this post was submitted on 22 Jul 2026
55 points (96.6% liked)

Selfhosted

60934 readers
861 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

https://lemmy.world/post/49736885

If you follow AI news at all as part of your self-hosting interests, you may have become aware recently that open AI (the frontier lab between behind chat GPT) has admitted (loosely) culpability in an cyber attack against HuggingFace (the major repository of open-weight models.)

The details that present are somewhat sketchy, but the gist of it is that open AI seems to have given unrestricted access to a AI agent, which then attacked hugging face, who in a twist of deliciousness, used an open source agent to defend themselves.

I'd joke and tell you to make sure that you haven't left any open ports on your router, but if you're here reading this I think probably you know better than that.

Less comically, there's a weird intersection here between self-hosting, sovereignty and encroachment by big tech that is worth pay attention to.

It should certainly spur people on to seriously consider self-hosting as much of their infrastructure as they can (and securing it) if this is the preview of things to come.

Something is rotten in the state of Denmark.

I just wish I'd bought more SSDs.

you are viewing a single comment's thread
view the rest of the comments
[–] maegul@lemmy.ml 11 points 3 days ago (4 children)

What does self hosting look like in a world full of malicious AI agents?

I’m thinking of this post/thread from Veronica explains, where she explains that her hosted services are accessible only locally because tbe security headache isn’t worth it: https://explains.social/@veronica/statuses/01KWJCGV27JVBHP21E2JNWDBFH

As someone who doesn’t self-host but could and would want to, the state of AI has basically scared me off.

I host several services accessible via the open Web. They are isolated enough that a breach would most likely only compromise that service. They are also kept up to date, and logs are monitored.

There's always a risk when exposing something, and I am limiting some services to access via VPN because either the data in them is too sensitive, or I don't trust them to be secure enough.

You probably also aren't a worthwhile target in most cases.

[–] SuspiciousCarrot78@aussie.zone 10 points 3 days ago* (last edited 3 days ago) (2 children)

I am simpatico with her position.

For what it's worth, self-hosting doesn't mean you need to be able to reach all your services off-site.

LAN only access is perfectly valid and something that I prefer myself.

Case in point -

Last year I went to Japan for 5 weeks and rather than opening up dodgy ports to my home media services, I ended up taking a 128GB USB stick, my Chromecast and installing Nova Player.

https://github.com/nova-video-player/aos-AVP

Nova Player populates on device from your attached storage to create essentially a jellyfin like front-end. Install it, plug the chrome cast or whatever into HDMI on any TV and you're off to the races.

It's wonderful and it's actually now my primary streaming media source in the house; I just plug in my hard drive to my router, Nova sees it and my media sources are cross-populated to all of my Android devices.

[–] Taleya@aussie.zone 2 points 2 days ago

Yup. It's how i've been running for years. The only thing that presents outside the house is port 80 on the apache server (despite having some incredibly intricate home automation)

Mind you, i'm also old enough to have spent my formative years without even the concept of "available everywhere". Lotta peeps nowadays have not, and the idea of no internet / no access is genuinely terrifying to them

[–] maegul@lemmy.ml 1 points 3 days ago

Yea, this “data at the edge” approach, not “on the wire” Is interesting to me and makes sense.

Basically regressing on the convenience/power of the internet because it just isn’t safe and easy anymore and for anything personal that isn’t a server -> many users, yoi basically ain’t gonna need it.

[–] MonkeMischief@lemmy.today 6 points 3 days ago

This is a big reason I only remotely access my services via TailScale / Wireguard.

Even if my highly restricted ISP let me open anything, I wouldn't dare. I know for certain I don't know as much as who/whatever is hunting for open ports out there. I have zero interest in instantly being assimilated into some botnet lol.

[–] bdot@lemmy.world 6 points 3 days ago (1 children)

yeah - i am now thinking i want to move away from anything that leaves me exposed. i have a few services that are nice to be able to access remotely, but it’s time to reconsider how much i actually NEED to access those services.

[–] dgriffith@aussie.zone 8 points 3 days ago (1 children)

Consider only exposing a VPN service, like Wireguard.

Then when you are away from home, it's one tap / click to be back on your LAN again.

[–] non_burglar@lemmy.world 3 points 3 days ago (1 children)

You don't even need to lift a finger. I use WG Tunnel, which turns on my VPN as soon as I leave my WiFi. I'm always tunneled or home.

[–] WhyJiffie@sh.itjust.works 1 points 1 day ago* (last edited 1 day ago) (1 children)

some kind of wireguard proxy would be nice though to not expose my home IP address wherever I go (guest wifi networks)

[–] non_burglar@lemmy.world 1 points 16 hours ago

I suppose so, but all they'll see is a an encrypted session.