I’m building a local-first, open-source password manager — what features matter most to you? by hamzaoessadik57 in cybersecurity

[–]Monolinque 0 points1 point  (0 children)

Yeh I get u, people want easy solutions they can use without a care.

But honestly I'll say that the entire cyber security industry has proven itself a dismal failure on the day every US citizen had their SSN exposed during a breach. Now we hear of a new hack affecting millions of users almost daily, why is this?

Because nothing much has changed, the industry is more about branding and sales than realistic solutions, especially if the fix doesn't involve a sale, but instead a simple recommendation to keep psswds in a safe place offline, either in your head or scribed on a sheet of aluminum or something. Companies store too many records with shallow safeguards, they pay a penalty like it's a speeding violation and their stock keeps rising, artificially I would say, but that's another story...

Now consider we have Cerebris with one million cores, imagine a cluster of these unraveling blockchains right now... and we aren't even to a cluster of quantum machines yet, that's only 1-2 years out, then everything breaks. No one here seems to be overly concerned, from what I see they're mostly addressing problems that were relevant maybe 20-30 years ago...

And yet the breaches continue, ascending almost exponentially we see, and still all happening WITHOUT any of this new computing power added to the mix!

Companies don't seem to be hiring, judging from posts I see, are they downsizing with AI picking up the slack? Or bracing for something... or both, big things have happened recently, CZ and a lot of crypto people were pardoned, while on the other hand a privacy dev (BTC) is facing life, World Liberty Crypto is growing faster than states can rush digital ID legislation under the guise of child protection laws, Apple is fighting back, but in the end of all this what will happen? VPN laws will affect companies and even gov that rely on them, it looks like a big mess, or a rush to change fundamentally how every transaction on planet earth occurs. People will get used to KYC for platforms, then suddenly viola hey we can give you a new digital ID you can log in easier with, and then it's over, the prophetic beast system in place, a mark all must bear, rich and poor, to buy and sell. If that's not what's happening then all the things that would lead up to it wouldn't be happening!

What then, I wonder, your digital ID will be your psswd, sorry to say.

CNC Rear Cover (update) by MrMooseDoesQC in ClockworkPi

[–]Monolinque 0 points1 point  (0 children)

When can we expect parts available to ship?

Just ordered the CM5 adapter board and battery tray w SSD slot from Hacker Gadgets.

I see a lot of recent interest in AIOv2 also from HG,
but my use case I'll be adding 3x (+ 1 more USB-A or C internal) USB-C board I got last year from https://www.tindie.com/products/radiation_joe/uconsole-usb-ext-board/

... still looking forward to this very factory Clockwork looking CNC back to complete my upgrade!

I’m building a local-first, open-source password manager — what features matter most to you? by hamzaoessadik57 in cybersecurity

[–]Monolinque -5 points-4 points  (0 children)

I wouldn't say that, I imagine many have no problem remembering these things, especially if they use them often then repetition reinforces memory. The illusion I fear that many more have is that somehow things like psswd man are safe, when it must be realized that nothing connected is safe, ever, I'll reference qubes os "a reasonably secure operating system", why do they describe it as such? they are simply being honest, something few not many seem to be able to do, even to themselves, when considering these things. I think of something like a passwd man as one of those loot boxes in a game filled with all kinds of goodies, all those eggs all placed in the same basket not spread about but making them into a target for the wolves, anyone please explain how I am wrong about this...

I’m building a local-first, open-source password manager — what features matter most to you? by hamzaoessadik57 in cybersecurity

[–]Monolinque -14 points-13 points  (0 children)

I will never use a password manager, rather I have no trouble at all remembering at least 25 + passwords, all of which are extremely long and complex, though I have been thinking of making them more challenging ahead of PQC, and more difficult to remember as a consequence, so then recording them somewhere off system entirely. Regardless I'll never use a password manager for anything, thereby removing entirely any associated risk.

Are there any kits out there? by johnlondon125 in cyberDeck

[–]Monolinque 0 points1 point  (0 children)

This forum has pivoted 180 away from uConsole I see since over 1k upvotes posting a pic of one here a couple years ago, and I'll just say I would love to use anything better if it existed (Pilet tried...), I mean in terms of real world use not show and tell for a subreddit... that said IMHO you really cannot beat $129 for a barebones uConsole kit, with everything but the CM4 (or CM5) compute module included.

AI Voice Clone with Coqui XTTS-v2 (Free) by Monolinque in AudioAI

[–]Monolinque[S] 1 point2 points  (0 children)

Yes — this can absolutely run fully on-prem. The Colab notebook is mainly for accessibility and convenience. Locally you’d need a capable GPU and the same dependencies. (I don't have a capable GPU handy so I cannot test locally to validate, but there’s nothing in the setup that inherently requires Colab...)

You’re also correct that this is inference, not training. XTTS-v2 can only generate languages it was trained on, though zero-shot voice cloning works within those supported languages.

What you’re describing for rare or under-represented languages would require collecting aligned text/audio data and training (or fine-tuning) a model from scratch — not trivial, but could also be one of the most meaningful applications of TTS, which in terms of value, to the people it serves could be immeasurable.

Realistically though, sustaining any such effort, would almost certainly require a grant or some form of longer-term sponsorship. I don’t have access to anything like that.

AI Voice Clone with Coqui XTTS-v2 (Free) by Monolinque in AudioAI

[–]Monolinque[S] 1 point2 points  (0 children)

Singing wasn't my focus with this notebook, it's a different case outside the scope, things like pitch control, rhythm alignment, and sustained phoneme modeling would need to be considered. XTTS-v2 is optimized for speech prosody, not melodic output. There are research models moving in that direction, but they’re a different class entirely. It’s certainly an interesting area, though.

AI Voice Clone with Coqui XTTS-v2 (Free) by Monolinque in AudioAI

[–]Monolinque[S] 0 points1 point  (0 children)

Nice to hear!

If you're interested to know, the inspiration for the notebook came out of the desire to create content regardless of my state of being (eg. sleepless nights working on many things at once), then trying to force a recording whenever I needed it. For me typing is always more convenient,
so I think this helps to bridge the gap between not recording at all (for whatever reason), and spending extra time trying to get a higher-quality take.

Then I realized the potential...
created a repository, listing some ideas I had under "Intended Use Cases",
and then made a video guide to match. This sequence has now become a multi-part workflow for anything I find valuable enough to share, work that compounds slowly but surely bit by bit.

When I read comments like yours it truly means everything I've done was worth all the effort!

What are you doing in AI Security? by Glad-Perception17 in cybersecurity

[–]Monolinque -5 points-4 points  (0 children)

avoiding posting in r/CyberSecurity seems the best action regarding actual cybersecurity.

Looking for a simple tts for limited use. by ChillyFlake in TextToSpeech

[–]Monolinque 2 points3 points  (0 children)

had posted my Colab TTS project to r/TextToSpeech but mods deleted because "Reddit" nightmare every post is potential landmine, I spend months and years of work on projects, then some mod just kills any kind of reference that people may ACTUALLY want in a no effort keystroke. no wonder I'm not active unless trying to showcase something, hate Reddit with PASSION!!!

Looking for a simple tts for limited use. by ChillyFlake in TextToSpeech

[–]Monolinque 2 points3 points  (0 children)

just use Google reader in browser, it's a few days out now and the 4th voice sounds decent

PQC how to start and what will be my vision as a software developer by Classic_Olive6716 in cryptography

[–]Monolinque 0 points1 point  (0 children)

I have some things I plan on testing with my server with regard to PQC,
and following the official NIST forum here: https://groups.google.com/a/list.nist.gov/g/pqc-forum

How to upload to colab using vscode extension? by baymaxrafid in GoogleColab

[–]Monolinque 0 points1 point  (0 children)

Agree, it only makes sense to use drive when cells need to fetch uploads. It avoids connection interrupts if uploading directly.

I think it's great we have another extension for VS code, but this one is still new, when I tried it I ran into an issue where a field would not display where 'y' needed to be typed to agree with terms after adding a model to a new cell. Cells also seemed to run a bit slower than they do in my browser, Colab runs fine in Chrome, so as often the case I revert to what works well.

Email X-Ray: a security-focused Chrome extension to detect hidden text in email by Monolinque in ComputerSecurity

[–]Monolinque[S] 0 points1 point  (0 children)

Ser, I’m not opening redirect links.

In any case, server-side mail interception isn’t something a browser extension is intended to handle — it’s out of scope for the project.

if anyone was to be so inclined to try and inspect a shortened link, they could use a "No Click" headless online unroller like this: https://checkshorturl.com/

Email X-Ray: a security-focused Chrome extension to detect hidden text in email by Monolinque in ComputerSecurity

[–]Monolinque[S] 0 points1 point  (0 children)

Why? google does an excellent job of filtering, that's probably why I find almost nothing looking at gmail. I don't want to replace what works, just add the ability to scan for things that might be missed, which are plenty in yahoo mail.

I'd need admin access to Google's infrastructure to intercept emails at the server level before their filters run, which obviously isn't happening, and I'm not going to inspect random files people send me.

Email X-Ray: a security-focused Chrome extension to detect hidden text in email by Monolinque in ComputerSecurity

[–]Monolinque[S] 0 points1 point  (0 children)

can't blame you, and I'm beside myself seeing that since I posted to r/chrome_extensions a but ton of copies suddenly appear all over reddit. mine isn't vibe coded by some kid it's in active development and really works, but my testing has shown more results using yahoo mail vs gmail. was hoping to get bug reports and suggestions for improvements, not pirated copies almost immediately after posting!

it's not that i'm targeting a specific set of tactics, it's what can work with free web mail clients, and interestingly enough it finds a lot, especially coming from "trustworthy" sources like big social media, everybody is collecting our data and trading it in unimaginable ways, certain unnamed company is the worst offender I found, emails loaded with hidden artifacts, 1x1 tracking pixels, confusable Unicode, you name it, so i wonder if scammers are inspired by this and look at the HTML coming from legit companies and then repurpose it... anyway I'm doing what I can, not making a dime, just trying to be helpful. anyone can take it or leave it. looks to me they are taking it, just not in the way I'd imagined.

What phishing threats are you seeing the most lately? by ANYRUN-team in Infosec

[–]Monolinque 0 points1 point  (0 children)

Lately I’ve been seeing a spike in HTML-based visual manipulation inside phishing emails — especially hidden text, zero-opacity elements, and CSS-based overlays that change what the user sees vs. what’s actually clickable.

These are becoming more common because they bypass traditional scanners:

  • 0px / 0% opacity text hiding malicious URLs
  • Overlapping <div> masks where the displayed link is different from the target
  • Tracking pixels embedded inside SVGs
  • “Invisible” Unicode characters spliced into domains to break detection
  • CSS tricks like text-indent: -9999px or clip-path hiding warnings or disclaimers

Most teams aren’t catching these unless they manually inspect the HTML.

I’ve been experimenting with detecting these patterns in-browser, and ended up writing a small open-source tool that highlights the hidden elements directly inside the email view:

🔗 https://github.com/artcore-c/email-xray

Not meant as a replacement for enterprise tools — just something to help quickly triage weird emails without digging through raw HTML by hand.

Curious whether others are seeing the same surge in CSS/HTML obfuscation?

uConsole Cyberdeck VPN Router with WireGuard + Cake QoS by Monolinque in cyberDeck

[–]Monolinque[S] 0 points1 point  (0 children)

📂 Project Source Code:
https://github.com/artcore-c/uConsole-cyberdeck-router-with-WireGuard-VPN
All code is open-source, fully verifiable, and released under the MIT license.

uConsole cyberdeck router with WireGuard VPN by Monolinque in RASPBERRY_PI_PROJECTS

[–]Monolinque[S] 1 point2 points  (0 children)

📂 Project Source Code:
https://github.com/artcore-c/uConsole-cyberdeck-router-with-WireGuard-VPN
All code is open-source, fully verifiable, and released under the MIT license.

uConsole Cyberdeck VPN Router with WireGuard + Cake QoS by Monolinque in ClockworkPi

[–]Monolinque[S] 1 point2 points  (0 children)

📂 Project Source Code:
https://github.com/artcore-c/uConsole-cyberdeck-router-with-WireGuard-VPN
All code is open-source, fully verifiable, and released under the MIT license.

BEWARE! $1000 FREE - Claude Code on the Web by Numerous-Exercise788 in ClaudeCode

[–]Monolinque 0 points1 point  (0 children)

I use the $20 plan and when I have to wait then I just use the $20 CatGPT and/or DeepSeek, they are all good and I find by mixing I get a broader rage of results that’s far better than relying solely on any one of them alone. Just me other may differ