• 1 Post
  • 27 Comments
Joined 8 months ago
cake
Cake day: January 25th, 2024

help-circle



  • I enjoy it, but I feel like it’s something they could do more with and don’t.

    Maybe one day they’ll find other ways to sneak it into new content, like the Necramech. That was also interesting but underwhelmingly supported, and now they try to squeeze it into places to make it relevant. But it still feels like it needs….more.

    Oh, and who remembers Fish Team? I don’t even know if that feature got added, I avoid the Lich stuff.


  • Since you mention setup instead of any manual install screwery, I’d say root(uid 0) is still very real, you just didn’t setup any login for it. Every time you sudo (substitute-user-do), you(probably uid 1000) are running that command as root instead of you. In fact, just sudo -i and you are now “logged in” as root.

    Edit: Missed the context. Should still be useful info but you probably are not accidentally remoting into an account you never setup the login for.


  • Raspbian is sometimes a compromise between security and usability, because it is designed to go into the hands of new users. It also used to ship with a default “pi/rasberry” login hardcoded and IIRC permitted root password login over ssh. Things experience users change or turn off, but needs to start friendly for the rest, you know?

    By doing this, they can take a step in the right direction by separating the root and login user, without becoming annoying asking for a password frequently as a newbie copies and pastes tutorial commands all week.

    And as I said it’s unlikely, even very unlikely, but just not impossible. Everything comes with a risk, I just believe it’s up to you, not me, what risks mean in your environment. Might be you’d like to have the convenience on the home dev server, but rather have as much security as possible on a public facing one.

    Or maybe you’d like to get really dialed in and only allow specific commands to be run without a password, so you can be quick and convenient about rebooting but lock down the rest. Up to you, really, that’s the power of Linux.


  • If you’ve got a VPS at your disposal, many of the homepage softwares I’ve tried over the years have some amount of caching to make them quite fast or even operate offline(“Homer” for one required me to deeply purge my cache as it would still appear when my site was offline…despite having replaced it long ago! 😂). Or, if you wanted to roll your own static HTML page, you can absolutely add a Service Worker for your own offline caching.

    That’s where I’m at now. I use a custom ServiceWorker static HTML for my homepage and tab page on all my devices. This page is a bouncer, checks if I’m at home or not(or if my local dashboard is offline) and either redirects me to the local homepage which has all my HomeLab services on it, or if it fails just tells me I might be abroad or offline and lists a few public websites.

    And yes, this works offline or over a shitty connection. Essentially the service worker quickly provides the cached page from the browser storage, then tries to take the time to check the live version. If it gets one, it updates the cache, if not, enjoy the offline version.



  • In Debian, you will want to modify your /etc/sudoers file to have the NOPASSWD directive.

    So where you find something like this in that file:

    %sudo ALL=(ALL:ALL) ALL

    Make it like this:

    %sudo ALL=(ALL:ALL) NOPASSWD:ALL

    In this example, powers are given to the sudo %group, yours might just say pi or something else the user fits into.

    Also, please note that while this is convenient, it does mean anyone with access to your shell has a quick escalation to root privileges. Some program you run has a shell escape vulnerability and gets a shell without a password, this means they also get root without one too. Unlikely to happen, sure, but I believe one should make informed decisions.


  • PassingThrough@lemmy.worldtoCommunism@lemmy.mlProtestation
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    1
    ·
    edit-2
    2 months ago

    I presume much the same ways as they did inside the city…with work.

    Grab a quiet field(there was more available space before there were so many people), put up some temporary shelters, hunt and forage, cook a camp potluck. Sure, go without the certainty of stone and plumbing for awhile, but it could be done when you had the skills and the will.

    Unlike the the other guys who had to realize they weren’t very good at or comfortable with the whole…working thing.


  • PassingThrough@lemmy.worldtoMemes@lemmy.mlGet rich quick
    link
    fedilink
    English
    arrow-up
    1
    ·
    4 months ago

    Forgive me, I’m no AI expert to fully compare the needed tokens per second measurement to relate to the average query Siri might handle, but I will say this:

    Even in your article, only the largest model ran at 8/tps, others ran much faster, and none of these were optimized for a task, just benchmarking.

    Would it be impossible for Apple to be running an optimized model specific to expected mobile tasks, and leverage their own hardware more efficiently than we can, to meet their needs?

    I imagine they cut out most worldly knowledge etc/use a lightweight model, which is why there is still a need to link to ChatGPT or Apple for some requests, would this let them trim Siri down to perform well enough on phones for most requests? They also advertised launching AI on M1-2 chip devices, which are not M3-Max either…


  • PassingThrough@lemmy.worldtoMemes@lemmy.mlGet rich quick
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    4 months ago

    Onboard AI chips will allow this to be local.

    Phones do not have the power to ~~~

    Perhaps this is why these features will only be available on iPhone 15 Pro/Max and newer? Gotta have those latest and greatest chips.

    It will be fun to see how it all shakes out. If the AI can’t run most queries on the phone with all this advertising of local processing…there’ll be one hell of a lawsuit coming up.

    EDIT: Finished looking for what I thought I remembered…

    Additionally, Siri has been locally processed since iOS 15.

    https://www.macrumors.com/how-to/use-on-device-siri-iphone-ipad/


  • PassingThrough@lemmy.worldtoMemes@lemmy.mlGet rich quick
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    4 months ago

    I think there’s a larger picture at play here that is being missed.

    Getting the weather is a standard feature for years now. Nothing AI about it.

    What is “AI” is, Hey Siri, what is the weather at my daughter’s recital coming up?

    The AI processing, calculated on-device if what they claim is true, is:

    1. the determination of who your daughter is
    2. What is a recital? An event? Are there any upcoming calendar events that match this concept?
    3. Is the “daughter” associated with this event by description or invitation? Yes? OK, what’s the address?
    4. Submit zip code of recital calendar event involving the kid to the weather API, and churn out a reply that includes all this information…

    Well {Your phone contact name}, it looks like it will {remote weather response} during your {calendar event from phone} with {daughter from contacts} on {event date}.

    That is the idea between on-device and cloud processing. The phone already has your contacts and calendar and does that work offline rather than educating an online server about your family, events and location, and requests the bare minimum from the internet, in this case nothing more than if you opened the weather app yourself and put in a zip code.


  • Genuine curiosity…what are some proposed solutions we think Valve can implement to solve this crisis?

    I ask because the line about VAC being a joke gave me a thought…VAC is such a joke because it is so simple and un-invasive. Do we really want VAC “upgraded” to the level of more effective Anti-cheats, where it cuts down the bots but is now a monitoring kernel service? Just a few weeks ago people were in an uproar about the new Vanguard anti-cheat…do we want that for Valve? Or do we think they can do it a better way?

    As an aside, honestly in my mind community servers with a cooperative ban list plugin might be the most effective solution of all…it would still be a game of whack a mole since they can always churn out new accounts, but that’s what gives me pause about other solutions because the only real solutions to slow cheaters start to sound like charging for the game(to make account creation costly) or implementing a bulletproof system of hardware bans, which means invasive solutions that can be certain they aren’t virtual machines or such.




  • People have been defending a lot of abusive practices in a lot of fields of late, it’s not unique to gaming or even digital media.

    I also think you narrow your scope too tightly, Valve is hardly the sole offender and this post is picking on them particularly, not the industry as a whole. Valve may have been first, may be the biggest, but they are not the only and frankly if it were up to the publishers I think it could be so much worse. And once you find that nuance, it’s hard to blame Valve alone, and you look to see how they may be putting the brakes on it getting worse. Do not ignore what little is good simply because it is not perfect and all. I feel you, man, but I’m not sure what to do about any of it.

    I could abstain from (Steam/EA/Ubisoft) video game purchases but, frankly I already do that. Work doesn’t leave me as much time as my youth…

    Back to piracy, sure, all DRM is broken eventually, hell even Denuvo for a time, but…Valve makes it too easy IMO. They could be constantly working on improving the DRM, keep the pirates on their toes having to put real work in and per-game unique hacks but, they don’t. I have it on good authority that bypassing Steam DRM is not only easy, but the same methods from years ago work today. They are certainly pulling their punches on this, probably because Gaben is willing to die on the hill that piracy is a service issue only, and will not give it any mind.

    Some of your Valve supporters may actually be closeted pirates happy with the status quo, I think, because of that.


  • I think we need to take that fight right to the top then. Until the DMCA is challenged, this is our lot, as that is the Act used to justify and preserve DRM of all kinds, even internationally.

    Of course there’s also piracy in which case Valve has actually been a tremendous help. A majority of releases it seems are actually just Steam bypasses, because Valve has made a majority of developers content with just Steam DRM, and has done nothing to combat the issue. Now there’s Denuvo to fight that but that’s not Valve special…