• 0 Posts
  • 101 Comments
Joined 2 years ago
cake
Cake day: October 4th, 2023

help-circle


  • I’m not familiar enough with Cloudflare’s error messages — or deployment with Cloudflare — to know what exact behavior that corresponds to, but I’d guess that most likely it can open a TCP connection to port 443 on what it thinks is your server, but it’s not getting HTTPS on that port or your server isn’t configured to serve up the right certificate for that hostname or the web server software running on it is otherwise broken. Might be some sort of intervening firewall.

    I don’t know where your actual server is, may not even be accessible to me. But if you have a Linux machine that can talk to it directly – including, perhaps, the server itself – you should be able to see what certificate it’s handing back via:

    $ openssl s_client -showcerts -servername akaris.space IP-address-of-actual-server:443
    

    That’ll try to establish a TLS connection, will send the specified server name so that if you’re using vhosting on the server, it knows which site to return, and then will tell you what certificate the web server used. Would probably be my first diagnostic step if I thought that there was a problem with the TLS handshake on a machine I was running.

    That might provide enough information to you to let you resolve the issue yourself.

    Beyond that, trying to provide much more information probably isn’t possible without more information about how your server is set up and what actually is working. You can censor IP addresses if you want to keep that private.



  • I’d also add that ASCII has had some similar issues in the part, but that tends to have been ironed out by now via changes to onscreen typefaces.

    For example, some old typewriters don’t have a “0” key or a “1” key because capital-o and lowercase-l looked similar enough and context was sufficient to let them be used in place of the corresponding number. This trained some people to do that, to the point that various software adapted to permit misuse of one in the place of the other. To this day, I can open up Firefox, and the following webpage will render green text:

    <html><font color="#OOFFOO">green text
    </font></html>
    

    Some other fixes were were made over time, like making capital-i, lowercase-l, and the pipe (“I”, “l”, and “|”) as more-visually-distinct characters in typefaces where this matters.

    In the monospaced font world, “programming” or “coding” fonts, where not confusing the character in question is particularly important, place a premium on keeping characters like this particularly distinctive, even at the cost of trading off some aesthetic appeal or conforming to traditional typography or handwriting-like conventions for letters. You’ll get more-distinctive “.” and “,”, “O” and “0”, “l”, “I”, and “|”, “j” and “i”, etc.



  • I’m sorry, you are correct. The syntax and interface mirrors docker, and one can run ollama in Docker, so I’d thought that it was a thin wrapper around Docker, but I just went to check, and you are right — it’s not running in Docker by default. Sorry, folks! Guess now I’ve got one more thing to look into getting inside a container myself.


  • tal@lemmy.todaytoSelfhosted@lemmy.worldI've just created c/Ollama!
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    20 days ago

    While I don’t think that llama.cpp is specifically a special risk, I think that running generative AI software in a container is probably a good idea. It’s a rapidly-moving field with a lot of people contributing a lot of code that very quickly gets run on a lot of systems by a lot of people. There’s been malware that’s shown up in extensions for (for example) ComfyUI. And the software really doesn’t need to poke around at outside data.

    Also, because the software has to touch the GPU, it needs a certain amount of outside access. Containerizing that takes some extra effort.

    https://old.reddit.com/r/comfyui/comments/1hjnf8s/psa_please_secure_your_comfyui_instance/

    ComfyUI users has been hit time and time again with malware from custom nodes or their dependencies. If you’re just using the vanilla nodes, or nodes you’ve personally developed yourself or vet yourself every update, then you’re fine. But you’re probably using custom nodes. They’re the great thing about ComfyUI, but also its great security weakness.

    Half a year ago the LLMVISION node was found to contain an info stealer. Just this month the ultralytics library, used in custom nodes like the Impact nodes, was compromised, and a cryptominer was shipped to thousands of users.

    Granted, the developers have been doing their best to try to help all involved by spreading awareness of the malware and by setting up an automated scanner to inform users if they’ve been affected, but what’s better than knowing how to get rid of the malware is not getting the malware at all. ’

    Why Containerization is a solution

    So what can you do to secure ComfyUI, which has a main selling point of being able to use nodes with arbitrary code in them? I propose a band-aid solution that, I think, isn’t horribly difficult to implement that significantly reduces your attack surface for malicious nodes or their dependencies: containerization.

    Ollama means sticking llama.cpp in a Docker container, and that is, I think, a positive thing.

    If there were a close analog to ollama, like some software package that could take a given LLM model and run in podman or Docker or something, I think that that’d be great. But I think that putting the software in a container is probably a good move relative to running it uncontainerized.




  • 1986 – The Mindbender derails and kills three riders at the Fantasyland (known today as Galaxyland) indoor amusement park at West Edmonton Mall in Edmonton, Alberta.[10]

    Huh.

    https://en.wikipedia.org/wiki/Mindbender_(Galaxyland)

    On January 30, 2023, the mall decommissioned and closed the Mindbender after 37 years of service, in order to redevelop its space for new developments in the park.[4] Its trains were reused for All American Triple Loop, at Indiana Beach, United States.

    https://en.wikipedia.org/wiki/All_American_Triple_Loop

    All American Triple Loop (formerly Montaña Infinitum [“Infinity Mountain”] (2007–2014), Montaña Triple Loop [“Triple Loop Mountain”] (2014–2016) and Quimera[1] [“Chimera”][2] (2017–2019)) is a steel roller coaster at Indiana Beach in Monticello, Indiana.

    Manufactured by Anton Schwarzkopf, it was originally purchased by showman Rudolf Barth in 1984 who operated it as Dreier Looping for 12 years on the German fair circuit.

    After this, it was the main attraction in three major theme parks: first spending 2 years in Sunway Lagoon as Triple Loop Coaster, next, it spent 5 years in Flamingo Land resort as Magnum Force, and finally at its third and most recent location at La Feria Chapultepec Mágico, as Montaña Triple Loop. In 2017 it was renamed Quimera. In 2024, it opened at Indiana Beach as All American Triple Loop.

    I feel like a secondhand German roller coaster that went from Germany to Malaysia to England to Mexico now running secondhand Canadian trains arguably isn’t best named the “All American Triple Loop”.


  • tal@lemmy.todaytoSelfhosted@lemmy.worldOpen Source Paid Remote Desktop
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    4
    ·
    edit-2
    1 month ago

    The last time I used a commercial VPS, I’m pretty sure it used VNC to provide console access.

    The VNC software I linked to above appears to support TLS. If TLS isn’t sufficient transport security, then most Internet-using software is going to be in trouble.

    I’m not sure what you mean by subjective.

    I haven’t looked at the VNC protocol for a while, but I don’t think that it imposes any terrible inefficiencies. A couple of decades back, I needed to implement something quick-and-dirty similar to VNC, and went with rendering window contents and handling dragging of windows locally, which I don’t believe that VNC can do (or didn’t then) but IIRC VNC has a tile cache, which, if intelligently used, should avoid most traffic. Dunno if it can deal well with efficiently rendering visual effects.




  • I think in the US (and english speaking parts of Canada) they have a weird conception that “North America” doesn’t include “Central America”.

    I’m in the US, and that’s certainly not how the US classifies things.

    Some countries, like Spain, use a continent model with fewer continents, where there is no North America or South America, just one very large continent, “America”.

    https://en.wikipedia.org/wiki/Continent#Number

    • The seven-continent model is taught in most English-speaking countries, including Australia,[43] Canada, the United Kingdom,[44] and the United States, and also in Bangladesh, China, India, Indonesia, Pakistan, the Philippines, Sri Lanka, Suriname, parts of Europe and Africa.
    • The six-continent combined-Eurasia model is mostly used in Russia and some parts of Eastern Europe.[45][46]
    • The six-continent combined-America model is taught in Greece and many Romance-speaking countries—including Latin America.[37]

    I’d guess that they might not be familiar with where the division occurs.



  • You’re mostly drinking water that has, at some point, passed through a dinosaur!

    https://what-if.xkcd.com/74/

    Dinosaurs, as a taxonomic group, have been around[10] for 230 million years, but their heyday was the mid-to-late Jurassic period. In this period, there were probably around 5 trillion kilograms of dinosaur alive at any given time.[11] (Today, there are probably only a few hundred billion kilograms of living dinosaur,[12] 50 billion of it chicken).

    If we assume Jurassic dinosaur water requirements were similar to mammal ones,[13] then this suggests dinosaurs drank something like 1022 or 1023 liters of water during the Mesozoic era—more than the total volume of the oceans (1021 liters).

    The average “residence time” of water in the oceans—the amount of time a water molecule spends there before moving into another part of the water cycle—is about 3,000 years,[14] and no part of the water cycle traps water for more than a few hundred thousand years. This means we can assume that, over timescales of millions of years, Earth’s water is thoroughly mixed—and dinosaurs had plenty of time to drink it all many times over.

    This means that while the chances are that most of the water in your soda has never been in another soda, almost all of it has been drunk by at least one dinosaur.




  • Sure. I’ll add one guess that I’ve had for a long time as to one substantial factor in what helped start things get going in Europe relative to East Asia: moveable type. That drastically brought down the cost of written works, which acted as an enabler for subsequent social and technological changes, and happened towards the beginning of that “early divergence” period.

    Why didn’t it take off in East Asia?

    East Asia had had block printing, even moveable type, for a long time before Europe. However, it did not use alphabetic systems of writing, and if you have thousands of logograms, the kind of practical “I have a small number of bins of identical characters” thing doesn’t work nearly as well.

    https://ca.pbslearningmedia.org/resource/moveable-type-story-of-china/moveable-type-story-of-china/

    The Chinese first invented movable type during the Song Dynasty, but the complexity of the Chinese language made it cumbersome and not cost efficient.

    https://en.wikipedia.org/wiki/Movable_type

    A potential solution to the linguistic and cultural bottleneck that held back movable type in Korea for 200 years appeared in the early 15th century—a generation before Gutenberg would begin working on his own movable-type invention in Europe—when Sejong the Great devised a simplified alphabet of 24 characters (hangul) for use by the common people, which could have made the typecasting and compositing process more feasible. But Korea’s cultural elite, “appalled at the idea of losing hanja, the badge of their elitism”, stifled the adoption of the new alphabet.[20]

    https://en.wikipedia.org/wiki/History_of_printing_in_East_Asia

    A particular difficulty posed the logistical problems of handling the several thousand logographs whose command is required for full literacy in the Chinese language. It was faster to carve one woodblock per page than to composite a page from so many different types.[citation needed] However, if one was to use movable type for multitudes of the same document, the speed of printing would be relatively quicker.[20][better source needed]

    Despite the appeal of moveable type, however, craftsmen soon decided that the semi-cursive and cursive script style of Japanese writings was better reproduced using woodblocks. By 1640 woodblocks were once again used for nearly all purposes.[67] After the 1640s, movable type printing declined, and books were mass-produced by conventional woodblock printing during most of the Edo period. It was after the 1870s, during the Meiji period, when Japan opened the country to the West and began to modernize, that this technique was used again

    https://en.wikipedia.org/wiki/Printing_press#Gutenberg.27s_press

    The invention of mechanical movable type printing led to a huge increase of printing activities across Europe within only a few decades. From a single print shop in Mainz, Germany, printing had spread to no less than around 270 cities in Central, Western and Eastern Europe by the end of the 15th century.[52] As early as 1480, there were printers active in 110 different places in Germany, Italy, France, Spain, the Netherlands, Belgium, Switzerland, England, Bohemia and Poland.[5] From that time on, it is assumed that “the printed book was in universal use in Europe”.[5]

    https://www.taiwan-panorama.com/Articles/Details?Guid=09433229-1971-44c8-a7fe-0193be415fbc&langId=3&CatId=11

    In the 1970s, major newspapers in Europe and North America steadily entered the era of computer set printing, which was a great blow to traditional moveable type. Computer printing makes for faster entry, convenient editing and amending, and cleanliness, and saves manpower to boot.

    So that would have been a technological window running from in the 1400s to something like the 1970s where it was cheaper to do production of written works in (alphabet-based) European languages than in (logogram-based) major East Asian languages.

    EDIT: On another interesting note, the Soviets tried to promote an alphabet-based writing system for Chinese some time back.

    https://en.wikipedia.org/wiki/Romanization_of_Chinese

    Work towards designing Latinxua Sin Wenz began in Moscow as early as 1928, when the Soviet Scientific Research Institute on China sought to create a means through which the large Chinese population living in the Far East of the Soviet Union could be made literate, facilitating their further education.

    From the very outset, it was intended that the Latinxua Sin Wenz system, once established, would supersede the Chinese characters.[16] The Latin alphabet was chosen over the Cyrillic alphabet because the former was thought to better serve their purposes

    For a time, the system was very important in spreading literacy in northern China, and more than 300 publications, totaling 500,000 issues, were printed in Latinxua Sin Wenz.[16] Ultimately, promotion of the system ceased, because of its proposed target of superseding logographic Chinese characters altogether, which was deemed too radical:

    In 1944 the latinization movement was officially curtailed in the communist-controlled areas [of China] on the pretext that there were insufficient trained cadres capable of teaching the system. It is more likely that, as the communists prepared to take power in a much wider territory, they had second thoughts about the rhetoric that surrounded the latinization movement; in order to obtain the maximum popular support, they withdrew support from a movement that deeply offended many supporters of the traditional writing system.[21]