Nyfure

joined 2 years ago
[–] [email protected] 15 points 1 year ago

too bad.. inconveniencing other users was also part of the point. Not sure how not doing anything, but not deleting it has more impact.. def. feels like alot less.
Guess you cant use reddit reliably anymore for searching for stuff, too bad. Use a different platform or hope it has the chance to grow and is less shitty.
Sorry you are so inconvenienced for continuing to use reddit, otherwise.. why would you care?

[–] [email protected] 31 points 1 year ago

No problems with yubikeys or the receptacle they are plugged into yet.. no idea what you do while these sticks are plugged in.. doesnt seem like a major concern per the reviews

[–] [email protected] 9 points 1 year ago* (last edited 1 year ago) (2 children)

you want a frontend, not the "service" itself.
Under "service" i usually understand the main logic part of something. In this case the LLM-processing itself.
Thats probably where the confusion is coming from here.

[–] [email protected] 10 points 1 year ago* (last edited 1 year ago) (4 children)

Bandwidth is one part.. Storage is theother and usually you have less storage than bandwidth anyways.

[–] [email protected] 5 points 1 year ago

Well you only have to reinstall if you had affected versions installed.
For e.g. Debian stable, thats not the case. Or e.g. Arch sshd doesnt link to xz, so thats not a concern there.

Most systems wont be affected because their sshd doesnt link xz, didnt update to that version yet or simply isnt accessible from the outside.
Though it does show how vulnerable critical packages can be and how much better we need to protect them.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Please include the actual calculations for energy-prices as many, you may not know, live in different locations and pay different prices compared to you.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago)

I like the streaming approach, but i dislike that its linked to stremio.
I want to have the option to use my server (at least for syncing) with my own auth and transcode when needed on the server.
Basically jellyfin with streaming sources and search built-in.

And most debrid services dont seed (well) and have poor retention, so thats also not that great.

[–] [email protected] 3 points 1 year ago (1 children)

mhh.. you might be correct.
I havent considered how easy it actually is to search for a comment and find the exact post.

Question is if searching indexers like public search-engines is enough to call the data easily re-identifiable.
Or if this usage of personal data is covered somehow else e.g. legitimate interest, weighed against the freedoms of the data subjects, as you have listed above already.

[–] [email protected] 4 points 1 year ago* (last edited 1 year ago) (3 children)

Of course they are linked, but removing the username from the comments means they are mostly anonymized as far as GDPR is concerned.
It is perfectly fine to unlink data and keep processing it, as long as its considered anonymized under GDPR.

Your post content here is also not considered personal data, it shows up on a lookup request because its currently linked. If i crawl the page and dont save the username, the resulting data can most likely be considered anonymized under GDPR as far as the current interpretation is concerned.
It only becomes a problem as soon as i become aware the content indeed did contain personal data or probably also if i could have expected it to with high probability.
And i'd have to make sure to remove obvious ways to re-link the content to your user (e.g. mentions of your username in comments).

Anything else requires precedence about ways to re-identify someone based on posts on a platform weighed against the users freedom and the difficulty of doing such re-identification.

Recital 26 discusses when something could be considered anonymous. (or rather when gdpr would apply at all, and what it means to have anonymous data)

[–] [email protected] 15 points 1 year ago* (last edited 1 year ago) (9 children)

Now i dont want to defend reddit here, but afaik most comments are not subject to GDPR as long as you dont know they contain personal data and they have been detached from other personal data fields (like username).
So by removing personal data fields, they most likely become "anonymized".
Of course thats not the end of it, you have to consider the available technology to de-anonymize this data for it to be legally called anonymized.

But i dont think there has been any case where this was challenged before.. and i bet most supervisory authorities would discard such complaints as being "too hard to follow through". (i got that reply from the Netherlands authority for checking newsletter opt-in from a website)
And i certainly dont think reddit or any operator will be forced to delete comments because they could be deanonymized depending on the content the user wrote, when most comments probably cannot be deanonymized.
Having to check everything for potentially identifiable data in that regard would be ridiculous for website operators.
Maybe some light checks sure, but not as deep as it would be required to truly anonymize everything that a user could have written to identify them.
Alot of that information becomes fragments as soon as you unlink it from the user. e.g. 12 people in a post wrote "I am gay", great. But if you cant link that back to other comments of the same users somewhere else, its not identifiable, just text.

[–] [email protected] 10 points 1 year ago

Hetzner Storagebox is $3.5/M for 1TB

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago)

As far as i understood tailscale funnel its just a TCP-tunnel.
So you handle TLS on your own system, which makes sure tailscale cannot really interfere.

If you already trust them this far, might aswell do the same with a VPS and gain much more flexibility and independence (you can easily switch VPS provider, you cannot really switch tailscale funnel provider, you vendor-locked yourself in that regard)

I'd connect the VPS and your home system via VPN (you can probably also use tailscale for this) and then you can use a tcp-tunnel (e.g. haproxy), or straight up forward the whole traffic via firewall-rules (a bit more tricky, but more flexible.. though not that easy with tailscale.. probably best to use TCP-tunnel with PROXY-Protocol).
This way you can use all ports, all protocols, incoming and outgoing traffic with the IP-Address of the VPS.

Tailscale might even already have something that can configure this for you.. but i dont really know tailscale, so idk..

And as you terminate TLS on your home-system, traffic flowing through the VPS is always encrypted.

If you want to go overboard, you can block attackers on the server before it even hits your home-system (i think crowdsec can do it, the detector runs on your home-system and detects attacks and can issue bans which blocks the attacker on the VPS)

And yes, its a bit paranoid.. but its your choice.
My internet connection here isnt good enough to do major stuff like what i am doing (handling media, backups and other data) so i rent some dedicated machines (okay, i guess a bit more secure than a VPS, but in the end its not 100% in your control either)

view more: ‹ prev next ›