56
Deleted (aussie.zone)
submitted 3 months ago by to c/selfhosted@lemmy.world
25 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 3 months ago (10 children)

What does self hosting look like in a world full of malicious AI agents?

I’m thinking of this post/thread from Veronica explains, where she explains that her hosted services are accessible only locally because tbe security headache isn’t worth it: https://explains.social/@veronica/statuses/01KWJCGV27JVBHP21E2JNWDBFH

As someone who doesn’t self-host but could and would want to, the state of AI has basically scared me off.

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] 7 points 3 months ago

    This is a big reason I only remotely access my services via TailScale / Wireguard.

    Even if my highly restricted ISP let me open anything, I wouldn't dare. I know for certain I don't know as much as who/whatever is hunting for open ports out there. I have zero interest in instantly being assimilated into some botnet lol.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 6 points 3 months ago (5 children)

    yeah - i am now thinking i want to move away from anything that leaves me exposed. i have a few services that are nice to be able to access remotely, but it’s time to reconsider how much i actually NEED to access those services.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 7 points 3 months ago (4 children)

    Consider only exposing a VPN service, like Wireguard.

    Then when you are away from home, it's one tap / click to be back on your LAN again.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 3 months ago (3 children)

    You don't even need to lift a finger. I use WG Tunnel, which turns on my VPN as soon as I leave my WiFi. I'm always tunneled or home.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 3 months ago* (2 children)

    some kind of wireguard proxy would be nice though to not expose my home IP address wherever I go (guest wifi networks)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [+] [S] 10 points 3 months ago* (last edited 3 months ago) (2 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 months ago

    Yup. It's how i've been running for years. The only thing that presents outside the house is port 80 on the apache server (despite having some incredibly intricate home automation)

    Mind you, i'm also old enough to have spent my formative years without even the concept of "available everywhere". Lotta peeps nowadays have not, and the idea of no internet / no access is genuinely terrifying to them

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 3 months ago

    Yea, this “data at the edge” approach, not “on the wire” Is interesting to me and makes sense.

    Basically regressing on the convenience/power of the internet because it just isn’t safe and easy anymore and for anything personal that isn’t a server -> many users, yoi basically ain’t gonna need it.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 3 months ago

    I host several services accessible via the open Web. They are isolated enough that a breach would most likely only compromise that service. They are also kept up to date, and logs are monitored.

    There's always a risk when exposing something, and I am limiting some services to access via VPN because either the data in them is too sensitive, or I don't trust them to be secure enough.

    You probably also aren't a worthwhile target in most cases.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (-1 replies)