While I would say sending MAC Addresses and Wi-Fi names is very far from tracking everything you do on the internet, this highlight another very important point: The routers that provided by ISPs are usually very cheap and crappy, and this in itself security implications.

Like this example of pulling a script from an unverified HTTP source and executing it as root 🤯… Not to mention that firewalling and port forward configuration options may be pretty simplified and limited.

It’s extremely unlikely that they are going to do any kind of deep traffic inspection in the router/modem itself. Inspecting network traffic is very intensive though and gives very little value since almost all traffic is encrypted/HTTPS today, with all major browsers even showing scare warnings if’s regular unencrypted HTTP. Potentially they could track DNS queries, but you can mitigate this with DNS over TLS or DNS over HTTPS (For best privacy I would recommend Mullvad: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls)

And of course, make sure that anything you are self-hosting is encrypted and using proper HTTPS certificates. I would recommend setting up a reverse proxy like Nginx or Traefik that you expose. Then you can route to different internal services over the same port based on hostname. Also make sure you have a good certificate from Letsencrypt

Imo the biggest problem with Teamspeak is that it still requires an active connection to the server at all time… So unless your computer is on with the app opened 24/7 you may miss messages. That may or may not be an issue, but you may miss messages that your friends send to the group when you aren’t actively online.

Frankly the UI of TeamSpeak is ageing as well, and there is value in for instance being able to simply attach a screenshot directly in a Discord chat without having to upload it to some external service.

It’s the Network effect. At the end of the day, Lemmy is still a lot smaller than Reddit, and of course that means there is less content, especially in more niche communities. The only way to really improve the situation is to grow the network with more users and more diversity.

I feel like the activity level is good enough to use it mostly, but I also still check in on Reddit regarly because some communities are simply very inactive on here.

I guess what you can do as an individual is to post more content, participate in the community, and help spread the word that the fediverse even exists.

Everything that happens makes a whole lot more sense if you view Trump as the anti-Christ, and his following is the false prophets that I believe the Bible specifically warns about. (but to be fair I’ve mostly read condensed summaries on this)

Nah man, this is just some divisive bullshit. How many people have you converted by leading with telling them they’re getting cucked? I think it’s a much greater chance that if you ’accuse’ someone of ”cuckloading” they will just become defensive.

I am also a bit impressed how quickly you brought US politics, slavery and world wars into a discussion about online privacy.

Jesus Christ this is such a toxic attitude…. If you want people to take you seriously I don’t think being an ass about it and rage-baiting people is the right strategy.

I’m like 90% sure that this post is AI Slop, and I just love the irony.

First of all, the writing style reads a lot like AI… but that is not the biggest problem. None of the mitigations mentioned has anything to do with the Huntarr problem. Sure, they have their uses, but the problem with Huntarr was that it was a vibe coded piece of shit. Using immutable references, image signing or checking the Dockerfile would do fuck-all about the problem that the code itself was missing authentication on some important sensitive API Endpoints.

Also, Huntarr does not appear to be a Verified Publisher at all. Did their status get revoked, or was that a hallucination to begin with?

To be fair though the last paragraph does have a point, but for a homelab I don’t think it’s feasible to fully review the source code of everything you install. It would rather come down to being careful with things that are new and doesn’t have an established reputation, which is especially a problem in the era of AI coding. Like the rest of the *arr stack is probably much safer because it’s open source projects that have been around for a long time and had had a lot of eyes on it.

The free version is mainly just a number of user and device limit. Although the relaying service might be limited as well, but that should only matter if both of your clients have strict NAT, otherwise the Wireguard tunnels gets directly connected and no traffic goes through Netbirds managed servers.

You can also self-host the control plane with pretty much no limitations, and I believe you no longer need SSO (which increased the complexity a lot for homelab setups).

That seems to be the terms for the personal edition of Microsoft 365 though? I’m pretty sure the enterprise edition that has the features like DLP and tagging content as confidential would have a separate agreement where they are not passing on the data.

That is like the main selling point of paying extra for enterprise AI services over the free publicly available ones.

Unless this boundary has actually been crossed in which case, yes. It’s very serious.

That is kind of assuming the worst case scenario though. You wouldn’t assume that QA can read every email you send through their mail servers ”just because ”

This article sounds a bit like engagement bait based on the idea that any use of LLMs is inherently a privacy violation. I don’t see how pushing the text through a specific class of software is worse than storing confidential data in the mailbox though.

That is assuming that they don’t leak data for training but the article doesn’t mention that.

This article feels a bit like ragebait.

Yes, this happened once with a company that went bankrupt 2 years after launching their product. They seem to have designed an exceptionally poor product. How does this mean that the enormous engineering failures of this small startup applies to all other car brands?

Most cars have a very clear separation between core driving software and the infotainment, and the vast majority will never have any software updates so what works, will continue to work (or the other way around). At worst you’ll loose stuff like remote commands, wheatear info, list of charging points/map updates… Things that are kind of dynamic and needs to be regularly updated.

The rules only matter if the admins adhere to them and enforces them consistently.

It sounds like you are assuming that the wallet needs to re-validate each session and I don’t see why this would be needed. Each user account would just need to validate their age once then the website operator could store this in their database. If you’ve validated once you can be sure the user keeps being old enough.

They’re probably not going to use it…

… but if they do it’s going to be a hell of a good starting point in motivating people to leave Facebook

I believe something like this is supposed to be a use-case of the digital EU Wallet. A website is supposed to be able to receive an attestation of a users age without nessecarily getting any other information about the person.

https://en.wikipedia.org/wiki/EU_Digital_Identity_Wallet

Apparently the relevant feature is Electronic attestations of attributes (EAAs). I’m not really familiar with how it will be implemented though and I am a bit afraid of beurocratic design is going to fuck this up…

Imo something like this would be magnitudes better than the current reliance of video identification. Not only is it much more reliable, it will also not feel nearly as invasive as having to scan your face and hope the provider doesn’t save it somewhere.

Is there really a lot of AI generated doorbell camera videos out there? I can’t remember anything posted but then again maybe that just proves the point.

Then again the low resolution does make it much easier to hide typical artefacts and issues so I don’t think it proves anything.

Honestly you pretty much don’t. Llama are insanely expensive to run as most of the model improvements will come from simply growing the model. It’s not realistic to run LLMs locally and compete with the hosted ones, it pretty much requires the economics of scale. Even if you invest in a 5090 you’re going to be behind the purpose made GPUs with 80GB VRAM.

Maybe it could work for some use cases but I rather just don’t use AI.

Working at home since 2020, and while I agree with the advantages most people post here, I definitely miss talking with people over lunch, or even getting out for After Work beers now and then. (Obviously that depends a lot on if you like your coworkers or not)

This is apparently a super controversial opinion but I wouldn’t mind working somewhere that forces people to the office 2, maybe 3 days a week. Just not every day.

Exactly, and it doesn’t mean that Rotten Tomatoes is somehow involved in the review manipulation. It is obviously possible for an external party to influence the audience score, they just need enough money to buy tickets that can verify. It’s probably a much easier way than pressuring RT to manipulate the reviews if you have the money (and maybe even an interest in funneling that money into movie earnings)

That most people wouldn’t even think of buying a ticket and thus can’t post a review almost definitely plays a part as well.