Might be your instance. Try blog and spot and .com without spaces. The blog is also linked within OPs article
starshipwinepineapple
Their april 15th blog post explicitly calls it a backdoor and mentions it was very well hidden. I'm interested to see what comes of this
Article really buries the lede here by not even mentioning mitigation for all 3 vulnerabilities:
Update UniFi Network application to Version 10.1.89 or later.
In your docker-compose.yaml you need to add in your directory if you haven't already
services:
immich-server:
volumes:
# Do not edit the next line. If you want to change the media storage location on your system, edit the value of UPLOAD_LOCATION in the .env file
- ${UPLOAD_LOCATION}:/usr/src/app/upload
- /etc/localtime:/etc/localtime:ro
+ # Add NAS pictures and videos folders to use as External Libraries
+ - "/volume1/data/ Pictures:/usr/src/app/library/pictures"
Then in immich you need to add this as an external library. Click your profile icon -> administration -> external library -> create library. It will ask for a path and you need to use the library mount point within docker which was /usr/src/app/library/pictures from my example. Click add path
That should get you good to go
You're right to question this.
In machine learning Accuracy means the correct % of overall classifications. There's some other terms like:
- Precision which is the % of correctly identified positives divided by the number of positive classifications. A high precision score would mean that of everyone who flagged as a match you had relatively few who were not actual shoplifters.
- Recall (true positive rate) which is the % of correctly identified positives divided by all actual positives. A high recall score measures how many shoplifters you caught and would minimize false negatives, but at the cost of more false positives.
So in the case of classification of shoplifters ideally you would focus on Precision as false positives are undesired, but if a company doesn't care about false positives as much as getting the shoplifters they'd focus on Recall. In either event, Accuracy is a poor metric to use or advertise in an imbalanced data set like shoplifting as most customers are not shoplifters so even if the model didn't classify anyone as a shoplifter they'd still be 99+% accurate.
I used umami cloud (free tier) on my personal site for 6-12 months and can recommend it. I ultimately decided to switch to just a simple counter for visits and likes because that's all i care about and i don't like collecting more information than i "need". Now my website has no other tracking/analytics and the entire site still works even if Javascript is disabled.
For a business if you're wanting a Google analytics alternative then umami does a great job. Self hosted option available as well.
To your initial question, if you'd actually use the data then i would recommend some form of privacy respecting analytics on your business site though. Since you seem privacy conscious i just wouldn't put more analytics on your website than you'd personally be ok with as an end user
Your github has no source code or licensing. Not sure if that was intentional or not since i see your github acct is only a few days old
Keep that n8n updated. Theres been several high and critical severity CVE's recently and I'm betting more to come
I see you're new to lemmy so maybe you missed reading the comments from the last time you asked this question https://programming.dev/post/48344373
what you use for your documentation
Hugo (markdown) files that i host on my internal server.
how you organize it
I use basic directory structure. Top level directories are like "dev", "home", "general". Self hosting is a dev/ subdir.
what information you include
Depends on how familiar i am with it and how often I'll be referencing it. Something i know well or access often will be more high level. Things like an annual process i have documented in more detail
how you work documentation into your changes/tinkering flow
My site has an "edit this page" feature which i use to open my IDE and make the change as I'm doing things. Sometimes I'll be lazy and just add in what i did this time and then let future me reconcile the differences ๐
To be fair MS makes orders of magnitude more money and has the benefit of operations at scale. Whereas codeberg's operational budget for 2025 was 100k euro and they still need to deal with DDoS and bot scraping. They also were running off a single server up until sept'25 when they had two donated hardware services which are now hooked up to make a 3 node ceph cluster.
I would say the bigger issue is needing more people willing to be package maintainers. Their docs do cover how to move packages from AUR to an official package but it does involve needing to be sponsored by existing package maintainers and doing extra work. In the end it didn't seem worth it for my package that meets the criteria to be /extra.
And with the AUR malware issue, if these AUR maintainers can't be bothered to maintain their packages and let them get orphaned, then how would you expect those maintainers to meet that higher standard of work?
Like any open source project, the limiting factor is the volunteers. And, well, I'm just not going to tell the arch linux volunteer package maintainers they need to do more when I haven't been willing to do the work they are doing