tobwen

Thanks for the write-up, I like the integration in the Proxmox VE environment.

Given some similarities, I’d like to briefly mention `krun` here. Although it’s an OCI-compatible container runtime, it uses MicroVMs with a similar approach. Perhaps we can exchange ideas here? I recall that GPU passthrough is also a recurring topic there.

https://github.com/containers/crun/blob/main/krun.1.md

Hey LLM, invert those rules to get undetectable :)

Isn't this solving the problem? https://github.com/balena-io/sshproxy

Added to AGENTS.md :)

Books are databases, chars their elements. We have copyright for databases in EU :)

I’m using ipset for this… It‘s protecting my Asterisk PBX since 2020.

And yes, you can use it with OpenRouter.

In Europe, SEPA direct debits can also be withdrawn. But you can expect to receive a reminder with legal action within a few days.

My opinion: Without support in libosmium and GDAL, this will remain a marginal phenomenon.

The accessibility support (PDF/UA-1) is VERY nice, but there's still still a lot of work to do (-> tables).

“When using wildcard patterns, this function analyzes the column structure and data types from the first matching worksheet only.”

Meh… I think I should work on a PR to fix this…

Has recently been used to visit "The Matrix" again: https://www.youtube.com/watch?v=iq5JaG53dho&t=1412

Hrhr, I'd love to have automatic CODE generation from Scientic Papers :D

Indeed... The security breach is already a few days old, and the white hat hacker has informed many major newspapers about it and sent them an incident report. According to these media outlets, several credentials were stored in plain text in the knowledge base, which allowed the white hat access to other services.

I just came across this incident involving localmind.ai, a small AI startup out of Innsbruck, Austria (founded in early 2024). The company stated that internal processes and control mechanisms failed and accepted full responsibility for the incident.

This summary outlines the key events and remediation actions from the official incident reports published by Localmind.ai between October 5 and October 9, 2025.

Incident overview and initial response (October 5)

On October 5, 2025, at 05:43 CEST, Localmind detected unauthorized access to its systems. The immediate response was to take all affected systems, including internal platforms and customer instances, offline to contain the breach. Initial measures included:

  - Resetting all passwords and regenerating API keys (e.g., for Notion, SendGrid, Hetzner).
  - Deactivating all user accounts, restricting access to a minimal number of administrators with mandatory two-factor authentication (2FA).
  - Initiating a forensic investigation.

The breach originated from a misconfiguration in an externally accessible beta-test instance. The flaw granted administrator privileges by default to a newly registered account. The attacker used this access to:

  - Access the integrated automation platform (n8n).
  - Retrieve an unrestricted API key for the internal Notion knowledge base, which contained infrastructure documentation and credentials.
  - Use the compromised information to escalate access further and send emails from an internal account.

Impact assessment and forensic Updates

  - Scope: The core Localmind platform was not compromised. The attack was confined to administrative interfaces and test environments. A limited number of customer systems were accessed, while on-premise instances showed no signs of unauthorized access.
  - Forensics: Unauthorized logins were traced to IP addresses from VPN providers, complicating attribution. Login activity occurred outside regular business hours (nights, weekends). As of October 8, no evidence of large-scale data exfiltration was found.
  - Data transparency: Localmind offered data exports to customers to conduct their own audits for potential GDPR breach notifications.

The company initiated a comprehensive infrastructure rebuild and security overhaul.

  1. New infrastructure: A migration of virtual machines to new, Tier IV, ISO 27001/27018 certified data centers with a fully isolated infrastructure was nearly complete as of October 8. Systems are being rebuilt from clean data volumes (e.g., Docker volumes) onto new, hardened hosts.
  2. Access security:
    - Implementation of an F5 Web Application Firewall (WAF) with pre-authentication for each customer instance.
    - Mandatory two-factor authentication (2FA) for all application logins.
    - Deployment of the Wazuh security agent for centralized login monitoring and anomaly detection.
    - All previous service accounts and credentials within automation workflows were deleted, requiring a re-issue.
  3. Automation restriction: Critical automation nodes in n8n (e.g., Execute Command, Read/Write File to Disk) were disabled and will be unavailable in cloud environments going forward.
  4. Enhanced monitoring: Additional security agents were deployed for endpoint security, configuration assessment, file integrity monitoring, and threat intelligence.
  5. Process change: Each customer instance undergoes a manual audit and documentation before restart, with the audit protocol provided to the customer.

On October 9, Localmind reported a renewed attempt to gain unauthorized access. The new security measures successfully blocked these attacks. The only confirmed impact was a brief, unauthorized text modification on a separately hosted, external development website, which was promptly reverted. The company attributes this attempt to the same threat actor.

Status as of latest update (October 9, 2025)

Systems were in a phased, controlled restart process, with customers being kept informed. The company continues to work on audits and security fortifications.

Sources (as Mementos)

<https://web.archive.org/web/20250000000000*/https://www.loca...> <https://web.archive.org/web/20250000000000*/https://security...>

Warning: There are no sandwiches in this simulation :)

Firefoxies for example.

What is this “offline”?

VBA and the ability to use Office files with embedded VBA are disabled in many corporations… Some malware in the past used VBA for their attacks and Microsoft never added a proper sandbox.

Nope, you can compile/download and run it completely from unprivileged userspace.

That's exactly what I've been asking myself and I wish I could. I index our huge, nested network drives every night with Everything and can search & find within seconds.

But pre-ROHS of course :)

It was even crazier in Germany! In 2000, the television station NBC received a radio license for RadioMP3. They broadcasted the charts and entire albums (with covers) via teletext, which could be legally recorded at home. Bit rate 128 kbit/s - simply with a TV capture card. The public broadcaster also transmitted software via “VideoDAT” during its ComputerClub program. However, this required special hardware.

Let's discuss this publicly, please. Open Knowledge has the advantage that others also benefit from it.

About the use case: Ultimately, I just want to enable my team to use different LLMs without having to create an account for each team member. However, it should be possible to upload attachments. RAG is not required at the moment.

Thanks it sounds great. I'll definitely have a look at that. Maybe I can connect it to LiteLLM so that we can connect all kinds of models.

Thanks, I'll have a look at that. But anything with ‘book a call’ sounds unaffordable for us unfortunately ;)

Right now, I'm just looking for something that looks and acts like the ChatGPT-UI (lowest learning curve).

Our team is very diverse and has no IT background. So we don't use collaborative tools (except MS Teams), but that doesn't stand in the way of productivity - it's powered by chaos.

Thanks, I'll have a look at TypeMind. It's disappointing that the tool is closed source and that no modifications are possible or permitted. I briefly add in my requirements that I would like to have a self-hosted open source tool.

Well, look at what Japan did in the 80s. Took existing products, improved them and registered their own patents. As if China would ever care about patents... Look at the clones that Ali and his brother TEMU are flooding us with ;)

Oh sorry, I thought it had become commonplace that the free market economy was more a construct of the "West" (Europe and USA) and that communism and Marxism were the driving forces behind the market in the "East" (Russia, Asia).

Sorry, that was in no way meant to be pejorative. I'm not an economist and for sure not a racist.

Forst the first part, I totally agree: I've had a Kyocera 1030D since 2008 and apart from a single component, which I repaired myself, it works as it did on the first day.

But for color printing or photos, laser printers are simply too expensive (and quality is BAD) and I know a lot of people who buy an inkjet "just to be on the safe side" and keep hearing that they break down after being on vacation, for example.

I live in Germany and with Covid the last copy stores have died.