https://lemmy.world/post/49736885

If you follow AI news at all as part of your self-hosting interests, you may have become aware recently that open AI (the frontier lab between behind chat GPT) has admitted (loosely) culpability in an cyber attack against HuggingFace (the major repository of open-weight models.)

The details that present are somewhat sketchy, but the gist of it is that open AI seems to have given unrestricted access to a AI agent, which then attacked hugging face, who in a twist of deliciousness, used an open source agent to defend themselves.

I’d joke and tell you to make sure that you haven’t left any open ports on your router, but if you’re here reading this I think probably you know better than that.

Less comically, there’s a weird intersection here between self-hosting, sovereignty and encroachment by big tech that is worth pay attention to.

It should certainly spur people on to seriously consider self-hosting as much of their infrastructure as they can (and securing it) if this is the preview of things to come.

Something is rotten in the state of Denmark.

I just wish I’d bought more SSDs.

  • TeaWithDani@lemmy.worldEnglish
    1·
    10 hours ago

    Prevent password logins where ever possible too, especially SSH. Use ed25519 keys. Perform server actions with least privilege users, prevent root logins. Immutable systems and containers are a helpful tool too.

    I also just host my public facing stuff on a VPS. DDOS protection and just otherwise isolated. 2FA on the VPS too.

    • nitrolife@hikki.teamEnglish
      1·
      8 hours ago

      Just don’t expose SSH to internet. It’s a complex protocol with many CVEs. And you realyy don’t need access to SSH from anywhere. Replace access from ineternet to a WireGuard tunnel that has almost zero attack surface area and properly configured iptables rules. And that’s it.