Yes, but:

Safety: for small stuff, really no safety concerns, and with the amount of recalls, not really any better.

Warrenty: when the price is half or less, easier to just buy 2.

So for larger more expensive items, local makes sense somewhat, but for small crap, better to just get from aliexpress.

Which is really annoying, because individually shipping every little trinket is crazy wasteful.

Annoyingly, in Aus, if you try to shop locally, youll find the stuff in Kmart et al. is all imported crap from aliexpress anyway. So you basically are paying a huge markup for the same garbage.

https://www.kmart.com.au/product/450ml-oil-spray-and-pour-bottle-43513765/

https://a.aliexpress.com/_mPwySZt

These are at least somewhat closely priced now, but the Kmart sprayer was double that price a few months back when I needed one. And its not just Kmart, every shop is the same, its all poor quality crap. So why not get the poor quality crap direct from the source at half the price, even with shipping. Its pretty fucked up.

The point of de-minimus (at least in Aus) is to ease the load on customs, so they don’t have to waste time and effort processing tax a few cents worth of tax on thousands of packages.

Getting rid of it will probably make the less reputable sellers (eBay) go back to marking everything as a gift.

Dumb question, but have you ruled out the cable being bad or corrosion in the socket? Dropping to 100 is usually something bad with the cable.

Nope, your uptime kuma speaks to it directly, and it basically acts as a signal client for you.

https://github.com/bbernhard/signal-cli-rest-api

Its very finicky to setup, but once you get it working its pretty good. Sometimes needs to be reauthenticated though.

Kuma notification settings:

Is lateral movement really a risk for you? Most internet malware is fully automated drive-by stuff. They hit you, gain execution and your part of their botnet. They don’t need to move laterally, because they have all the execution they need.

Moving laterally requires a human (or agent these days), which has a non-zero time and resource cost, so the only reason anyone is going to do that to you is if you are a very valuable target.

Do whatever you like for learning/fun, but I wouldn’t stress to much. Your risk level is probably very low.

NAS sits at 24w idle. Security cams are drawing 19w of poe power, but I suspect there is a bit more being used in total. I have another NUC using probably around 24w max.

I’ll slap some power meters on the switches and main nuc and try get some more accurate numbers.

Except that they are separated. The clean side (model + implementors) doesnt have the original source code. The dirty side is the training room, which does have original source.

The model that you download from huggingface is basically the notebook passed between the two rooms, and as far as im aware, the model doesnt have the actual training data in it, just enough statistics to “hallucinate” something close.

Uptime Kuma, only really care if it’s up or not. Got about 30 services monitored, sending notifications to Signal.

Thats not a difference. Other clean room projects, for example ReactOS, have source projects that are incompatibly licenced. Its the entire point of clean room reversing, to bypass copyright and licencing.

The training data is on the dirty room side, it doesnt get passed to the clean side.

The clean room concept is violated if raw source code is in the model generated, but to my knowledge its not. There is no way to pull out a chunk of the model, and say “This is a direct copy of main.c from xyz project”. At best, you can ask the LLM to guess what it should be, and it’ll regurgitate something statistically close. I just tried asking my local qwen3.8, and did produce a close summary of the nginx main file, but it wasn’t even close to a 1 to 1 copy.

The clean room would also be violated if you consider the training, model and inference as a singular entity, but that would be tough to argue when the inference can happen on one server, the resulting model isn’t functional in any way, its a big box of data, and the inference can happen on any GPU anywhere else in the world.

Clean room reversing is just laundering code, always has been.

Rewriting code into English/GGUF/Klingon/whatever, and then getting someone else to rewrite it back into code is just laundering it. Its been legally accepted for a while, and many projects we take for granted today started that way.

Whether this case is “clean” enough is up to the courts ultimately, but its laundering either way.

User process makes sense, but login shell is probably limited value. If your service gets pwn’d the attacker will spin up a reverse shell, and that isn’t protected by the login shell. You ideally want to use selinux/apparmor to prevent execution, or containers to limit the available execution environment.

Which European neighbours are actively trade-warring each other?

European countries aren’t openly antagonistic to their neighbours.

Chill out. They’ve release debs and rpms for years as well, is that EEE?

Don’t clouds mostly just rely on replication across zones though?

I would have thought tapes were just too slow to be useful in that environment.

I’ll read up on the IBM deep archive.

If they don’t, report them.

Does make you wonder who does use tape? Id assume big businesses just use cloud, so who is left that uses tape?

I didn’t look tbh, I just assumed it would be 1-2k. 8-10 is crazy.

Does kinda backup my point though :/