things extremely vulnerable to supply chain attacks. Please don’t upvote or do this.
- Comment on 2 weeks ago:
Probably lazers
- Comment on Self-Hosting a DNS Sinkhole is really important 3 weeks ago:
Link?
- Comment on What else should I do for my home server security? 3 weeks ago:
Sub fail2ban for wazuh. It does the same but so much more, and does everything with 0 config after fresh install.
- Comment on What else should I do for my home server security? 3 weeks ago:
Wazuh and TOTP
- Comment on Self-Hosting a DNS Sinkhole is really important 3 weeks ago:
The situation is so concerning, he notes, because there isn’t much that people can do to protect themselves from zero-click ad attacks other than blocking ads as thoroughly as possible on all websites and platforms—a fact that intelligence agencies like the NSA and CIA seem to know all too well.
Or disable JavaScript
- Comment on How do you sort your music? 3 weeks ago:
I’ve spent hours trying to satisfy Jellyfin and it never fully works correctly.
So, I don’t.
- Comment on How can self-hosted software make money without hurting the ecosystem? 3 weeks ago:
Charging corporations is not a violation of OSI’s definition.
Their definition is free as in speech, not as in beer.
- Comment on How can self-hosted software make money without hurting the ecosystem? 3 weeks ago:
Maybe artists are just less greedy than the average tech bro?
- Comment on What's your weirdest or most unique self-hosted use case and solution? 3 weeks ago:
Because your phone gives it that info
- Comment on How can self-hosted software make money without hurting the ecosystem? 4 weeks ago:
Charging corporation. Making it free for personal use and nonprofits
- Comment on What's your weirdest or most unique self-hosted use case and solution? 4 weeks ago:
It has access to your phones fingerprint, which is then linked to all your other activity.
It doesn’t need access to the phone data. All it needs is the fingerprint.
- Comment on What's your weirdest or most unique self-hosted use case and solution? 4 weeks ago:
The phone number part significantly degrades your privacy and security
- Comment on What's your weirdest or most unique self-hosted use case and solution? 4 weeks ago:
No phone number needed. Can run directly on a non-phone server.
Also more secure and trustworthy because it’s open source.
- Comment on What's your weirdest or most unique self-hosted use case and solution? 4 weeks ago:
If you manage to make an account on WhatsApp and move it to waydroid, they’ll ban you.
Meta’s game is (meta)data collection and selling your data. They’ll delete your account if they can’t get all your phone’s data (eg if it’s an emulator then they can’t uniquely identify you)
- Comment on What's your weirdest or most unique self-hosted use case and solution? 4 weeks ago:
Doesn’t the bridge require you to run whatsapp on a phone anyway?
- Comment on What's your weirdest or most unique self-hosted use case and solution? 4 weeks ago:
God that sucks.
Why not use SimpleX or Wire or Matrix?