[-] irotsoma 39 points 2 months ago

No. At least not in the way most people expect.

It does block some tracking and ads that Chrome alone allows or explicitly adds. But it simply shifts that tracking to Brave. The idea was that you'd still get the benefits of that tracking by giving all of your data to Brave instead. I honestly never was convinced by this considering your data is still being sold, just by a different company so it doesn't sound much better to me. Supposedly, according to them, Brave is more trustworthy and gives you more control over what they track and sell, but I don't trust that business model. There's no real incentive for them to do what they said they would.

[-] irotsoma 31 points 3 months ago* (last edited 3 months ago)

I think it's safe to say that all of the LLMs have been training their systems on any site they can get their hands on for some time. That's why apps like Anubis exist trying to keep their crawlers from killing their bandwidth since LLM companies have decided to ignore robots.txt, copyrights, licenses, and other standard practices.

[-] irotsoma 71 points 4 months ago

Usage is rising because corporate executives started getting kickbacks and thinking they could cut staff by implementing it. But developers who have actually had to use it have realized it can be useful in a few scenarios, but requires a ton of review of anything it writes because it rarely understands context and often makes mistakes that are really hard to debug because they are subtle. So anyone trying to use it for a language or system they don't understand well is going to have a hard time.

29
submitted 4 months ago by irotsoma to c/selfhosted@lemmy.world

I'm starting a project to make my home hosted services exposure to the internet a little easier to keep secure.

I have various web services such as Immich, JellyFin, and a few other services that either have high storage needs and this would be expensive in the cloud, or things that use more private data. Many of these are exposed to the internet. This network has a domain assigned and each service is assigned a subdomain. These are running in a K0s Kubernetes cluster on a separate VLAN from my home devoces on a couple of NUCs and a raspberry pi. And use Traefik reverse proxy and Keycloak OIDC.

I also have a few VPS's running things that need faster responses or don't store as much data. This has a separate domain.

Right now I have an OPNSense router that is the target of all the home domain's traffic using dynamic DNS and that forwards it to Traefik on the Kubernetes cluster.

I'd like to instead close off the home network a bit more so I don't have to devote so much to security and can just drop a lot of the malicious connections coming in regularly. I also have the problem that my ISP still only offers 6rd for IPv6 which is basically useless. So I was considering several tunneling technologies that would have the exit node on a VPS. But also need to be able to access the services while at home without the traffic exiting the network.

I've narrowed in on headscale/tailscale and pangolin. I really like that pangolin uses traefik because I'm already familiar with it and it's already in use in both my domains.

So I'm going to start working on setting up pangolin to see how it goes, but I haven't seen many examples and I haven't seen any that use Kubernetes on the internal network side. Sure I could set up a separate docker instance to host the services, but I really like that kubernetes is able to load balance so that one of my NUCs is almost always in low power mode during off hours when no maintenance tasks are running. So I don't want to put other non-kubernetes services on there nor do I want to have to set up a totally separate server if not necessary.

I haven't dug in too deep yet, so I was hoping to see if anyone else had any experience with setting up pangolin with kubernetes on the internal network side?

[-] irotsoma 31 points 6 months ago

Signal isn't that kind of app. It protects your data in flight, but only has minimal protections after the recipient gets the message. It's a whole other game to protect data at the endpoint. If you can't trust your recipients to protect data, then you shouldn't send them data needing protection. In order to do that you need control over all levels of the device receiving the data, hardware, operating system, file system, and software. Anything else will always leave openings for data at rest at tge destination to be compromised by untrustworthy recipients.

[-] irotsoma 48 points 7 months ago

Not a new thing, and I can definitely see good uses for this information. What they should have done is made it so that the one being tracked gets a log and real time notification any time someone is tracking them. This would alleviate some of the toxic spying behavior simply by making it transparent rather than covert.

[-] irotsoma 32 points 7 months ago* (last edited 7 months ago)

Even if Copilot was suspended, the idea was put into the heads of managers and executives. My work laptop current has three applications constantly locking files as they track everything I do and every file that gets touched and upload it all to the servers. Git now takes a ridiculous amount of time to check in and push files since it creates tons of small changes to the cached files that a the tracking applications block further changes or uploads until they can record the information. It takes about 30 seconds to a minute to check in a single small file. Something that used to take a second or two at most. Worst part is if I'm in a WebEx meeting, the fighting over caches in it and git and any other processes,often causes deadlocks that crash the machine. I'm constantly apologizing for being late for meetings because the laptop crashed and had to reboot. It's gotten to the point that they finally gave me a much faster laptop rather than just excluding cache and git folders and such from the tracking because the people who want literally everything tracked don't know what cache or git is, much less how much useless data they're gathering or how the AI that analyzes it all is going yo get distracted by the garbage and not find any useful data anyway. Microsoft needs to get in the game to push the others back out.

6
submitted 8 months ago by irotsoma to c/skincareaddiction@sh.itjust.works

I'm looking for some new face creams for combination skin and found something that didn't make sense to me. Anyone want to ELI5 why prebiotics are a positive thing for skin creams? I've seen several products advertising it. But doesn't prebiotic just mean it's something that bacteria likes to eat? So, in a skin cream that seems like it would promote bacterial growth, which I get why that combined with probiotics can be good for digestion, but can't get why it's a plus and not a minus for skin creams, especially in areas of the skin like the face that tend to gather a lot of bad bacteria.

Anyway, just trying to decide if it's just marketing nonsense, there's an actual benefit, or as it seems with my initial reaction, that it's actually a negative thing that would potentially promote acne/rosacea.

Also, feel free to interject any recommendations on good ingredients/products for aging, combination skin, but not the primary reason for the post.

[-] irotsoma 40 points 9 months ago

Yeah. They can't get Mastodon moderators to suppress negative publicity like they can on Reddit and other platforms.

[-] irotsoma 44 points 9 months ago

I mean it's kind of like the "humans evolved from monkeys" or whatever primate you want to substitute for monkey. No, they branched off from a common ancestor though.

I mean lots of people get mixed up between BSD, Linux, UNIX, and all the variations over the years. Is MacOS a version of Linux? No. Is a human a type of ape? No. Are MacOS and Linux way, way closer than either are to Windows, hell yes. Just like people are way closer to being monkeys than swallows. There's a lot of mixed breeding in both examples and a lot of total incompatibilities as well.

[-] irotsoma 45 points 9 months ago

But the shithead exec is supportive of fascists which means privacy is secondary to the desires of the current regime. That's just a standard part of fascism. And if the current regime is allowing untested backdoor code to be inserted in the Treasury department and NASA and the CDC and most major social media to strip out protections for people they don't like, climate change, etc. Just imagine what someone who actually supports them ideologically would be willing to do.

[-] irotsoma 42 points 9 months ago

$20 to unlock the API killed it for me. If it has a built in way yo lock it down, it's not an open platform and is a great way for bugs to brick a device.

[-] irotsoma 44 points 10 months ago* (last edited 10 months ago)

Also Google on 2008: "By saying “common”, we mean to include names which are in widespread daily use, rather than giving immediate recognition to any arbitrary governmental re-naming. In other words, if a ruler announced that henceforth the Pacific Ocean would be named after her mother, we would not add that placemark unless and until the name came into common usage."

[-] irotsoma 63 points 10 months ago* (last edited 10 months ago)

Problem is this means that things we were hoping to get like having hormone replacement therapy actually approved by the FDA for use for transgender care will not happen and any enforcement of anti-discrimination or laws against hate speech at the federal level will no longer apply to trans and non-binary people. This will allow, for example, insurance companies to not have to cover transgender care. There is already a huge waiting list for people who are seeking care in the US due to the lack of specialists (myself included), so that list is likely to get longer. And likely any doctors who might have been planning to take up transgender care specialties may have their programs lose their funding. It's a huge impact to a lot of areas of government and many industries to have the federal government not recognize transgender care as valid and not recognize non-binary people like me as people at all.

Also, I'm fortunate enough to live in a state that is friendly to transgender and non-binary people, but my employer is not based here, so the insurance I have doesn't have to obey local laws that don't allow for blanket policies banning coverage of transgender care. So, the federal laws do matter.

view more: next ›

irotsoma

joined 10 months ago