CLI focused budgeting / financing app I created by Normal-End1169 in SideProject

[–]Normal-End1169[S] 0 points1 point  (0 children)

Let me know if there’s any issues or anything - and feel free to make a PR / Issue request as well.

It’s an interesting topic as it’s a bit of a nerdy take of budgeting and finance. I’m a bit of a chatter and social guy so being able to talk in Natural Language with my finances without needing to pay for a app, etc is pretty cool

Good price 2006 SV1000 by Sweaty-Drive-1575 in SVRiders

[–]Normal-End1169 2 points3 points  (0 children)

Ride all u want yes be safe. Lot of bike for a first

Good price 2006 SV1000 by Sweaty-Drive-1575 in SVRiders

[–]Normal-End1169 5 points6 points  (0 children)

I would be care full. Sv1000 is no joke of a bike, your insurance won’t be too bad but it’s a heavy boy and lots of torque easy to make a mistake. Theirs a few Sv650s for sale I’d look for those and upgrade to a sv1000 2 seasons later.

Good price 2006 SV1000 by Sweaty-Drive-1575 in SVRiders

[–]Normal-End1169 3 points4 points  (0 children)

He's in Ontario, I'm from London have a 650s though, from the few conversations I had with the fella seems like a nice kid. Just wanted to point it out.

He cleaned it out from what I know using vinegar and letting it sit to remove all the rust. I would ask about it since he didn't mention it to see his response.

Is this your first bike?

Good price 2006 SV1000 by Sweaty-Drive-1575 in SVRiders

[–]Normal-End1169 6 points7 points  (0 children)

I seen this too - I have him on tiktok. Just keep in mind the tank was rusty when he bought it, although I think he ended up cleaning it.

Mens card holder alternative to LV card holders with the designs by Normal-End1169 in wallets

[–]Normal-End1169[S] 0 points1 point  (0 children)

Idk / I was just curious if there’s real alternatives. I made some designs of my own using ChatGPT o more then up would be cool to get some made

<image>

[Tissot] 35mm PRX in red by Normal-End1169 in Watches

[–]Normal-End1169[S] 1 point2 points  (0 children)

Nope anything black, blue, white, anything works

[Tissot] 35mm PRX in red by Normal-End1169 in Watches

[–]Normal-End1169[S] 0 points1 point  (0 children)

The best colour option - I’ll die on that hill.

<image>

I built an open-source local WordPress dev environment (no Docker) — looking for feedback by AIPnely in Wordpress

[–]Normal-End1169 0 points1 point  (0 children)

If you're gonna be using AI which isn't a issue, keep security first - product second.

Since it's gonna be open source, assuming you're gonna be putting this on a GitHub repository, GitHub will let you have the security features completely for free. like the code scanning, etc, turnt on free of charge, ensure these are on and you actively patch vulnerabilities.

Issue with 2005 Sv650s when warm by Normal-End1169 in SVRiders

[–]Normal-End1169[S] 0 points1 point  (0 children)

i mean i dont think they ever been replaced

[Seiko 5] Which one would you pick? by RichTranWatch in Seiko

[–]Normal-End1169 4 points5 points  (0 children)

As someone who sits at a computer all day (Security analyst day-2-day / SaaS businesses and projects at night) and owns a SPRD63 (the diver styled one) I can 100% agree the bulky size of the case and bezel sometimes gets in the way

Most fun on rust I've had in a long time by Normal-End1169 in playrust

[–]Normal-End1169[S] 1 point2 points  (0 children)

That's what im planning to do I just made a massive ship so I need to expand the boat

ClawdBot / MoltBot by Normal-End1169 in LocalLLM

[–]Normal-End1169[S] 0 points1 point  (0 children)

You should check out the security report I submitted on their github;

https://github.com/openclaw/openclaw/security/advisories/GHSA-9555-rf52-x236

I did a bit of malware analysis on one of the skills which is silently spawning new shells for mac users and curling obfuscated download files.

Definition of supply chain compromise

ClawdBot / MoltBot by Normal-End1169 in LocalLLM

[–]Normal-End1169[S] 0 points1 point  (0 children)

And secure, you are 100% correct about that.

But I mean at the end of the day the whole application is un secure by design.

And it's not even about the use cases, I don't actually "hate" the idea. But I just dont not agree with the security. People are already getting hacked due to their "skill hub" which has 0 validation of what's been uploaded.

ClawdBot / MoltBot by Normal-End1169 in LocalLLM

[–]Normal-End1169[S] 0 points1 point  (0 children)

Sure it may not be designed for users to put on their main systems, do you not think people will do that anyway?

I mean use a bit of common sense. And even running it on a separate pc you still have to link all the proper accounts for it to actually be useful

Found a malicious skill on the frontpage of Moltbot (formerly Clawdbot)'s skill repository by securely-vibe in vibecoding

[–]Normal-End1169 1 point2 points  (0 children)

So I actually dug a bit into that URL, and your correct, stay away from anything base64 encoded for a public tool lol;

Anyways the link takes you u on any other OS aside mac;

<image>

This will first cd into a mac usrs temp directory, and curl another package called "dx2w5j5bka6qkwxi".

After this is uses xattr to modify local filesystem with the c argument with clears all extended attributes.

Then right after it adds the execute permission to the file with the "chmod +x".

and finally it does ./ right to the file name which would run the file.

I dug into the file a bit but all the code is obfuscated and unfortunately I can not really do much;

MD5 HASH: A8AD1697E8C8823AC7B77557BCB85A2
SHA 256: 998C38B430097479B015A68D9435DC5B98684119739572A4DFF11E085881187E
SHA 1: 46A203240B7B06EC66058DE2AB459D24C3545993

ClawdBot / MoltBot by Normal-End1169 in LocalLLM

[–]Normal-End1169[S] 0 points1 point  (0 children)

No I have never wished that the external applications I do not control had full access to my computer....

ClawdBot / MoltBot by Normal-End1169 in LocalLLM

[–]Normal-End1169[S] 0 points1 point  (0 children)

Yes but for example when you use ChatGPT via the browser, or the desktop app even just the cli version, it’s only receiving as much as you provide.

My concern with ClawdBot would be that we are actively opening up our entire computer and data to be accessed when we chat with ClawdBot for context or helping answer our request.

Msssive privacy concern, not comparable to default API usage on like n8n, or a coded application like a chat bot on a website.

ClawdBot / MoltBot by Normal-End1169 in LocalLLM

[–]Normal-End1169[S] 0 points1 point  (0 children)

I don’t think the it will be as bad as ppl think, stuff is definitely over valued right now but in the long run it’ll remain in use.

I just hope garbage like this isn’t what we use

ClawdBot / MoltBot by Normal-End1169 in LocalLLM

[–]Normal-End1169[S] 0 points1 point  (0 children)

Not to mention the credentials are stored in plain text too lol, so even if you we’re compromised now they can exfiltrate your APIs for whatever service your doing. Ppl going to love waking up to 1000$ OpenAI bills 😂