• 0 Posts
  • 8 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2024

help-circle

  • You could use PiVPN (you don’t need to install it specifically on a Raspberry Pi – this is just a handy all-in-one software solution). It supports both OpenVPN and Wireguard standards. Forward the relevant port in your router configuration, set up a single user for yourself in the VPN settings, and then connect via whichever client you prefer (OpenVPN if you use OVPN, or Wireguard if you use Wireguard).

    I’ve used it before to access locally-hosted services from outside my home network and it gets the job done with fairly minimal setup.


  • It’s impressive, just not particularly useful,

    I will have to disagree with this. I have found LLMs to be remarkably useful in a variety of circumstances because they are pretty good at regurgitating API documentation and man pages in a relatively small context (effectively making them a very efficient google search).

    For example, last week I accidentally deleted a partition from a USB drive. I asked an LLM how I might recover my data using GNU/Linux tools and it pointed me in the direction of ddrescue (and subsequently, gddrescue) and showed me how I could use the recovered disk image to recover my lost files.

    I was already aware of ‘dd’ as a tool for disk management, but was wholly ignorant of ddrescue or gddrescue because I haven’t had a data recovery use case in over 15 years. It was a fairly simple affair, and it was much easier than asking StackOverflow.


  • I dunno if I’d say I’m “unimpressed” with AI. I certainly find the technology itself fascinating. I worked with machine learning for years before consumer generative AI became mainstream and it’s profoundly impressive what decades of research and development have yielded. I genuinely do admire the painstaking work that underappreciated computer scientists have put in to make such things possible.

    That said, “AI” is the new “blockchain” insofar as virtually every company on the S&P 500 has decided this is the new be-all-end-all feature that must be integrated into every aspect of every project. I don’t need AI to be part of my OS. I will open a new tab in my web browser if I decide I have a task for it. Granted, I am not a representative sample of a typical computer user (I use GNU/Linux btw).

    To say nothing of the unethical manner in which these models are trained, using works produced by actual writers, artists, programmers, etc. Obviously profiting from their works while offering zero compensation (and actively taking work away from them by offering AI as an alternative to their craft).



  • I took a cursory glance through the source code (for the Firefox version, at least), and I’m not seeing any calls to the gitflic.ru URL outside of the update functions (there appear to be two different places where these might be triggered) and one function for importing custom sites:

    // Import custom sites from local/online
    function import_url_options(e, online) {
      let url = '/custom/sites_custom.json';
      if (online)
        url = 'https://gitflic.ru/project/magnolia1234/bpc_updates/blob/raw?file=sites_custom.json'  + '&rel=' + randomInt(100000);
      try {
        fetch(url)
        .then(response => {
          if (response.ok) {
            response.text().then(result => {
              import_json(result);
            })
          }
        });
      } catch (err) {
        console.log(err);
      }
    }
    

    I noticed in the manifest.json, there is the optional permissions array:

    "optional_permissions": [ "*://*/*" ],

    Which seems to grant the extension access to all URLs, so maybe that’s why the HTTP request is able to fire on any given website rather than just the ones explicitly defined in the regular permissions array. Though this is speculation on my part; I’ve only ever written one or two complex Firefox extensions. I’m not sure if the “optional permissions” array can be declined upon installation (or configured in the extension settings after installation); perhaps access to the wildcard URL can be revoked so that this update call isn’t occurring constantly.

    All looks okay to me, but this was a very quick audit.