That script then proceeds to download three python scripts that use the aforementioned python environment and do their business, qwen is having trouble de-obfuscating their urls and I am busy.
I'm actually curios to know how do you people visit the link securely? I guess a VM but could in theory something be resilient enough to misuse the Shared Clipboard or something to access your host machine?
Also what is your go to OS?
Hm, when I think of it an old Raspberry Pi could be my go to for this, but always physically.
tldr: Qubes OS, disposable vms, don't run the malware, physical isolation sounds better but is its own can of worms.
> I'm actually curios to know how do you people visit the link securely?
Disposable vm with a connection to tor. Then copied to a disposable vm with access only to one port on my llm server the one running llama.cpp.
> I guess a VM but could in theory something be resilient enough to misuse the Shared Clipboard or something to access your host machine?
When I am doing this kind of thing i have some rules.
Rule #1 Do not run the malware.
Rule #2 No copying from the analysis vm.
Given the malware is not run it's highly unlikely that any Xen vulnerabilities can be exploited or llama.cpp vulnerabilities for that matter.
Ideally I would not be using my own llm server but proxying the requests through another vm that contains temporary credentials to a llm provider. But I did not have the time to set that up.
> Also what is your go to OS?
Qubes OS
> Hm, when I think of it an old Raspberry Pi could be my go to for this, but always physically.
Physical isolation has it's own issues. If you don't airgap the device it could exploit other devices in your network, old residential routers are not exactly bulletproof especially from the lan side. Additionally, physical devices could be vulnerable to bios and UEFI firmware persistence mechanisms.
Biodanza is a system created by a Chilean psychiatrist that has worked wonders for me. It's a subconscious emotional healing technique where the process is experienced with a group of people and a person who facilitates the experience.
Hey, this is awesome. Thanks for sharing. Happy to know I'm not the first one to think about it. While it may be a niche thing, it proves that there is actually an audience for it. Did you have a price set for it? Did you do any kind of marketing for it?
It is true I didn't market it, so possible it suffered a bit from that. Some of the 'Doesn't work on my device' comments were a bit unexpected (and unsolvable without $$$ to test on the devices), so I didn't want to spend money promoting it with issues. I was charging $3 I think, it has been awhile.
There was another seemingly popular paid ringtone app at the time, but I can't recall what it was. And a search now for 'android ringtone app' now brings up lists of 'Top X ringtone apps of 2018/2019' populated exclusively by free apps.
Yes, but it is trivial to distinguish usage of Tor browser as commonly distributed and Tor browser in TAILS, by default one comes with an additional plug-in.
Not that I know of -- there are just browsers that don't send out some stuff because they don't have the capability to detect it. You could do some more header-stripping with extensions and proxies, but in the end, like with cookies, this is stuff that a website might need to actually work properly.
To do this well, you have to take special care with how exactly you obscure them. If your browser refuses to report those values, or sends junk values, then you might actually make the problem worse. It's the internet version of this: https://xkcd.com/1105/
