
Natanox
@Natanox@discuss.tchncs.de
- Comment on Crabshell – a local SSH manager with tabs, split view, SFTP and snippets (no account, no cloud) 3 days ago:
You should ask your AI chatbot if this is a fitting community to post this in. Because it isn’t.
- Comment on Bambu Labs H3C embargo dropped, so many reviews 1 week ago:
2.85 for e.g. TPU is a serious upgrade. Can’t wait for manufacturers who respect their customers to implement this cool new feature.
- Comment on [CBH] OpenFile: a static, self hostable file toolbox (PDF, images, video, OCR) with no backend 1 week ago:
Cool thing! 🙂
There’s something up with that Cloud thingy on the top though. If I open the website with my Smartphone browser (Fennec on Android 14, Adreno 6xx series) it lags like no tomorrow as long as that cloud is being rendered.
- Comment on Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions 1 week ago:
Not saying fixed bugs aren’t good, I’m just so fed up with this marketing-driven fearmongering. They’re overhyping every god damn bug they can because they know most people won’t know how bad it actually is. They do worse security practices than most homelab enthusiasts and then prophesize the AIpocalypse because their linear algebra “escaped” (the door was wide open). Hell, they don’t even manage to understand proper bug disclosure practices. They’re playing the “Social” Media outrage game on a global scale to drive sales and everyone is suffering for it. I’m so, SO done with all of this bullshit. When the bubble finally crashes I’ll throw a raging party with blackjack and hookers.
- Comment on Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions 1 week ago:
For server crashes, but not for RCEs. The only proven case of this I know of was with a specifically prepared PHP instance as honeypot that had an optimal attack surface and was done by Perplexity (another AI company). Outside of that there’s no credible large-scale RCE exploitation that’s any worse than the bugs that get fixed on a daily basis. It doesn’t even remotely justify the panic and media frenzy.
it was merely dangerously exploited by AI bros.
- Comment on Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions 1 week ago:
This is shady as hell. It’s an AI company again (Anthropic), they do not follow rules of responsible disclosure (again), it’s a race condition again, they do not provide a proof of concept (obviously since they shouldn’t talk about it at all until after we got the patch) but instead create big media fuzz about their glorious AI… hell, they do not even tell us the kernel versions or anything.
If we find out eventually that you have to disable default mitigations for this to become dangerous (like the stunt they did with Firefox) it’s too late, the media won’t give a shit anymore. Like we just had with PHP - huge panic, enormous media circus, barely any real-life consequences in the end and the responsible disclosure process being a total mess to blow it up even more.
Honestly, every time I see some AI company hyping yet another huge and super dangerous exploit only their superior AI found “after X years of nobody seeing it” I now expect a nothingburger.
We’re probably fine, nothing out of the ordinary to see here.
- Comment on [AIP] TypeType: a self-hosted video app for YouTube, NicoNico and BiliBili 2 weeks ago:
The project idea looks really cool and genuinely solves a problem (though I would’ve preferred a Nextcloud sync and improved extractors for NewPipe & Freetube), however the amount of generated code and permissive policy (allowing to just have complete implementations generated) scares me off. It sounds like there are huge amounts of code no human ever looked at.
- Comment on PSA: PHP warns it plans to release 2 emergency patches imminently (today 14:00 UTC) 3 weeks ago:
For their interactive mapview in the control room they probably do.
- Comment on PSA: PHP warns it plans to release 2 emergency patches imminently (today 14:00 UTC) 3 weeks ago:
takes down 112 / 911 services
Don’t worry guys, we’re safe now! ꒰ঌ(˶ˆᗜˆ˵)໒꒱
- Comment on PSA: PHP warns it plans to release 2 emergency patches imminently (today 14:00 UTC) 3 weeks ago:
They took just a few hours to squeeze out a new ca-certificates. On the other hand the last time there was a huge kernel bug it took well over 24 hours…
- Comment on Is anyone self-hosting their own AI? 3 weeks ago:
Not for complex tasks, really. Gemma4b or similar might be just enough as the backend for a voice assistant replacing Alexa (which I honestly hope, I need to get family members off of that fucking spy devices…). Small web searches might just fit. Or image recognition for Nextcloud Memories, stuff like that.
- Comment on Finally escaping Windows, ironically thanks to AI 3 weeks ago:
I noticed that there are sometimes huge differences between models and providers. ChatGPT, which most people use, is a useless sycophant because it’s made to value user satisfaction higher than factual correctness (so it makes shit up und basically never pushes back if you challenge it). When using Mistral AI I had the AI tell me outright that I’m wrong (though it still generated very friendly text to do so, and it only properly does it when in “thinking” mode). No clue how Anthropic or Google do in this regard, just that ChatGPT is especially awful. In the end all models are risky.
- Comment on Small lines differences, is this normal? 3 weeks ago:
Wasn’t this caused by difference in layer print time, giving the lower layer more or less time to cool down causing a slightly different finish and therefore perceived colour hue? I think I read about this once.
- Comment on 3D printing for beginners 4 weeks ago:
They fumbled the INDX release, that’s true. Probably betted on it, ran short on time and released it too early.
The U1 is great indeed, got one myself. :)
- Comment on 3D printing for beginners 4 weeks ago:
They cost a fraction due to Bambu being propped up by Venture Capitalists and the usual bad-faith attempts at dominating the market, trying to undercut competitors. Look at how Uber did it for cabs in the US, nobody wants that shit happening. The moment you let them they’d jack up the prices, introduce subscription nonsense and whatnot. They already fuck over customers for christ sake, buying something you know will fuck you over just to save a few bucks is madness.
I genuinely don’t know what the hell you’re talking about regarding underwhelming performance either. We got Prusa’s in our hackspace, they’re great reliable pieces of hardware that you can trust and last for many years even with upgrade paths available. Other than Bambu.
My god, I sound like a Prusa chill… but I’m pissed how people can seriously still recommend Bambu. How much shit does a company have to do so the majority finally stops looking only on the price tag?
- Comment on 3D printing for beginners 4 weeks ago:
Now go check Bambu ignoring their printers catching fire.
Any 3D printer can (or rather will) eventually require manual intervention and maintenance, companies trying to sell you otherwise are liars or design garbage not meant to work longer than 2-3 years at all. Sure some people get lucky and don’t have to do anything in the first two years, meanwhile others run into something immediately. That’s just how it is.
But other than with a bloody Bambu, on a Prusa you CAN fix basically everything and there are actual manuals how to do so. Bambus meanwhile are not built to be taken apart and full of proprietary parts, aside from specific things that’d fail way too often.
To say Prusas require “a lot” of fiddling compared to Bambu is just a load of bullshit. They’re just not marketing the printers as aggressively and are open about how to do stuff, making it look differently.
- Comment on 3D printing for beginners 4 weeks ago:
Under no circumstance should you buy a Bambu Lab, that company is god damn awful. They literally refused to admit one of their printer series’ (A1) being a fire hazard. Also actively locking people into their ecosystem, breaking workflows in the process.
Snapmaker U1 (cheap but good) or a modern Prusa (high quality and longevity) are good picks.
- Comment on 3D printing for beginners 4 weeks ago:
Nonsense.
- Comment on These are the kind of reactions I get when I recommend Anubis to deal with bots at work, what alternatives are there? 4 weeks ago:
<rant>
especially from businesses
if they want businesses to subscribe
styled to attract the decision makers in their target market
Do that, and it becomes a serious contender in the market
The market who’s responsible for fucking up the internet? The market that constantly attacks websites with crawlers to steal everything for value extraction, which Anubis fights against? The market that couldn’t care less about you unless you provide value to it, and even then won’t give you a penny unless forced (while building the whole internet on your shoulders)? That market?
Most FOSS devs I know who aren’t forced into it couldn’t give less of a fart about “the market” and capitalists with sticks in their rear ends inside it. The monetization was often just attached to a project because it makes sense given we’re all trapped in capitalism and perhaps have to somehow cover project costs (probably less so for Anubis), not because it’s a goal to attract investment.
People who’re appaled by something so simple such as a .lol domain and a cute mascot sound awful to talk to anyway.
It is a big problem with a number of opensource projects that could get wider adoption and support
I tell you how that “support” looks like. Companies who adopted the software will add your maintainer Email to their business contacts. If there are issues with your software they’ll then usually ignore the developer route and directly write emails to you, and if it’s a big problem for them immediately blame you and threaten legal action, blahblahblah. They’ll treat you like someone they have a support contract with and be completely confused when you tell them to open an issue and that you otherwise don’t care. Meanwhile they’ll build an empire using your software and be a persistent nuisance.
Why should anyone care about this.
</rant>
- Comment on Advice for nylon/PA warped prints not sticking? 4 weeks ago:
Assuming you already cleaned with soap, checked Z-height, perhaps tried a different adhesive (I can stringly recommend 3DLac spray) etc:
Check if there are beds for PA for your printer. I think Prusa had a specially coated one specifically to fix this issue, perhaps there’s also one for yours. Nylon just hates to stick except to itself.
- Comment on New California ghost gun lawsuit takes aim at company that sells 3-D printer filament 4 weeks ago:
Weird how shit like this always is an issue in the USA and basically nowhere else. Must be the lack of freedom or sth., we’re just too suppressed in commie Europe to have these issues, can’t even buy 9mm rounds in the supermarket. Shame.
- Comment on Persistent Curling 5 weeks ago:
- Check Z-axis
- Use Brim
- Use 3DLac adhesive spray for the corners
Especially the spray is 100% worth its cost (also a must if you print e.g. ABS/ASA).
- Comment on How Many Users Can a 1 vCPU / 2 GB RAM Server Actually Handle? 5 weeks ago:
Did you? The pictures and graphics are all AI so I’m extremely unsure how trustworthy the text is.
- Comment on Calibre-Web-Auto v4.0.7 - Important Security Fixes 🔒, Much Faster Kobo Sync ⚡, KOReader → Hardcover Progress 📖, a Refreshed Login & Mobile Layout 📱 and more! · crocodilestick/Calibre-Web-Automated 1 month ago:
If this project is closely based on Calibre it requires the [AIP] prefix.
- Comment on Is there a self-hosted Family Link server? 1 month ago:
There are parental controls, but it’s rare. FOSS projects usually aren’t very keen on building systems of authority, even parental ones.
For smartphones check out /e/OS (Murena Smartphones). They added parental controls recently, not sure how good those are though.
For computers your best bet’s probably a Linux with Gnome. They also added something recently.
You might be able to combine both with a custom DNS service, surely there’s something out there for that usecase. But that’s already getting pretty complex.
- Comment on Is there a self-hosted Family Link server? 1 month ago:
Mullvad’s CEO finances fascists, please don’t.
- Comment on is K2 horizons historically significant as the first actual open-source LLM, or am I falling for hype? 1 month ago:
I mean, they “plan” to publish that info, right?
I’d bet they used at least CommonCrawl (with it being the majority of data), arXiv, Wikipedia and the set containing all of Github. Probably not a lot of distillation.
CommonCrawl is one of the reasons small websites and social instances get DDoS’ed by rules-ignoring AI crawlers. Wikipedia data basically always gets used without paying them. Github… well, it’s a prime example of how they broke millions of licenses.
There’s also other stuff commonly used. Don’t get me started on the training sets for image generation. It’s beyond disgusting (and I’m not even talking just about theft and cultural destruction at this point).
This stuff is a bottomless pit, and if those (F)OSS models really aim to be up at the top they’ll have to break every possible moral, ethical and legal rule just like everyone else. Even more so if they omit closed-source training sets.
- Comment on is K2 horizons historically significant as the first actual open-source LLM, or am I falling for hype? 1 month ago:
My question would be if it uses stuff like CommonCrawl as training material. Given their size I assume they used anything incl. unethical training data, but at least admit it?
The only models I ever found that even tried to only resort to ethically obtained data, being FOSS etc. were the tiny ones from PleIAs. And as expected they’re completely useless.
So far I concluded that an “ideologically sound” LLM is impossible due to lack of training data. Unless your ideology allows to steal stuff.
- Comment on Experience combining 3D printing with laser? 1 month ago:
Please make sure to look up the company quite a bit, including their Play Store App reviews. If I remember correctly the support and software from xTool was horrendous.
- Comment on AI bot hacking/scraping Home Assistant 1 month ago:
Not just that, companies are using “smart” devices as AI scraper botnets to utilize private, basically unbanable IPs. There are only very few companies who I might believe them not doing it (AllenAI and maybe Mistral - tell me if I’m proven wrong pls). But OpenAI, Anthropic, fucking Google and Meta, they all treat your network as their personal internet extension. It’s reasonable to assume any “Smart” device with wifi access that isn’t FOSS most likely being your enemy.
Our family Nextcloud already got taken down by OpenAI swarming it… overloaded and crashed php-fpm within a minute. At least one client blasting all endpoints still advertised themselves as OpenAI crawler.