Categories
AI

Ollama on macOS

This is also a show-and-tell of options on how to use and play with Ollama. I tend to use my Ollama as a headless system sending requests via VPN for remote processing on my Ollama macOS.

I’ll help you create a persistent configuration for OLLAMA_HOST on macOS. The most reliable way to do this is to create a LaunchAgent plist file.

Categories
Web

Cloudflare CDN, WAF and DNS

Cloudflare is a global technology company that provides a wide range of internet services and security solutions. Their core offerings include:

  1. Content Delivery Network (CDN) services that help websites load faster by distributing content across a global network of data centers
  2. DDoS (Distributed Denial of Service) protection to defend websites against malicious attacks
  3. Web security features including a Web Application Firewall (WAF), SSL/TLS encryption, and bot management
  4. DNS (Domain Name System) services that help route internet traffic efficiently
  5. Zero Trust security solutions that help organizations secure their networks and applications

Cloudflare has great offerings, a strong API, and many tools. I’m not super familiar with all of Cloudflare’s offerings because I am a free user who has been using it for many years, but I was never much involved in business or enterprise deployments.

Categories
Web

Free IP to ASN Mapping Service

I recently came across Team Cymru’s website in the Swiss CTI git repository. The Swiss National Cyber Security Centre NCSC did mention them in the disclaimer for the ASN lookups.

Categories
Security

How to Self-Sign PowerShell Scripts

I was trying to figure out how to sign PowerShell scripts with a self-signed certificate. This is a simple step-by-step guide on how you can provision your own certificate for testing and sign and verify PowerShell scripts.

If you plan to use a publicly trusted code signing certificate, this is however not the exact process as you should be using an HSM to secure your certificate.

Categories
Web

Piwigo API Documentation

Recently, I was implementing a machine that does automatic labeling of images in my Piwigo. I used OpenAI gpt-4o-mini for this purpose, and every two hours, the folder is scanned for images without titles and descriptions. If some are found, it will automatically add a title and description.

Once I started with my endeavor, I was surprised that there is no “online reference” for the API.

Categories
AI

Transcribe audio with AI locally

I’m collecting a multitude of skills in local AI processing, and today it is audio to text. I switched to Ollama for most of my AI processing needs, but audio files can’t yet be processed via Ollama APIs. Therefore, I was looking for an alternative, however, I didn’t look for a RETS API; running a Docker container will be sufficient for me.

I used whisper on Docker.

Categories
Web

Public IP Lookup Service

A common task for an administrator is to check the public IP addresses of the current system they are on or the current system they are using. This is important both in day-to-day work and while working with cloud providers. There are many services available, but not all are created equal.

Categories
Azure

ADO Pipeline library export and import

In the Azure DevOps world, moving from one tenant to another is not a very familiar concept based on Microsoft documentation. I had to do exactly this. The Azure DevOps Migration Tools did the trick for most of the ADO Boards-related things.

Repos were copied over by pushing to a new Git source.

Pipelines are stored in the Git repository as YAML and were imported / linked again.

One large task was migrating the pipeline library. You can’t export the values secrets in the library, but I used a tool to make sure to copy everything over. Having the secret variables copied over with empty values was already very valuable to me.

Categories
Security

ReCaptcha – Invalid key type

This is a quick bit: I recently had to add a reCAPTCHA key to a website. However, the keys provided did not work directly and I saw the Invalid key type error.

ERROR for site owner: Invalid key type
https://*** (2025-01-08) reCAPTCHA ERROR for site owner: Invalid key type.

In my case, this could be fixed by reissuing the key, switching from a version 3 key to a version 2 key.

https://*** (2025-01-14) reCAPTCHA ERROR for site owner: Invalid key type.

Some considerations

A Large-Scale Real-World User Study of reCAPTCHAv2

A 2023 UC Irvine study titled “Dazed and Confused: A Large-Scale Real-World User Study of reCAPTCHAv2” revealed startling findings about Google’s reCAPTCHA system, suggesting it has become more of a data harvesting tool than an effective security measure. The research, which analyzed 3,600 users over 13 months, found that CAPTCHAs not only fail to prevent bot traffic effectively (with bots often outperforming humans), but have also collectively wasted an estimated 819 million hours of human time—equivalent to 1,182 lifetimes—while generating up to $888 billion in value for Google through tracking cookies and valuable AI training data. The study concluded that reCAPTCHA has essentially become “a tracking cookie farm for profit masquerading as a security service,” raising serious questions about the widespread use of this purported security tool.

  • Studies show that CAPTCHA tests are ineffective against modern AI bots.
  • Google uses reCAPTCHA v2 and v3 primarily for data collection.
  • AI programs solve image puzzles with nearly 100% success rates.
  • reCAPTCHA v3, with the “I’m not a robot” checkbox, is easily bypassed by bots.
  • Users with VPNs or anonymized data are blocked more frequently than bots.
  • The value of the data collected through CAPTCHAs is estimated at $888 billion.
  • The study recommends eliminating reCAPTCHA v2 and similar systems.
Categories
AI

My experience with LLM use cases

As I work every day, I constantly see recurring work that I would like to optimize and automate. There are use cases that feel obvious that they should work and easy to do, but the real-world experience is different. Read about my learning.