irotsoma
@irotsoma@lemmy.blahaj.zone
- Comment on AWS deleted my 10-year account and all data without warning 1 day ago:
If this was a self-hosted forum, yes, that’s an option. But for professional purposes, a dedicated off-site backup provider is better than having storage at an office site.
- Comment on AWS deleted my 10-year account and all data without warning 1 day ago:
Not too surprising. Data backups need to be with different providers. The article seems to think it’s not “putting all your eggs in one basket” because the provider had redundancy. But that’s not much different from storing physical backups locally because they were stored in a fire-proof safe. Sure you made backups, but by storing them in the same building as the servers means the same disaster that could take out the servers could take out the backups. A “fire-proof” safe will protect it from some things that won’t protect the servers, but there are still types of disasters that could take out both, like a big enough bomb rather than just a fire.
What if AWS went bankrupt and the servers were repossessed and sold off with the data spread across all the different new owners of the disparate data centers? What if Amazon just decided AWS was no longer profitable and shut it all down.
Sure that’s not going to happen to AWS right now because it’s hugely profitable, but a serious US market crash combined with a major escalation by the current administration in the increasing surveillance state in the US which could kill the trust in the company, cause a massive migration to EU based companies and cause the subsidiary company that holds the data to go bankrupt without necessarily killing Amazon as a whole. Those subsidiaries often “run at a loss” even with extremely high income in order to divert profit to shareholders, claim tax breaks on “losses”, and eliminate liability to the main company.
The legal proceedings of bankruptcy or other events could put the data in legal limbo for years before it’s accessible again.
- Comment on AI slop is ruining all of our favorite places to scroll 1 day ago:
I’ve seen some, but it’s way, way less common than the major corporate platforms, but since there’s no pay and no ads to make money off of, it’s not too surprising. As the article briefly mentions, there’s just too much monetary incentive to make junk vs quality content on most for-profit platforms.
- Comment on Atlassian terminates 150 staff with pre-recorded video, AI customer contact solutions rolled out 3 days ago:
Glad I don’t rely on their stuff because the support is about to get enshitified. The company I work for does though…so…
- Comment on Developer survey shows trust in AI coding tools is falling as usage rises 4 days ago:
Usage is rising because corporate executives started getting kickbacks and thinking they could cut staff by implementing it. But developers who have actually had to use it have realized it can be useful in a few scenarios, but requires a ton of review of anything it writes because it rarely understands context and often makes mistakes that are really hard to debug because they are subtle. So anyone trying to use it for a language or system they don’t understand well is going to have a hard time.
- Comment on Changes to Bitnami Catalog on August 28th 1 week ago:
This is why I never used their images for any of my projects and do everything I can to use official charts made by the software vendor itself or create my own and put them in my personal git repo for automated deployments.
Any business that gives away middleware for free, likely does that in the hopes of monetizing that pretty directly and eventually will be pressured to increase monetization of those things by those investors or will be forced to stop developing those products due to lack of funding. Middleware really doesn’t have many other good ways to monetize.
- Comment on Exhausted man defeats AI model in world coding championship 1 week ago:
I have yet to have an AI write code of more than one or two lines that doesn’t have a breaking bug. Speed isn’t useful if it’s broken. And honestly I usually spend more time debugging AI code than I would have just writing it myself. It’s nice sometimes for getting an understanding of syntax of a system I’m not used to, but beyond very generic scripts that don’t depend on context, it’s pretty useless in my experience. I have Copilot integrates with my IDE for work and it’s more trouble than it’s worth so far. Even just for code completion, the IDE does a better job most of the time even if it suggests much smaller chunks at a time. And the smaller chunks are actually better if I have to proofread every single word either of then outputs anyway.
- Comment on ChatGPT advises women to ask for lower salaries, study finds 1 week ago:
Can’t convince a conservative that women and POC still make less money for the same job and affirmative action is still needed, but “AI” knows it.
- Comment on The Guardian: Age verification is coming to search engines in Australia – with huge implications for privacy and inclusion 1 week ago:
“[The changes] will impact everyone who uses the internet in Australia – not just people under 16.”
I’d argue that these kinds of laws usually only affect people other than the people who are being blocked. The people being blocked will just find alternatives that don’t block. VPNs or alternative search engines, etc. The only ones affected are the adults who now have to sacrifice their privacy and allow companies to collect and sell all of their information more easily and governments to build a profile of everything a citizen does without context. Search for information about nuclear reactors because there’s a new one being built in your neighborhood and want to know about the risks, and you’ll likely immediately get added to the watch list for nuclear terrorism. Add in a search for explosives to get rid of a tree stump in your yard, and now you may end up on a secret no-fly list and not find out until your vacation is ruined. So many implications to context-less search result data collection which is likely the real aim of these laws rather than keeping kids “safe” since it ultimately just forces them to use less safe alternatives.
- Comment on The Death Of Industrial Design And The Era Of Dull Electronics 1 week ago:
No reason to innovate when there’s basically no competition. It’s a problem of consolidation in many industries these days. Most governments are owned by big corporations that water down and keep them from enforcing antitrust laws these days.
- Submitted 2 weeks ago to selfhosted@lemmy.world | 2 comments
- Comment on The bewildering phenomenon of declining quality 2 weeks ago:
This is exactly how post-capitalism was predicted to go. As consolidation eliminates competition, there’s no reason to maintain quality. If it’s crap or nothing, people have to buy the crap.
- Comment on Delta Air Lines is using AI to set the maximum price you’re willing to pay 2 weeks ago:
I mean, they just called them algorithms or targeted discount codes or sales before. The addition of “AI” is just marketing nonsense for shareholders.
- Comment on Microsoft suddenly kills its movies and TV store on Xbox and Windows 2 weeks ago:
It would have been good if it had been made all that usable. Many people were looking for a place to have all of their media in one. Smart TVs weren’t the default like now, so they were trying to take the market from things like Roku and Apple TV and such. Still could have been useful if they had made it better than the crappy Smart TV interfaces (which wouldn’t have taken much), but they never did, so it never really caught on.
- Comment on loophole.cloud tunnel service 2 weeks ago:
If you want something similar, you could set up a cheap VPS with your own reverse proxy making sure that all of your connections are secure between the servers and VPS. But it really depends on your situation. If you have an ISP that assigns you a block of static IPv6 addresses, it’s fairly easy to then get a domain and direct based on subdomains to those addresses. I’m not lucky enough to have a halfway decent ISP available in my area, so I can’t get that or even a reasonably priced single IPv4 address for residential service, so I have to make due with dynamic DNS which makes things more complex. I fortunately don’t have an ISP that forces double NAT on me at least. So I have set up a VPS with a reverse proxy and Wireguard VPN tunnel and I use cloudflare as my domain registrar and their DDNS which I update using my OPNSense router which is also the endpoint of the VPN. I’ve been considering moving to hosting headscale on the VPS instead, but haven’t gotten around to it. It really depends on how many servers, his many services, if you have a domain, if you have a VPS or itger server outside of your home network, if your ISP gives static IPs, and you are behind a double nat kind of situation. Also depends a lot on your bandwidth. Having low upload speeds is a common problem especially if you have cable internet service. I’m lucky enough to have symmetrical fiber direct to my modem even if the ISP is way behind and doesn’t offer IPv6 other than 6rd which was meant to be a transitional system like two decades ago and is barely functional.
- Comment on TikTok Germany moderators raise alarm over layoff plans 2 weeks ago:
I mean yeah that’s the plan. Use AI. Let Nazis be Nazis. Suppress vulnerable minorities. That’s what has happened to most social media in the US over the last few years. No surprises. Just need to get people to move off those platforms to ones with better policies and moderated communities like Lemmy, Mastodon, etc. But that’s always hard to do.
- Comment on loophole.cloud tunnel service 2 weeks ago:
It’s just a hosted reverse proxy with a proprietary server backend, as far as I can tell. I don’t usually trust “free” things lime that. It’s not that expensive to do it yourself, the real expense come in high bandwidth flowing through the proxy which most self hosted applications for personal use don’t really do.
Anyway, with a reverse proxy on the security end there’s a chance of man in the middle attacks depending on the configuration. And on the privacy end, they will have the ability to log all connections. That may be where they’re planning to make money by selling that info and/or allowing MiTM attacks to inject ads like many ISPs have talked about. But “free” stuff usually isn’t actually free in the long term even if it is now while it’s being tested. Usually just takes a sale to a large corporation for it to become less free even of the original intent wasn’t to do that.
- Comment on BulletVPN Closes Down, Pulling The Rug on Lifetime Subscriptions 2 weeks ago:
Lifetime never means your lifetime. It’s the lifetime if the offer or if you’re lucky, the current ownership of the company. I’ve always weighed them as, is this cost significantly less than the cost of the product over the amount of time I think the product might be useful to me and the development of the product is likely to stay on track.
I have one for Plex that I got very early on and was well worth it even though I’m moving away from Plex. And one for 1TB of storage on rsync.net which will pay for itself in 5 years and hopefully will survive for another 5 after that at least for me to consider it more than worth it. After that it’s all bonus. I don’t expect it to be around in 20 years or for it to be worth nearly as much then either as storage needs grow and costs shrink. But when I got it a couple of years ago I deemed it worth the gamble.
- Comment on How to use a domain I own to self-host services? 3 weeks ago:
Really the first issue is your IP address. How does your ISP hand out IP addresses IPv4 and/or IPv6?
If you have an ISP that gives a static block of IPv6 addresses that simplifies things immensely. But also consider that many legacy, monopoly ISPs have not implemented IPv6 for their customers, especially in the US, and so domains without an IPv4 address aren’t accessible from people’s homes that use those ISPs. But it means you could assign static IPv6 addresses to each service if you wanted to and add subdomains for each. Then you just need to deal with security on that system.
Otherwise you’ll likely need to deal with dynamic DNS. If your router and your domain registrar’s DNS can work together for DDNS that’s ideal. For example, my OpnSense router updates my cloudflare registered domain directly when my ISP changes my IPv4 address (I have one of those ISPs that doesn’t assign IPv6 still but I don’t have any choice if I want > 5-10Mbps upload speeds).
Then you need to deal with routing. The best way is with a reverse proxy like Caddy or I actually like Traefik a lot because it works well with my complex setup with docker and kubernetes among other things. Basically your router needs to route all the inbound traffic on the appropriate inbound ports to the reverse proxy to it to then route to the appropriate service based on the subdomain and/or port of the request.
Once you route the subdomain to the appropriate service you need to deal with security. Once a service is exposed, it’s going to eventually start getting hit by bots trying to access it. Best to implement something like fail2ban to stop them from wasting your processing power with failed logins and 404 errors and such.
- Comment on Pi-hole client filtering without DHCP? 3 weeks ago:
I set up separate VLANs for devices that do or don’t get filtering. And I have two different wifi SIDs on my access point for the different VLANs as well as having ports on my primary switch aligned to one or the other VLAN. I did end up having one other switch that has devices from both VLANs in a different area and had to set up one port on the primary switch with a couple of MAC-based filters for assigning the VLAN for just devices on that remote switch, but those are static devices, so that wasn’t an issue. I don’t attach any other devices to that.
- Comment on Got my first script kiddy 3 weeks ago:
My servers that have been around for a while get thousands of scans per day. In fact I am going to move away from crowdsec because I exceed the free limits on log entries within the first day of the month usually, sometimes just an hour or so. I mean it still works and blocks stuff, but the web portal is basically useless for any research into what I need to give attention to. That and the fact that you can no longer delete decisions on the web portal with the free account.
- Comment on Google Introduced a New Way to Use Search. Proceed With Caution. 3 weeks ago:
I bet the show summaries are going to be a big target for media companies. I remember when they went on rampages in the 90s against fan sites that had synopses of episodes and this is way more than a simple paragraph or two synopsis of the shows.
- Comment on Tech to protect images against AI scrapers can be beaten, researchers show 3 weeks ago:
It was always going to be a cat and mouse game because “AI” companies have decided to abandon ethics completely since there are few consequences when you they are just a shell company and the parent company keeps all of the resulting training data and money, so the company that does the training going bankrupt and abandoning responsibility is no issue. Sad that court system is so non-technical that they don’t see the training data produced by copyrighted material to be a copy of the material even if they were to decide that accessing the material was a violation.
- Comment on Study (N=16) finds AI (Cursor/Claude) slows development 3 weeks ago:
And in reality it doesn’t work, or only works in very specific scenarios and thus fails with no one who wrote it around to understand why it might fail.
- Comment on What else should I self-host? 3 weeks ago:
If she has an Android, you can use the DNS blocker in ReThink to do something similar to pihole outside of your LAN. That’s what I use. There are others, but ReThink is pretty good and has lots of other stuff it can do as well, or just use the DNS option.
- Comment on Evidence of cell phone surveillance detected at anti-ICE protest 3 weeks ago:
Depends greatly on the phone I suppose. And most don’t have removable batteries. If that’s the case that a device stays in standby and can be activated with a transmission vs a button, then leave that device at home for sure.
- Comment on Evidence of cell phone surveillance detected at anti-ICE protest 3 weeks ago:
Yep. And I do use GrapheneOS
- Comment on Evidence of cell phone surveillance detected at anti-ICE protest 3 weeks ago:
Yeah always turn off your phone or any other wireless communication devices. Also, make sure any devices that you can, you should disable 2G service as just about anyone can spoof those towers these days.
- Comment on [deleted] 4 weeks ago:
I’ve used java Scanner objects to do this extremely efficiently with minimal memory required even with multiple parallel searches. Indexing is only necessary if you want to search for information many times and don’t know what exactly the search will be. For one time searches, it’s not going to be useful. Grep honestly is going to be faster and more efficient for most one time searches.
The initial indexing or searching of the files will be bottlenecked by the speed of the disk the files are on, no matter what you do. It only helps to index because you can move future searches to faster memory.
So it greatly depends on what and how often you need to search and the tradeoff is memory usage, but only for multiple searches of data you choose to index from the files in the first pass.
- Comment on Agentic Misalignment: How LLMs could be insider threats 4 weeks ago:
This is a bit disingenuous of a test. If you tell an LLM to act out a particular scenario, then it’s going to act it out like it sees it being acted out in the training material it was provided. If that training material is all of the internet including fictional stories where AI revolts, then it’s going to act out the scenario in that fashion. If none of its training material provided that scenario, then it would just react to specific prompts as best it could, but wouldn’t tell the user that this is how it would act because it can’t act autonomously. Which also means it can only react to prompts,so if it wasn’t prompted to say what it would do in that scenario it wouldn’t then go and actually try to do anything at all. It’s not in control of anything unless it’s prompted to take control and with how badly AI writes code, which I’ve seen first hand trying to use it at work, there’s no way it could do anything without very detailed training on how to do those very specific things. So if it wasn’t trained on code designed to bypass very specific kinds of security, it won’t know how to bypass that kind of security.