Don’t worry, you’re not arguing, because you literally stopped contributing anything relevant to the glasses about 2 comments ago.

There’s plenty of cases where the glasses save effort, I just listed a few off the top of my head. And clearly you agree since you said it’s “lazy” and “not worth it”, implying that yes, it does save effort. But since you never specified what downsides you are referencing when you say “not worth it”, your defense is meaningless

So you’re argument ends up being “It’s not worth it, obviously”. Unfortunately “it’s obvious” is not a valid argument, especially for a technology that is only just becoming viable. And if you are too lazy or incapable to present actual evidence just say so.

Nobody is saying its necessary for survival. Yes, we can go back to the 1800s and still survive. That doesn’t mean computers are bad. Whether or not it’s “worth it” remains to be seen, since these things were only just released

Fair enough. It’s a device small enough to keep on your body or close by, so physical security isn’t too big a worry I guess. Just be aware that if somebody does get access to it, they could just pop the microsd card out, write malware to unencrypted partitions, and extradite your sensitive documents once you unlock the LUKS partition. These are the kinds of “evil maid” attacks that secure boot and verified boot were meant to protect against, but unfortunately most SMBCs don’t have those capabilites (only ones I’m aware of that do, are RPi5 and most x86 SMBCS).

As for the firewall, could you use a VPN or tailscale to access your services? Then you could just point the DNS to your private IP. The services would be completely secure from the outside and you wouldn’t have to use a firewall.

But what if your hands are occupied, carrying shopping bags or eating a sandwich on the go? These things have legitimate use

Well I’m not trying to start a community around helping people, I’m just a participator. If I wanted to maximize the number of people I could help, I might move back to reddit

edit: a word

Hows the security? I’m guessing no encryption since it’s rather pointless without secure boot or verified boot.

You can ask the sunglasses for other options too

Those saying “just self-host Matrix/Stoat/XMPP”, do not understand the power of network effects. If people are too lazy to sign up on your custom server, and you end up with 50% of the users you would have gotten if you used Discord, is that worth it? What if it was only 10%?

I wish there were a solution to this. Interoperability sounds nice until you have multiple competing standards (like Matrix and XMPP)

Need a hotel and just wanna blindly trust your glasses?

What are your other options? Blindly trust google? Blindly trust random locals? Blindly trust every hotel receptionist trying to convince you to stay at their hotel?

At some point you have to trust something.

I should have clarified, but yes it’s the windows GPU drivers. Though even on Linux, it’s hard to know what the proprietary GPU drivers do, but from what I read they don’t collect telemetry by default. Luckily Nvidia is developing official open source drivers now so we won’t have to worry about these things.

Also note that for the Windows Nvidia drivers, it’s fairly annoying to disable all telemetry. It’s not just an option in the installer. You have to use unofficial third party tools.

It’s not just Windows tracking your web browsing history. GPU drivers do it too. Source: https://www.neowin.net/news/intel-windows-driver-to-now-collect-user-telemetry-data-like-website-categories-by-default/

Got it. Access to docker.sock is definitely something to be wary of, or CAP_ADMIN, or access to certain host devices.

Worth mentioning though that Jellyfin usually has none of these.

That is fairly cool, I didn’t know queries were local. Looks like I was worried over nothing

With that setup, an attacker could mount the host filesystem to the container and would own the host from that container.

Can you elaborate more on this? Assuming an attacker is in the Jellyfin container with full remote code execution, how could they mount the host filesystem?

Instead of caddy -> auth OIDC -> services, can you do auth OIDC -> caddy -> services? That way you can put the auth OIDC in the DMZ VM, while putting caddy in the other VM with all the services? Alternatively maybe caddy (DMZ) -> auth OIDC (DMZ) -> caddy (LAN) -> services (LAN)

If you can’t, you can always use firewalls on the services VM to prevent services from talking to each other. Preventing them from talking to the internet can be achieved by putting them in an “internal” network (if using docker compose, set “internal: true” when defining the network)

Fine, but others including myself want that slop as far away from here as possible

And there are people like me who are fine with moderate AI use and would rather judge the project themselves rather than have them rejected outright.

Maybe there should be a community poll

What I’m saying is that if you type “cat videos” in the search bar, it will immediately search the KDE Discover app store for relevant results, by default. It’s not searching the entire web but it’s still sending a request to the internet, one that can be tracked and shared (for example if you have Flathub enabled in KDE Discover, and Flathub happens to use Google analytics on their servers, then Google would know about everything you type in the search bar)

Linux does this too. GNOME and KDE both do web searches from the search menu by default (to be more precise they search the app store, which is on the web)

From 12:48 of the video:

Gamers Nexus: “Were you able to lock in contracts for memory with the suppliers directly or did you have to jump through a bunch of hoops or…”

Rep from Valve: “Look there’s no contract, there’s nothing. Those guys…they are…they give us a price every month, and they say ‘you can buy that many’, and it’s yes or no, and if we say no then they never talk to us again”.

Gamers Nexus also links another video they made specifically about the DRAM cartel.