sudneo

joined 2 years ago
[–] sudneo 6 points 2 years ago

ChatGPT doesn't get inspired, the process is different and it could very well spit verbatim the content. You can do all the rest (depending on the license) without issues, but once again this is not what chatGPT does, as it doesn't provide attribution.

It's exactly the same with software, in fact.

[–] sudneo 2 points 2 years ago (2 children)

Here is not just scraping though, it is also using that data to create other content and to potentially also re-publish that data (we have no way of knowing whether chatGPT will spit out any of that nor where did it take what is spitting out).

The expectation that social media data will be read by anybody is fair, but the fact is that the data has been written to be read, not to be resold and published elsewhere too.

It is similar for blog articles. My blog is public and anybody can read it, but that data is not there to be repackaged and sold. The fact that something is public does not mean I can do whatever I want with it.

[–] sudneo 23 points 2 years ago

The shill bit is probably the single worst thing. If there is one reason to go to reddit when looking for opinions on something, it is to get genuine opinions from users or customers. Thinking that part of the business model is to infiltrate communities and nudge, despite how obvious it might be, it is completely crazy and potentially counterproductive. The moment the trust is broken, I will ignore reddit as I ignore the first 80% of a google search page...

[–] sudneo 4 points 2 years ago (3 children)

Sorry, I am not super clear of what you are asking.

You do have gluetun which is used to connect to NordVPN. Then you have wireguard, to which you connect from somewhere, and you want essentially:

client -> wireguard -> wireguard container -> gluetun container -> internet?

[–] sudneo 1 points 2 years ago (1 children)

Oh right, there is the XML aspect that I didn't consider.

I have to say that I very much have a preference for the declarative terraform strategy vs ansible, and I saw that the libvirt terraform provider is quite mature. I have seen that there are even some providers for proxmox (but less mature in my opinion), so it seems that either way the machine definition could be codified and automated. But the thing is, if the machines are all in Terraform code, basically there is no much use of proxmox (metrics are going to be in node exporter, maybe just backups and snapshots?).

[–] sudneo 3 points 2 years ago (2 children)

I work in security, so there is no really devops/sysadmin prospect for me. That said, I use ansible and (mostly) terraform professionally and for my lab, so that's a good idea nevertheless. I don't have much BSD experience, what do you think are the key reasons to go that route instead of Linux?

[–] sudneo 3 points 2 years ago

Non sarebbe male magari avere la lista di ciò che condividono esattamente, così da avere un documento che fa fede e che il garante può verificare eventualmente. Almeno così su due piedi mi viene in mente questo.

[–] sudneo 1 points 2 years ago

Yeah, that's what I said one line after. However there are also other corner cases (very unlikely) such as shoulder diving or a video recording, or people simply not using random unique passwords (for example because they chose the password before and they don't want to rotate it). In general I agree with the principle that is not 2FA if it's all in one place, but it's also quite a corner case that the password manager is pwned alone (i.e., and not the target services), and in any case it's not like not having 2FA at all.

[–] sudneo 7 points 2 years ago (2 children)

Not fully accurate. The 2FA still prevents issues such as credential stuffing or bruteforcing, which might not depend on you. Of course, these risks are very limited if you use random unique passwords (as it makes sence since you are using a password manager).

Also 2FA is anyway there for the password manager, and if you have a session on, chances are the same applies for the target app (for example, your email). So it's not completely useless.

This said, I agree with the general principle. I personally use yubikeys where I can, including to store the TOTP codes (I never liked the phone to be 2FA device that much...)

[–] sudneo 1 points 2 years ago

Well, hypervisor bugs are rare, but not so much. A physical server is fully isolated by other tenants of the provider (or better, I can achieve that full isolation with network configuration).

Personally I have all my services running in separate containers in one VM. Same separation, just at a different level.

I will definitely anyway run all the services in containers, but I am fully aware that containers don't provide much isolation, especially once you start using the host network to serve native port (i.e., containerized nginx/haproxy) or mounting filesystem volumes inside them. To be honest, in my current setup, where I am the only user of both the machine and the services (made exception for a few family members), I am OK with this separation. However, if I run a lemmy/writefreely/fedisoftware instance, which is going to host other untrusted users, I am not happy if on the same box my git server is running, or my password manager. That's mostly the reason why I was looking for full separation. I guess separate VPSs would also work, though.

[–] sudneo 3 points 2 years ago

Quindi il loro argomento non è che non trasferiscono dati, ma che i dati che trasferiscono non sono personali.

Beh, questo è tutto da dimostrare. Comunque assurdo che enti così grandi debbano appoggiarsi a sistemi del genere per una funzione così banale e di dubbia utilità.

[–] sudneo 2 points 2 years ago* (last edited 2 years ago)

I think bitnami also doesn't (didn't?) produce ARM images, and since they use their own images, basically there are tons of changes to do to the chart if you are running on ARM.

view more: ‹ prev next ›