𞋴𝛂𝛋𝛆

  • 0 Posts
  • 6 Comments
Joined 3 years ago
cake
Cake day: June 9th, 2023

help-circle

  • If I see it again today I will try to reply again but use separate devices for here and ws. I’m air gapped on WS, tracking down the malware that is ComfyUI. See other comment for a few more basics. Don’t trust pip or especially UV. Read the source for everything you have from Python. Look for host OS escalation and obfuscation of stuff like namespaces, processes, and additional tty’s. The dictionaries for Python under collections.abc are hashed for nefarious reasons. That is one way they determine if your stuff is bad think.

    From what I have seen, I want to be on a European Gentoo at this point, maybe even LFS.


  • Looks like AI stuff is also maybe creeping into age/id stuff.

    I’m super concerned because there is a bunch of Python fedora uses throughout.

    FreeCAD also has it now. Rather, has it in the flatpak.

    I am air gapped at the moment tracking down the garbage dump I stupidly failed to verify. As I grep find and locate those packages, I keep seeing problems crossing over into flatpak containers. Things like the default kernel setting passing no label packets, the level of access for host installed Python, noaccount, changing /proc, and allowing a process to escape namespaces is sus to me. This garbage allows Python to create a hidden tty, and hidden connections to TOR. That is straight up malware IMO.

    The hashing of Collections.abc and how UV works is death to open source.