It seems like the most significant new feature is called anti-gravity which is kind of an allow list?
We’ve had white lists for a long time so I’m not exactly sure how this will impact the system. That being said I read through the release notes and there are a lot of changes and improvements throughout the system, so congrats to them team on the 6 release.
I’ve had pihole running on my home network for years and I love it.
Had one for a while. It’s ok but the places you can safely ride are more limited than you think. E-scooters are a far superior invention for mobility.
The TOTP changes every time. For modern totp hashing I’m not sure how many sequential codes a keylogger would need but I’m guessing more than I will ever enter.
Edit, asked ai for an answer to that because I was curious (maybe it’s right):
That being said, if an attacker were able to collect a large number of TOTP codes, they might be able to launch a brute-force attack to try to guess the private key. However, this would require an enormous amount of computational power and time.
To give you an idea of the scale, let’s consider the following:
Assume an attacker collects 1000 TOTP codes, each 6 digits long (a common length for TOTP codes).
Assume the private key is 128 bits long (a common length for cryptographic keys).
Assume the attacker uses a powerful computer that can perform 1 billion computations per second.
Using a brute-force attack, the attacker would need to try approximately 2^128 (3.4 x 10^38) possible private keys to guess the correct one. Even with a powerful computer, this would take an enormous amount of time - on the order of billions of years.
My bank uses a TOTP and they not only block paste, they also block all typing. Instead they popup a modal with a 0-9 digit keypand and the location of each number changes every time.
Effing obnoxious.
Bots don’t paste. If it a selenium related bot it would inject the value or type out each keypress.
It only causes real users pain
Hah, I installed Postiz just yesterday, interesting to see this thread. It’s like buffer or one of the other paid tools to schedule your social media posts and track engagement. Of course, of particular interest to our community, Postiz is self hosted.
It doesn’t have as many features yet as the major SaaS businesses, but the software is looking good and quite usable right now. I’m sure the more people who use it and support the developer, the more this tool can grow.
For example you can plug in your OpenAI API key and get an LLM chat interface inside the software while writing social posts. But I don’t think it learns your style or creates posts using any kind of system prompt yet unless you type it in each time.
Another thing I couldn’t figure out so far is how to limit which social media channels individual users can see. For example my business has several different units and there’s a different marketing team on each unit, so they shouldn’t be able to post into other channels.
If you’re in the business of needing to post regularly on a lot of channels I think postiz is worth checking out.
Training takes more resources.
Querying takes less resources.
I subscribe too. I’m an expat in a SE asian country where the subscription cost is a bit lower so, I do have that going for me. (~$5.50)
My consumption of YouTube is primarily through the official app on my Xbox. I also have a Pihole but it doesn’t work for YouTube.
This subscription lets me watch the creators I want to see, on the device I want, with the least amount of friction.
Really? I think a pretty healthy portion of the land above the 30th parallel until the Arctic circle looks something like this
I thought by now we’d have seen a fuckton of celebrity deepfake nudes and rule 34 porn of every variety, plus apps that let incels create it from pics of their high school crushes/enemies, but it seems like that tidal wave hasn’t hit yet.
Or perhaps the legal protections arrived just in time to discourage those with the know-how
Second this, Pihole is great and protects every device on your network too - mobile phones, smart TVs, tablets, Nintendo Switches, etc.
It’s wild how much telemetry is baked into stuff that you can just cut the nuts off of.
This. I had the same situation being put behind CGnat and told them my security webcam needs port forwarding from outside and they had me back to a public IP within minutes.
Haven’t checked in a while but is there any hope for cloud storage of the image library yet? I’m kind of holding out for S3 support because I don’t want to manage multiple terabytes locally.