Selfhosted

60210 readers

1035 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

This Looks kinda cool, but does anyone have any experience at vetting a project like this? (github.com)

submitted 5 months ago by fleem@piefed.zeromedia.vip to c/selfhosted@lemmy.world

27 comments fedilink hide all child comments

Ive been looking for something to help the navidrome server do its thing, and this looks awesome, but there is one issue that was just opened and closed yesterday, it looks a little sus?

how does one go about digging through and discovering if this is malicious or not?

you are viewing a single comment's thread
view the rest of the comments

[–] i_stole_ur_taco@lemmy.ca 2 points 5 months ago (1 children)

Ok, so I ran the repo through an LLM to look for any suspicious requests, and it came back clean.

But it’s hella suspicious that the repo owner edited away the issue and closed it without a response.

It’s also hella suspicious that the user that reported that issue created their account yesterday.

I think I need to go the nuclear option: pop a gummy and monitor the network traffic of the container and see what it’s doing.

[–] fleem@piefed.zeromedia.vip 5 points 5 months ago (1 children)

o7 godspeed! i appreciate you your effort. the spirit of this project does sound so cool so i was a little heartbroken.

enjoy the edible!

[–] i_stole_ur_taco@lemmy.ca 1 points 5 months ago

Well that was fun! I'm confident this project isn't malicious. It's for sure coded using AI, and I think that's what triggered a smear campaign. This removed Reddit post looks like there is just a downvote brigade out to get the project because the author admitted to using AI.

The only network traffic it's made when I monitored it was local. Certainly nothing went to Asia.

I think it tries to solve a neat problem. There's so many features packed in that it's obviously vibe coded. That's probably a huge turn off for AI detractors. If you don't care about that, I think you're safe to give it a try.