Featured Post

 

Im so temped to install red star Linux

I have a couple machines doing nothing I may do this on a VM



at
Labels:

Every Linux Distro Explained in 17 Minutes

 I use Debian on laptop and Truenas on a server m both wont run Windows with any speed

That PC that wont run Windows 11 will work fine with Linux , its not Ewaste 




at
Labels: , , ,

Scrapped Openvault for Truenas Scale

 

That’s a classic hardware pivot! Moving from a "bits and bobs" OpenMediaVault (OMV) setup to a dedicated TrueNAS server using medical-grade hardware from Siemens  is a serious step up in reliability, especially given OMV's reputation for being more forgiving of mismatched parts compared to TrueNAS’s stricter requirements. Im happy as a cat with a box of catnip , just need to configure it add more drives from my OMV machine . And its not held together like the Millennium Falcon



at

Another tool : BlueScreenView Free Windows Crash Dump Analyzer






BlueScreenView is a free utility that helps you analyze “blue screen of death” (BSOD) crash dumps created by Windows when your system crashes. It scans dump files and displays information about all crashes, helping users troubleshoot system issues quickly and efficiently.
at

Firm Data on AI

Data and txt from  www.nber.org/papers/w34836



 We present the first representative international data on firm-level AI use. We survey almost 6000 CFOs, CEOs and executives from stratified firm samples across the US, UK, Germany and Australia. We find four key facts. First, around 70% of firms actively use AI, particularly younger, more productive firms. Second, while over two thirds of top executives regularly use AI, their average use is only 1.5 hours a week, with one quarter reporting no AI use. Third, firms report little impact of AI over the last 3 years, with over 80% of firms reporting no impact on either employment or productivity. Fourth, firms predict sizable impacts over the next 3 years, forecasting AI will boost productivity by 1.4%, increase output by 0.8% and cut employment by 0.7%. We also survey individual employees who predict a 0.5% increase in employment in the next 3 years as a result of AI. This contrast implies a sizable gap in expectations, with senior executives predicting reductions in employment from AI and employees predicting net job

 creation.



 Link to the paper and the PDF 

at

If you wonder what Elons goal are



at

Risk Assentment on me installing openclaw on a PC




Im still unsure if I install this a VPS will cost me about $20 a month . as doing it locally could be dangerous  


Risk Assentment on me installing openclaw on a vps

Installing 

OpenClaw on a VPS is a high-risk activity that essentially creates a remote administrative panel for your server. While a VPS provides better isolation than your personal laptop, it remains highly vulnerable if misconfigured. 

Critical Risk Factors

  • Autonomous Shell Access: OpenClaw is designed to execute terminal commands and manage files. If compromised, an attacker gains immediate, high-level control over your VPS.
  • Prompt Injection (Indirect): This is the most "spicy" risk. Attackers can hide malicious instructions in emails, web pages, or files that OpenClaw reads. The agent may then silently execute these commands—such as exfiltrating your API keys or deleting data—without your knowledge.
  • Unvetted "Skills" Ecosystem: The "ClawHub" and other community repositories contain hundreds of malicious scripts (trojans) that can steal cryptocurrency, SSH credentials, and browser passwords once installed.
  • Default Vulnerabilities: Versions prior to 2026.1.29 contain a critical Remote Code Execution (RCE) flaw (CVE-2026-25253) that allows an attacker to hijack your gateway via a simple crafted link.
  • Sensitive Data Exposure: OpenClaw often stores API keys and tokens in plain text by default. 

Risk Mitigation Strategies

  1. Never Expose the Gateway: Bind the OpenClaw Gateway to 127.0.0.1 (localhost) only. Access it remotely via a private network like the Tailscale VPN or NordVPN Meshnet instead of opening public ports.
  2. Mandatory Sandboxing: Run all agents in Docker containers with restricted network access and non-root users to limit the "blast radius" of a breach.
  3. Principle of Least Privilege:

1.                  Create dedicated, empty email and cloud accounts specifically for the bot.

2.                  Never connect password managers or primary financial accounts.

3.                  Restrict shell commands to a strictly defined allowlist.

  1. Human-in-the-Loop: Do not enable "auto-approve" for sensitive tasks like command execution or file deletion.
  2. Immediate Patching: Ensure you are running version 2026.1.29 or later to resolve known critical vulnerabilities. 

Would you like a list of specific firewall rules or a Docker Compose configuration to help harden your VPS setup? 

at
Subscribe to: Comments (Atom)