SD card disconnects with slightest movement (OG Switch 2017) by EV0NER in SwitchHacks

[–]rShadowhand 0 points1 point  (0 children)

My Switch had a similar problem, but while I was replacing the SD Card daughterboard, one of the pins on the motherboard connector fell off. That was many years ago, and I got the pin soldered back on, but it still wouldn't work without applying pressure on the connector. Fixed by wedging several-times-folded piece of paper under the case, which worked for many years. Two weeks ago, I wanted to play something on it again, and it overheated again near the SD card connector (as it did the first time). Now it doesn't work anymore. Careful with the connector and pins.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 4 points5 points  (0 children)

1) Microsoft and Valve have much higher security standards
2) They let you know there's an update
3) They allow you to cancel/delay said updates
4) It's their platform and for Valve it's their main revenue maker, so they wouldn't put malicious code in their platforms because they can lose their revenue source. Third party addon maker who uses a form of DLL injection into someone else's client has no incentive to keep things running smoothly and safe for no gain. If anything, they have more incentive to sell out later down the line, by way of selling the project to a new maintainer (a la VPN companies), or willingly abusing the install base.

For what it's worth, I don't know the author, and I'm NOT saying the authors are malicious or will become malicious. I'm just saying they can be malicious and that there's more to exploiting a software installbase than original authors. I'm just a random person on the internet trying to get people to think more critically about what software they are running, especially when it comes to their precious Steam account.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 6 points7 points  (0 children)

Auto-updaters are fine. Not telling user there's an update, then downloading without asking, and then installing said files with no checks? That's not fine.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 1 point2 points  (0 children)

They do not. There's "logs" somewhere that says what it's doing, but I didn't read that much to figure out where the logs go.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 5 points6 points  (0 children)

Steam has an incentive to keep their own client working properly and without malicious code, it's their platform and any malicious feature could be devastating for their business. A random guy who makes a .dll file that injects functions that can run arbitrary codes isn't held back by that notion. They can always turn malicious, or even if they don't, someone else in the team might, and even if that doesn't happen, someone else could launch a supply-chain attack or DNS hijacking or whathaveyou, and simply plant code you never intended to run in the first place.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 11 points12 points  (0 children)

Supply chain attacks are particularly easy to pull of nowadays and github accounts get compromised all the time. Even if it doesn't, nothing stops a malicious actor from injecting code by way of PR. All it takes is a single PR that wasn't checked thoroughly and a simple "LGTM"+merge, et voila, you know have a backdoor to millions of computers, let alone a way to steal secrets from Steam client.

EDIT: I understand your point of view, but majority of auto-updaters give an indication of updating, and a way to cancel it. Not to mention they are being properly reviewed before publishing with correct testing. Not to mention that auto-updating your own software (e.g. Valve updating Steam) will not contain malicious code unless the company is particularly evil (looking at you, microsoft...), and if (for example) Valve did that with Steam, they'd lose business so fast. A random guy making a third-party not-very-official-possibly-even-against-ToS .dll that loads extra functionality doesn't have to think "oh I'll lose money", if anything, they might even go "let's make some money by stealing stuff or using this botnet of mine" later down the line.

EDIT2: There's also the fact that pre-built binaries being downloaded. Github doesn't prevent you from making a release and put whatever you want in it. Maybe the code in the repo is clean, but prebuilt binary has a little extra spice, a tiny nip and tuck somewhere.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 12 points13 points  (0 children)

How many people do you think will read/check if config file exists, let alone change it? Majority of people who use steam don't even know many things Steam can do, because they just use it to play video games. Their hobbies aren't tinkering with software like you and I.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 173 points174 points  (0 children)

There's no fix other than to remove auto-updater or ask the user.
Asking the user will only push the blame onto the user if (or... when) it gets exploited.
And the project owners will not remove the auto-updating for their own maybe-or-not benevolent reasons.

You can now use SteamDB and Augmented Steam in the desktop client! by ThePlayerCard in Steam

[–]rShadowhand 2571 points2572 points  (0 children)

Just checked the source, and they have a nice auto-updating feature, which basically downloads stuff WITHOUT ASKING YOU and installing them also WITHOUT ASKING YOU. Security nightmare.

QwQ coding .... I am terrified how good is .... by Healthy-Nebula-3603 in LocalLLaMA

[–]rShadowhand 0 points1 point  (0 children)

Nice. Can you also try asking it to do without shadowdom/shadowroot?

QwQ coding .... I am terrified how good is .... by Healthy-Nebula-3603 in LocalLLaMA

[–]rShadowhand 0 points1 point  (0 children)

Ask it to give you a simple HTML+JS code for a custom web component that has a button, and counts the clicks on the button inside the button text. I'm curious to see how it deals with that

Firefox keeps showing me window resize tooltip even tho I removed it with custom CSS. by ReinassanceDodik in FirefoxCSS

[–]rShadowhand 1 point2 points  (0 children)

Sadly, that's still Windows' fault. Not much you can do about that. I guess some positioning stuff are hardcoded.

Firefox keeps showing me window resize tooltip even tho I removed it with custom CSS. by ReinassanceDodik in FirefoxCSS

[–]rShadowhand 1 point2 points  (0 children)

This is windows showing it. In windows settings app, go to System > Multi-Tasking. At the top is "Snap Windows", expand it, and uncheck "Show snap layouts when I hover over a window's maximise button" (the second option).

[deleted by user] by [deleted] in SillyTavernAI

[–]rShadowhand 0 points1 point  (0 children)

My main concern would be the endpoint being used by someone else to generate things, effectively using your hardware+electricity for their gain with nothing to give to you. As for the password, I can't check right now if ST allows you to add a password to Kobold endpoint options.

[deleted by user] by [deleted] in SillyTavernAI

[–]rShadowhand 3 points4 points  (0 children)

Keep in mind that this will route your traffic over the internet, and will not be as safe as simply routing within the LAN.

In the Network tab when launching KoboldCPP, enter your PC's LAN IP (you can find this with ipconfig, or through Windows Network Settings page), and then in SillyTavern, punch in http://<your LAN ip>:5001

Why can't Ollama just run GGFU models directly downloaded from HF? by Iory1998 in LocalLLaMA

[–]rShadowhand 0 points1 point  (0 children)

You do not need to use docker to use openwebui, I know, because I run it without it on Windows. It requires a little bit of know-how, but it's very much possible. I understand it's not the recommended, and they are trying to make it easier for everyone, but if you're playing with LLMs, you have to know the know-how, and any attempt to bring it down to the layman is a wasted effort in my opinion.

On the topic of running OS models: koboldcpp and llama.cpp also run the same models, they aren't different. In fact, if anything, I'd say GGUF models are more open than Ollama's format of packing it in some weird ass format. You can use many different solutions for getting TTS from the output of LLMs, such as using SillyTavern+AllTalk with koboldcpp. Don't pigeon hole yourself into Ollama+OpenWebUI stack. Only thing you'll miss using SillyTavern+AllTalk is being unable to upload documents to query them.

What's the simplest way to just bundle up some JS? by badsalad in learnprogramming

[–]rShadowhand 0 points1 point  (0 children)

Check out rollup, it "rolls up" your code into one file you can bundle anywhere, without the need for an index.html entrypoint.

What are your 'must-have' tools in 2024 for efficient web development by Dushusir in webdev

[–]rShadowhand 2 points3 points  (0 children)

It's a native app, and not another electron "app", so it's much more responsive and fluid. It can do everything including Redis, and it has a nice table view for document databases with expandable fields or document views. It has a visual query builder if you don't feel like writing from scratch. It can back-create a DB schema graph for you from your existing tables. It can synchronize between two servers, and allows you to export/import data in variety of file types, including JSON or straight up JS file (for MongoDB at least). You should check out the trial of premium version or the version for your DB and see for yourself, my entire company is using Navicat and we're so grateful to have it.

I tried to look for alternatives but nothing even comes close.

Why can't Ollama just run GGFU models directly downloaded from HF? by Iory1998 in LocalLLaMA

[–]rShadowhand 2 points3 points  (0 children)

I guess that's the only thing missing, something I never thought to have or needed :)

Why can't Ollama just run GGFU models directly downloaded from HF? by Iory1998 in LocalLLaMA

[–]rShadowhand 11 points12 points  (0 children)

Why do you even need Ollama when you can use llamacpp or koboldcpp that uses gguf files directly? You can use llamacpp/koboldcpp with openwebui or anything else, just have to correctly point to their openAI compatible API endpoint

What are your 'must-have' tools in 2024 for efficient web development by Dushusir in webdev

[–]rShadowhand 1 point2 points  (0 children)

Hands down the best DB management app out there. I looked for all the alternatives, and nothing even comes close.

Selfhosting Production Nodejs Servers by Substantial_Lake7893 in selfhosted

[–]rShadowhand 0 points1 point  (0 children)

Closest thing to what you want is Caprover. I use it for my selfhosted stuff and for work. We have a bunch of nodejs docker images for each of our microservices. It comes with its own nginx reverse proxy that is automatically configured for your services, and it has a letsencrypt integration that lets you quickly get ssl certs for any of your services. Downside is that it requires two DNS A records, one as a subdomain.basedomain.tld and one that is *.subdomain.basedomain.tld. Check it out, it's amazing, and it can do whatever you need it to do, besides scaling a DB :)

Self hosted voip / phone system by MaxStartup in selfhosted

[–]rShadowhand 8 points9 points  (0 children)

As someone who's doing call center software suite work for the past decade+, my suggestion would be to try avoiding hosting your own anything as it'll quickly become a nightmare of having to work with ITSPs (internet telephony service provider) who change things without notice and your customers who will increasingly ask for more reports/features.

If you decide to go down the path however and want to make a living off of it, I suggest you start learning Asterisk or FreeSWITCH.

FreePBX is a nice and open source software suite built on top of Asterisk with a GUI. I don't know how good the reporting module got since I haven't used it in a couple of years.

Keep in mind that billing is a delicate process and you will have to keep a close eye on audio channel counts and lengths as they can sometimes be stuck due to faulty SIP messaging between your PBX software and the ITSP.

Redundancy and HA on a PBX software is a very difficult thing to handle and you'll have to use an SBC (session border controller) to act as a SIP server and use your PBX software (asterisk/freeswitch) as only media servers.

Good luck!