• 1 Post
  • 36 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle

  • Good enough? I mean it’s allowed. But it’s only good enough if a licensee decides your their goal is to make using the code they changed or added as hard as possible.

    Usually, the code was obtained through a VCS like GitHub or Gitlab and could easily be re-contributed with comments and documentation in an easy-to-process manner (like a merge or pull request). I’d argue not completing the loop the same way the code was obtained is hostile. A code equivalent of taking the time (or not) to put their shopping carts in the designated spots.

    Imagine the owner (original source code) making the source code available only via zip file, with no code comments or READMEs or developer documentation. When the tables are turned - very few would actually use the product or software.

    It’s a spirit vs. letter of the law thing. Unfortunately we don’t exist in a social construct that rewards good faith actors over bad ones at the moment.


  • As someone who worked at a business that transitioned to AGPL from a more permissive license, this is exactly right. Our software was almost always used in a SaaS setting, and so GPL provided little to no protection.

    To take it further, even under the AGPL, businesses can simply zip up their code and send it to the AGPL’ed software owner, so companies are free to be as hostile as possible (and some are) while staying within the legal framework of the license.











  • thatsnothowyoudoit@lemmy.catoSelfhosted@lemmy.worldNextcloud zero day security
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    edit-2
    9 months ago

    Nextcloud isn’t exposed, only a WireGuard connection allows for remote access to Nextcloud on my network.

    The whole family has WireGuard on their laptops and phones.

    They love it, because using WireGuard also means they get a by-default ad-free/tracker-free browsing experience.

    Yes, this means I can’t share files securely with outsiders. It’s not a huge problem.


  • You’re conferring a level of agency where none exists.

    It appears to “understand.” It appears to be “knowledgeable. “

    But LLMs do neither of those things.

    Take this note from an OpenAI dev:

    It’s that these models have leveraged so much data they’ve been able to map out relationships between words (or images) in way as to be able to generate what seem like new versions of those things.

    I grant you that an LLM has more base level knowledge than any one human, but again this is thanks to terrifyingly large dataset and a design that means it can access this data reasonably reliably.

    But it is still a prediction model. It just has more context, better design and (most importantly) data to make predictions at a level never before seen.

    If you’ve ever had a chance to play with a model at level where you can control some of its basic parameters it offers a glimpse into just how much of a prediction machine it can be.

    My favourite game for a while was to give midjourney a wildly vague prompt but crank the chaos up to 100 (literally the chaos flag at the highest level) to see what kind of wild connections exist but are being filtered out during “normal” use.

    The same with the GPT-3.5 API in the “early days” - you could return multiple versions of the response and see the sausage being made to a very small degree.

    It doesn’t take away from the sense of magic using these tools. It just helps frame what’s going on under the hood.





  • I use Nextcloud. But that also means setting up and managing Nextcloud. By the same token you could use google drive.

    For notes and photos you can export them within the app. Notes specifically requires that you print and then hit the share on the print dialogue to save the notes to the file system as a pdf.

    Notes also has another option: if you have a non-Apple mail account on your phone - you can enable notes for that email account and simply move (or copy) your notes from one account to the other. The notes will then become available within that email account mailbox structure on any device or machine where that email account is enabled.

    For voice recordings you can save any voice recording directly to the iOS filesystem.

    The iOS files app also allows you to connect to any other server/desktop via SMB.

    There are lots of options here. None are awesome, but they work.



  • Update: I went and had a look and there’s a Terraform provider for OPNSense under active development - it covers firewall rules, some unbound configuration options and Wireguard, which is definitely more than enough to get started.

    I also found a guide on how to replicate pfBlocker’s functionality on OPNSense that isn’t terribly complicated.

    So much of my original comment below is less-than-accurate.


    OPNSense is for some, like me, not a viable alternative. pfBlockerNG in particular is the killer feature for me that has no equivalent on OPNSense. If it did I’d switch in a heartbeat.

    If I have to go without pfBlockerNG, then I’d likely turn to something that had more “configuration as code” options like VyOS.

    Still, it’s nice to know that a fork of a fork of m0n0wall can keep the lights on, and do right by users.