helix
@helix@feddit.org
<a rel=“me” href=“https://layer8.space/@helix”>Mastodon</a>
- Comment on Issues setting my first Home lab as a total total beginner (no programming, coding, etc. related knowledge) 6 days ago:
Honestly if you use Claude just tell it to set it up for you.
Not the point of a homelab and additionally very dangerous as Claude tends to like insecure configurations.
- Comment on Ways to Expose Services Publicly 1 week ago:
If you use TLS like you should, your domains will be on the internet in the certificate transparency log. You should use a wildcard cert if you want this security by obscurity.
- Comment on PSA: the bitwarden clients got an upgrade that makes them incompatible with vaultwarden 2 weeks ago:
The whole client is open source, but idk if you can simply call the API with a token for a linked device or something. Pretty sure Signal doesn’t want “chatbots” on their networks and it might be against ToS.
- Comment on PSA: the bitwarden clients got an upgrade that makes them incompatible with vaultwarden 3 weeks ago:
Would love this to work with Signal and Matrix!
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 4 weeks ago:
Nice try Mr Hacker, you’re not getting anything out of this BOFH 🙃
- Comment on Start of a /c/Selfhosted Wiki 4 weeks ago:
I have a wiki! Covers way more diverse topics than self-hosting though. wiki.tilde.fun
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 4 weeks ago:
Using Ansible, but it still means I need to run it and schedule patches etc. – you can’t just patch stuff when people are currently working on it.
- Comment on Managing podman quadlets, users subids and such 4 weeks ago:
You can use configuration management software like Ansible or Puppet. I wouldn’t write my own scripts when there are good Ansible modules.
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 4 weeks ago:
You quoted something directly contradicting what you said. Nothing is concealed, every line of erroneous code could have been analysed for 15 years. All information needed to find the bug was public since it the code has been written and checked in publicly.
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 4 weeks ago:
You confused “obscurity” as in a synonym for low popularity with the word “obscurity” as in people not knowing how it works and people deliberately hiding the inner workings of a system.
Everyone using Linux can know how it works, that’s the opposite of obscurity in the sense it is used within “security by obscurity”.
Apart from that, Linux is very popular, just not on the Desktop. It is therefore not obscure in the sense of popularity either, at least the components which are hit by the bug mentioned in the article.
- Comment on Google pays $250K for Linux vulnerability allowing guest VM escapes 4 weeks ago:
ugh shit next week will be awful at work patching all those servers. At least they found it because bad actors did.
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 4 weeks ago:
What benefit does that give you for media viewing?
What exactly about X.509 is trash for that use case?
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 5 weeks ago:
Sadly couldn’t find anything. Thing is, if you watch your own media, why use TOR?!
- Comment on Homepage - Selfhosting Dashboard 5 weeks ago:
I always wonder if veterans really need to know that much information at all times.
Actually I suffer from something called “monitoring fatigue” or “notification fatigue” at work. There’s so many monitoring notifications, half of which are nothingburgers, that I seriously hate that part of my job is responding to them.
I already disabled notifications for my email in our monitoring system and now there’s just another department monitoring the monitoring system and creating tickets for me.
- Comment on Most slopcode projects are abandoned and deleted within months of release 5 weeks ago:
Sounds interesting.
Can you link those projects please?
- Comment on Most slopcode projects are abandoned and deleted within months of release 5 weeks ago:
Usually these tools are very basic.
If you read this community in the last weeks you’d know that slopcoders don’t stop at basic projects.
- Comment on Immich v3.0.0 is out, with Workflows preview 5 weeks ago:
For Android there’s PhotoSwooper which works somewhat similar @uuj8za@piefed.social
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 5 weeks ago:
Here, a random link explaining why using bandwidth for no reason while people provide it to you for free might be ethically questionable
tor.stackexchange.com/…/tor-streaming-videos-is-i…
Should I explain it further?
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 5 weeks ago:
Or to not do security by obscurity at all.
- Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network 5 weeks ago:
Streaming videos puts a huge burden on the TOR network. Please don’t do it if you don’t need to, setting up a VPN is faster and doesn’t slow TOR down.
- Comment on Dawarich 1.9.1 1 month ago:
If you’re tracking your location anyway, consider adding support to send your location to OpenCellID and BeaconDB to improve FOSS location services and data :)
- Comment on Tips on speeding up remote connection to personal server? 1 month ago:
I found IPv6 is usually faster than IPv4. Which do you use to connect?
- Comment on Redlib is running on borrowed time — so I built a Reddit front-end that archives what it serves 1 month ago:
Can you edit your post to be shorter and more concise and add an AI disclaimer about how much of your project is done with AI and in which capacity you use LLMs to write it?
- Comment on Redlib is running on borrowed time — so I built a Reddit front-end that archives what it serves 1 month ago:
That’s because it’s written by Claude, an LLM. It’s trained on corporate bullshit. The author seems to be a proper software engineer assisted by Claude Code which is OK in my book. They seem to be Chinese and translate everything into English with AI. Since I can’t read Chinese I can’t tell you whether the Chinese readme is also generated:
I wouldn’t call this project slop, as it clearly has a human touch and not completely written by AI it seems from a first glance at the code, but that’s the reason the writing sounds so “grating”: Chinese person feeding an LLM with idioms not present in English language.
- Comment on Voiden - CLI runner (update) 1 month ago:
I feel the void whenever I need to script APIs, it’s fine.
If you POST into the void long enough, one day, the void POSTs back.
- Comment on Is there room for Windows selfhosters? 1 month ago:
Did you install the guest tools and set the CPU governor to the correct scheduler? Do the Windows boxes host the same applications as the Linux boxes?
- Comment on HELP : Cannot upload files bigger than ~180MB to matrix server 2 months ago:
That’s synapse, not continuwuity, correct?
- Comment on What to do after getting a domain name? 2 months ago:
Don’t run services like these on a free domain. Get a very cheap domain from almost any provider. These free ones often try to get you to buy their domain name for outrageous prices with tricks and footnotes.
- Comment on What's your contingency plan for the apocalypse? 2 months ago:
I mean, you’re not doing huge batches. If my life depended on meds I’d be damned if I didn’t learn how to cook them myself or with the help of my PhD friends 😄
- Comment on What's your contingency plan for the apocalypse? 2 months ago:
Can you get equipment and recipes to synthesise these meds yourself or have someone do it? Befriend some pharmacists and pharma PhDs?