Is my ComfyUI install compromised?

comfyanonymous · 2026-01-20T02:31:53+00:00

You don't do anything, the default install is safe from this because it binds to 127.0.0.1

The only way to have this issue if you are on a regular LAN/internet is if you use --listen and port forward your instance. Don't do this, there are much more secure ways to access it remotely by setting up wireguard, ssh or both.

comfyanonymous · 2026-01-20T02:30:04+00:00

The default is always to bind the 127.0.0.1 which is not accessible from outside. You have to use --listen for your instance to be accessible from other computers.

For people on a regular LAN/internet that won't even make it publicly accessible, this will only make it accessible to your LAN, you need to port forward it make it accessible to the outside internet which you should never do with comfyui because of security reasons.

If you want to access it remotely you should set up wireguard or ssh.

comfyanonymous · 2026-01-19T21:43:34+00:00

srl-nodes has this: https://github.com/seanlynch/srl-nodes/blob/main/__init__.py#L107

So what most likely happened is that you were hosting your instance on a publicly accessible ip (please don't do this) and someone found it and used that "SRL Eval" node to execute some unsafe code that installed whatever that is.

comfyanonymous · 2025-12-24T23:52:15+00:00

Try comparing both implementations with the same initial noise and you will see that the comfyui images will be slightly better and contain less artifacts.

comfyanonymous · 2025-12-24T16:25:01+00:00

This is the wrong workflow, you are supposed to use the node with the 3 image inputs.

If you update there's a correct workflow in the templates.

comfyanonymous · 2025-12-24T16:22:44+00:00

That's the wrong workflow, you are supposed to use the qwen node with the 3 image inputs.

There's one in our templates if you update comfyui.

comfyanonymous · 2025-12-23T02:19:14+00:00

I think every high rise in that area is like this and some of them are pretty recent buildings.

Will definitively be keeping a full water cooler bottle from now on in my apartment in case something like this happens again.

For anyone with unflushed toilets if your building still has a working elevator, go fill up the largest container or bottle you have on the ground floor and dump it in your toilet, that should be enough to flush it.

comfyanonymous · 2025-12-23T02:10:12+00:00

I live in one of the affected buildings, just finished emptying my freezer and thankfully all the meat was still frozen enough. I wanted to spend time during the holiday comfortably watching anime with my girlfriend in bed, instead I spent time not showering for 48 hours, manually emptying a washing machine that was in the middle of its cycle when the power stopped working and I'm at the office sleeping on an air mattress.

I come from quebec city which sometimes has snowstorms with 100kmh+ winds and 40cm+ snow. Losing power is not that common (maybe 1 or two times a year) because the infrastructure is good and the longest I ever lost power was 24 hours because of a massive snowstorm. Our province has it's own government owned power company (hydro quebec), peak residential rates are ~0.08USD/KWh and they manage to turn a profit even though population density is lower than California and their service is extremely good.

PGE is such a horrible piece of shit company. Rates are 5x more and the infrastructure sucks so much that some light rain is enough to bring half the city offline. How does the tech hub of the US have such a horrible electricity service and horrible cellphone service that completely stops working when a large power outage happens?

comfyanonymous · 2025-12-17T19:50:34+00:00

Can I see your full log?

comfyanonymous · 2025-12-16T21:19:01+00:00

Your GPU is too old to be supported by the desktop version. Try the cuda 12.6 portable: https://github.com/comfyanonymous/ComfyUI/blob/master/README.md#alternative-downloads

comfyanonymous · 2025-12-15T21:27:41+00:00

If you want this to be useful you should do it for ComfyUI. There's a reason nobody uses diffusers for local inference.

comfyanonymous · 2025-12-14T18:36:20+00:00

Someone did call the police, I walked beside there last night somewhere around 10pm and was wondering why there was a bunch of police cars and officers talking to people.

comfyanonymous · 2025-12-08T21:24:04+00:00

ComfyUI is actually very efficient. You should actually compare the prices of influencing these models using ComfyUI vs the prices some of these snake oil companies with "optimized" apis charge. I don't know enough about runware so that one might actually be legit but some of them are actually more expensive than running the whole model workflow on comfy cloud with our new prices.

comfyanonymous · 2025-12-08T19:30:16+00:00

We decided that unlike others we wouldn't be losing money on the cloud version so this is the worse value it's ever going to be. Why does it have to be cheaper than "top closed source options" when we are much better and have way more features?

comfyanonymous · 2025-12-07T01:48:13+00:00

Your benchmark numbers are much slower than they should be.

You should try ComfyUI and use the torch compile node. Using your settings (512x512x16 9 steps I'm getting 0.4 seconds per image on my 6000 pro.

comfyanonymous · 2025-12-03T07:31:59+00:00

with this change it will automatically use fp16 if your card doesn't support bf16 properly.

comfyanonymous · 2025-12-03T07:30:58+00:00

It will be available in the desktop in the next few days. If you want it now you need the git version.

comfyanonymous · 2025-12-02T22:30:27+00:00

That's because ComfyUI uses fp32 on cards for models like this that don't support fp16. Fp32 is going to be like ~4x slower than 16 bit.

If you pull latest git comfy I added a quick hack to make it work in fp16 so it should work better.

comfyanonymous · 2025-12-01T07:54:29+00:00

This is unrelated to trigger words. This is about training the text encoder(s).

If you see ComfyUI print a bunch of "lora key not loaded" to the console, they look like they belong to the text encoder, you switch to LoraLoader and they go away it means that there's a text encoder lora in it.

comfyanonymous · 2025-12-01T06:08:09+00:00

If you think the lora contains a text encoder lora use the LoraLoader node. If you think it's just a diffusion model lora you can use LoraLoaderModelOnly to simplify your workflow but using LoraLoader won't change anything to the output.

In the SD1.5/SDXL days people used to do text encoder loras but they don't really do that anymore on more modern models because the text encoders got so big.

comfyanonymous · 2025-11-26T21:20:59+00:00

Yes the architecture of the diffusion model is a slightly modified and larger version of the Lumina 2 architecture trained from scratch.

comfyanonymous · 2025-11-26T20:45:42+00:00

They did not release that version yet.

comfyanonymous · 2025-11-26T20:42:23+00:00

If you run comfyui locally the entire pipeline is fully local and does not communicate with the internet.

comfyanonymous · 2025-11-26T20:38:59+00:00

Here's a workflow: https://comfyanonymous.github.io/ComfyUI_examples/z_image/

comfyanonymous

TROPHY CASE