that section 2.8 was removed https://blog.cloudflare.com/updated-tos/

new terms https://www.cloudflare.com/terms/

I believe that’s not in their terms for years now, at least in my untrained eyes

worth mentioning the old TOS banned video streaming across cloudflare products, but I don’t see a similar umbrella restriction in the current base terms, or in the terms of cloudflare zero trust.

also, make sure you have the rights to transmit the content and are not infringing anyone’s intellectual property rights, ofc 😇

something is wrong with my instance, I’m not getting any ads here

right, but remote code execution comes in many different ways. Having a machine vulnerable to this kind of privilege escalation is a really bad thing.

I use https://marp.app/

yeah, about twice a year I use the CLI to backup my vault, and I’ve never felt comfortable installing an npm package to handle my vault. Now I’m definitely sandboxing it in a rootless container without internet next time. And installing a week old version, or older.

reposting the tl;dr I wrote from another community…

Yesterday, for about 1h30min (starting at 5:57pm ET / 21:57 UTC) anyone installing the latest version of the command line interface of bitwarden was installing malware.

The malware steals GitHub/npm tokens, .ssh, .env, shell history, GitHub Actions and cloud secrets, then exfiltrates the data to private domains and as GitHub commits and doesn’t seem to be targeting Bitwarden specifically, or user vaults.

There’s no evidence that end user vault data was accessed or at risk, or that production data or production systems were compromised, according to their official statement.

It seems there were 334 bitwarden CLI downloads in this time period, some or many of which might have been from bots, so this is a higher bound to the number of affected users.

There’s no training, the LLM embeddings are used to compare the plots via a cosine similarity, then a simple weighted score with other data sources is used to rank the candidates. There’s no training, evaluation, or ground-truth, it’s just a simple tool to start using.

that’s pretty cool, this is just the wrong crowd, don’t worry about the downvotes

Aegis + syncthing for remote backups

ah yes, I stopped watching the guy because of that and the clickbait, but he does make some interesting content sometimes.

yeah, that’s what I’m looking for. Do you know of a way to integrate ollama with HA?

I don’t quite get what this is supposed to do. Is it basically a software to allow jellyfin/plex users to request media without needing a radarr/sonarr account?

that is fine, the only requirement AFAIK is the user being in the docker group in case you’re having permission issues running it as user

btw, the prices of managed runners are going down, not increasing

https://docs.github.com/en/billing/reference/actions-runner-pricing#standard-github-hosted-runners

still good to have a self-hosted alternative though

fwiw, you can self host a GitHub actions runner

I’m the only user of my setup, but I configure docker compose stacks, use configs as bind mounts, and track everything in a git repo synchronized every now and then.

I think you need something like restic with a retention policy

https://restic.readthedocs.io/en/stable/060_forget.html#removing-snapshots-according-to-a-policy

--keep-{hourly,daily,weekly,monthly,yearly}

other solutions that implement similar policies are kopia and rustic

the advantage of using an off the shelf solution is that it’s almost certainly more reliable than what anyone can come up with in a few hours, and, it works with incremental backups, so your space requirements are drastically reduced depending how often you run it.

deleted by creator