Ok, so I ran the repo through an LLM to look for any suspicious requests, and it came back clean.
But it’s hella suspicious that the repo owner edited away the issue and closed it without a response.
It’s also hella suspicious that the user that reported that issue created their account yesterday.
I think I need to go the nuclear option: pop a gummy and monitor the network traffic of the container and see what it’s doing.
Ohh that’s suspicious. I’m going to kill mine for now and take a look later tonight. I’ll report back if I find anything interesting!
I think the author literally released it like 2 days ago which is why there’s no issues or prs yet.
I installed it yesterday and have only fiddled around a little bit. I like that it pointed out a bunch of health issues with my Lidarr library and have been stuck on a side quest dealing with those.
If you want to explore it and see if anything seems malicious to you, I’d focus on code making requests, and review the sub-dependencies to see if any look sus. It should live entirely in your network and shouldn’t be making any external requests outside your server apart from the connections you set up (like last.fm).
I’m just using Unraid for the server, after many iterations (PhotonOS, VMware, baremetal Windows Server, …). After many OSes, partial and complete hardware replacements, and general problems, I gave up trying to manage the base server too much. Backups are generally good enough if hardware fails or I break something.
The other side of this is that I’ve moved to having very, very little config on the server itself. Virtually everything of value is in a docker container with a single (admittedly way too large) docker compose file that describes all the services.
I think this is the ideal way for how I use a home server. Your mileage might vary, but I’ve learned the hard way that it’s really hard to maintain a server over the very long term and not also marry yourself to the specific hardware and OS configuration.
Do you automate that or just check the list manually every once in a while?
extension developers should be able to justify and explain the code they submit, within reason
I think this is the meat of how the policy will work. People can use AI or not. Nobody is going to know. But if someone slops in a giant submission and can’t explain why any of the code exists, it needs to go in the garbage.
Too many people think because something finally “works”, it’s good. Once your AI has written code that seems to work, that’s supposed to be when the human starts their work. You’re not done. You’re not almost done. You have a working prototype that you now need to turn into something of value.
My god, the tension was so well managed throughout. So many scenes gave me the same squirming discomfort I got from Christoph Waltz in Inglourious Bastards.
I do backups with a Raspberry Pi with a 1TB SD card and leave it on all the time. The power draw is very small and I think reasonable for the value of offsite backups.
My personal experience with WOL (or anything related to power state of computers) is that it’s not reliable enough for something offsite. If you can set something up that’s stable, awesome, but if your backup server is down and you need to travel to it, that suuuucks.
“So what was the problem in the end?”
“Man, I don’t fucking know.”
I wonder what they spent paying people to implement and communicate this change.
At 600k for a company that size this cost them more money than just paying the extra 4 cents.
I’m not sure if it automatically does the metadata lookup or if it just reads embedded metadata from the epubs I’ve downloaded. It for sure does a poor job of setting up the series name and book number fields if you read a lot of series.
I use a combination of calibre-web-automated for metadata management and calibre-web-automated-book-downloader for downloading from Anna’s Archive. Book read progress and status is synced from my Kobo.
It works really well but you need to manually request books one at a time. The readarr feature I miss was the ability to subscribe to a GoodReads list.
Polite: “Thanks.”
Less polite: “Thank you for your feedback.”
My fave: “UNSUBSCRIBE”
There’s a few free vpn providers out there. You could do a little homework and see if they are a good option. I tend to mistrust free services like that (if I’m not paying, who is, and what are they paying for?), but if you’re in a pinch it’s something to research.
Another option is to look for deals. Sometimes VPN providers will have a super sale a few times a year. I think once I got a NordVPN subscription for THREE YEARS for like $60. It’s more expensive than a single month of anything, yes, but if you can afford a onetime expense it’s nice not to have to worry about a recurring monthly cost.
Your other option is to not use torrents. Usenet is still the grand daddy of file sharing and is pretty much anonymous. Most Usenet hosts are paid, but back in the day even ISPs ran their own servers. It could be worth looking and seeing if there’s any free or low cost providers there.
Wandering the desert?
Nay, vibe travelling.
They didn’t release their methods, so I can’t be sure that most of those aren’t just frustrated users telling the LLM to go kill itself.
I feel like admitting that would have led to him getting a bullet in the head.
The machines obviously aren’t interested in reconnecting him - they grow humans by the thousand in their facilities. Like you’re not going to hike for a day to pick up lost carrot when you have them growing in your garden.
The only way the machines would consider reconnecting him would be as part of a deal for something significantly more valuable than one human. If Morpheus is on the table? Sure, now that’s worth it. Which isn’t to say they wouldn’t have betrayed and killed him once they had Morpheus anyway. Our only assurance that they would honour an agreement is a throwaway line from the Architect at the end of Reloaded.
And if there’s no going back, what does a terrified resistance do when one of their fighters starts talking about joining the enemy? He’s too dangerous - he’s gotta go.
That game is too memorable. I tried replaying it a while back after not touching it in 15 years.
Five minutes in and nope, this whole story is seared into my long term memory and there’s nothing fresh yet.
I’ll try again when I’m 80.
Half my visits to Wikipedia are because I need to copy and paste a Unicode character and that’s always the highest search result with a page I can easily copy and paste the exact character from.
Well that was fun! I’m confident this project isn’t malicious. It’s for sure coded using AI, and I think that’s what triggered a smear campaign. This removed Reddit post looks like there is just a downvote brigade out to get the project because the author admitted to using AI.
The only network traffic it’s made when I monitored it was local. Certainly nothing went to Asia.
I think it tries to solve a neat problem. There’s so many features packed in that it’s obviously vibe coded. That’s probably a huge turn off for AI detractors. If you don’t care about that, I think you’re safe to give it a try.