• 0 Posts
  • 21 Comments
Joined 3 years ago
cake
Cake day: June 19th, 2023

help-circle

  • You can load models for Frigate yourself, and the documentation tells you how to do it, but the recommended Frigate+ models are easier to use. For example, downloading and configuring YOLO-NAS becomes just copying and pasting a plus:// URL when you’re signed in to Frigate+.

    As another example, I would consider GitLab not to be free because GitLab is a for-profit company, the open source version of GitLab intentionally lacks features that would be particularly useful to business users, and you can pay GitLab to get those features in a special GitLab distribution distributed under difference licensing terms. If GitLab had a plugin model, and unaffiliated developers created paid plugins for those features, then I think GitLab itself could be considered free. But if paid plugins were developed by the same developers, would that make it not free again?

    More strange examples:

    • Redis, which relicensed to a non-Free license in 2024, but would have still been usable by most people who are self hosting. Redis is available under AGPL since 2025.
    • All Hashicorp software, such as Terraform and Vault, which relicensed to a non-Free license in 2023, but is still usable for most people who are self hosting.
    • Docker, which is only free on Linux since it relicensed in 2022. Docker Engine only runs on Linux, but the closed-source Docker Desktop runs Docker Engine in a Linux VM and wraps the API to make it almost seamless on Windows and Mac OS, and for that you may need to pay a subscription.

    I guess to me it seems like there’s this gray area where you start having to think about intention and whether the software is really intended to be usable for the purposes that people in this community will want to use it for without having to pay the person doing the promoting.


  • Are Home Assistant and Frigate exempted? Home Assistant is free and open source and you can self host it, but there is a built-in feature where you can pay a subscription to use Nabu Casa’s ingress server and cloud GPUs, and many of the integrations are only useful if you have paid money for some piece of hardware or have a subscription to a cloud service. Frigate is free and open source, but it has built-in support for specially packaged computer vision models that are offered for a fee that supports the project. I wouldn’t consider either application crippleware, but you can pay money to people who are affiliated with the project for a direct benefit that is related to the software.


  • What really doesn’t make sense from a customer perspective is that recently everywhere you go somebody is asking for a tip, but you’re only expected to tip:

    • Taxis but not busses or trains.
    • Restaurants but not fast food restaurants, and sometimes restaurants add a service fee that may or may not include the expected tip, especially if you are with a large group. Typically, you are expected to tip if you are assigned a seat, somebody takes your order while you are seated and brings your food to you, and you pay after you eat.
    • Food delivery but not any other kind of delivery.

    Examples of inappropriate places where a tip is sometimes requested but not expected:

    • When placing an online order from a warehouse.
    • When placing an order at a fast food restaurant.
    • When buying something that you picked up off a shelf yourself and carried to the checkout.










  • Setting the SSH service to a random high port doesn’t make security better and may make security worse. Linux has a restriction that low numbered ports require special permissions but high numbered ports do not. If an attacker manages to get low privilege code execution on your machine, they may manage to bind their service to the SSH port instead. If the server and client are configured correctly, this will cause a host key mismatch error. Continuing anyway could allow the attacker to take over your account on the server. It’s unlikely unless you are a high value target.





  • This problem has nothing to do with NPM. Checkmarx was compromised last month, and during that compromise there were malicious VS Code extensions published to Visual Studio Code Marketplace. A Bitwarden developer says that somebody ran one of those malicious extensions, and GitHub API keys were stolen which were used in publishing the malicious CLI package.

    It’s probably better that it happened on NPM. If the CLI were only downloadable from the Bitwarden website, it would have likely taken longer for somebody to notice something was wrong.