Have we been running insecure software since the arrival of AI?
I do about a monthly update of my Debian machines. Today I did the usual monthly update and noticed loads of packages uploading from the “security” branch. I’ve had the impression (just an impression) that more and more packages are being updated from security over the past many months. Trixie has been out for a while now and I would have thought that less and less updates should be coming from security. Has anyone had this sensation and if so has anyone linked this to AI finding more holes in OSS that would have normally been found by human scrutiny? Has there been any official research into this? And if this is true, does it mean that we have been running insecure software all along? Or is there is there a risk that AI start filing patches that actually make it less secure because software maintainers are not being rigorous in verifying who is submitting the patch? AI must be changing the paradigm of software development more than any other area of our lives and I can’t still work out if in a better way or not.
Remote
0 Followers
0 Following
18 Posts
Joined February 17, 2024
Open post
Finally have the stream from my HikVision, now the challenge of Frigate
I’ve now managed to get the stream of my HiWatch Series, model HWI- T641H-Z 2.8-12 mm by accessing via browser to rtsp://USERNAME:PASSWORD@192.168.30.50:554/Streaming/Channels/101. Working nice. But on its own, very unusful unless I get storage and image detection going. So, I need something like Frigate.
I believe the Frigate docs suggest running in a docker container installed on a VM. Very convienient as I have Proxmox (installed on a optiples 7070 micropc with 32MB ram) running a VM on which i have a few containers. The idea is to mount a “frigate” dataset created on my Truenas server on Proxmox which is then mounted to the VM. Lots of layers but hoping it should be ok.
I heard that the Google Coral TPU is not sold anymore. Is this going to be a problem for Frigate image recognition? Are there alternatives to the Coral TPU?
35
32
0
0
Open post
Dawarich: 10 years of recorded tracks and now they have a purpose
I think a couple of months ago I found out about Dawarich here on this community as the author posted here. I installed a couple of days ago on a VM I run and have been impressed so far. I started logging track 10 years ago when I found out about OsmAND and never really knew what I would do with those tracks until I discovered Dawarich. Interesting piece of software. With the “trips” function, it reminded me of my trip to Scotland and all the places I had seen on which day.
Now the challenge is to understand why Owntracks feeds it a couple of points a day and only when I’m at home. I thought Owntracks would log locally on mobile phone and then download everything on Dawarich when it was back online on the VLAN at home (i don’t have external access setup and don’t want to for now). Is this some server side problem or a app problem? I’ve not changed the default settings of either the Dawarich server or the app. Any clues? I was goign to try the Dawarich android app but its not on f-droid so will need to wait until it is (strictly on GOS and no Google where I live ;-)
40
15
0
0
Open post
Replying to
So i was thinking about this from a dns perspetive. If you have a dns forwarder can you not configure it to ensure that emails from the local smtp server never leave tour lan?
1
1
0
0
Open post
Replying to
Because you can’t get it working or because you think BI is better? And if the latter, can you expand on the “why”?
1
9
0
0
Open post
I'm dead scared of even thinking of using my corporate phone or laptop for personal use. I think i've never done a personal search or sent a personal email or even made a personal call using company devices. I kown they are logging every single thing i do because they've even told us in our annual cybersecurity training. Just run two seperate and parallel lives ;-)
20
0
0
0
Open post
Replying to
Thanks for sharing the other communities. I have used this forum a lot and there are some great helpers here. I really hope things don't get a bad turn. We really need these forums to help newbies. We've all been there. You could argue that the typical newbie question "where do i start?" Is "low effort" but simply reading all the answers about how others approched self hosting has given me so much benefit.
2
0
0
0
Open post
Replying to
Cool, thanks. GPSlogger is also on fdroid whereas calota is not.
0
1
0
0
Open post
Replying to
What really caught my attention was that in the update of today, the rsync package maintainer had to announce that he/she was jumping to version 3.5 because of “33 CVEs” … how can a software like rsync that has been around for so long have 33 CVEs shipped in just one update. I’m not a software developer but that sounds like a lot of CVEs?
0
2
0
0
Open post
Replying to
Having read this whoke thread, i feel its time to drop Portainer. I find it useful to edit the stackfile and do updates, as well as cleaning old volumes and images.
Seems like Arcane and Dockhand are the most popular substitutes. Is the migration from Portainer easy?
0
0
0
0
Open post
Replying to
It was last updated 6 years ago. GPSlogger seems to still be maintained
0
0
0
0
Open post
Replying to
Yes, i have similar needs. I started recording my tracks in 2015 when i discovered osmand. I literally stored these tracks on my nas for years thinking that at some point, i would chuck in GIS or something to view my history. Then i discovered Dawarich which does it all for me.
0
0
0
0
Open post
Replying to
Where is this setting? I cant find it in Colota.
0
4
0
0
Open post
Replying to
You must mean “Quality filters”? Well, nithing happens when i tap that.
0
2
0
0
Open post
Replying to
Thanks. This dark mode theme i have doesn’t show things very well. Need to change it.
0
0
0
0
Open post
Replying to
So this rrsbridge lets you add website and then it feeds it to you as an rss stream? That sounds intersting. Mat have to look into it.
0
0
0
0
Open post
Replying to
I get this too. Its GPS position accuracy. In highly urbanised or indoor, it hapoens …
0
0
0
0
Open post
Replying to
Seems like i’ve come late to the show then. I was about to get Frigate running on my optiplex micropc and was going to buy a Coral TPU. But if the are not sold anymore I may be stuffed which image recognition? My idea was proxmox->vm->frigate which seems to be the reccomended way of doing.
0
0
0
0