How to Harden AI Instances for Privacy and Security

Background Last month, Cisco researchers detected over 1,000 Ollama instances within the first 10 minutes using Shodan scanning on 11434 port. Other services such as vLLM/llama.cpp/LangChain on 8000, LM Studio on 1234, GPT4All on 4891, are also identified. Later, Censys found 10.6K Ollama instances publicly available online, and 1.5K of these instances respond to prompts. That poses not only a great security risk of RCE, injection and poisoning, but also possible to expose private chat memory via unauthorized prompting. ...

October 18, 2025 · 6 min · Jun

Flashing DD-WRT into a Linksys MR7350 with Basic Hardening

It has been a while since my WiFi is getting more and more unstable, and I finally decided to retire my NETGEAR R6300v2 which has served me well since in 2017. It was in used condition when I bought it, so this is a good time to get a “new” router. Because the ISPs in my area are very bad, I still have to stick with the low speed Internet for probably quite some time. So I decided to buy a used Linksys MR7350. ...

October 15, 2025 · 3 min · Jun

Flashing OpenWrt into a GL.iNet Flint 2 and Thoughts on Security

During the prime day, my friend grabbed a GL.iNet Flint 2 (GL-MT6000) for a fair price, thanks to the slickdeals community. The specs of this model feels like a beast to me, because I don’t have enough high-end devices and Internet plan to utilize that much of performance. But what I can do is to boost its security and stability for my friend. Note: For operational security, all initial settings should be done without physical Internet/WAN connection. ...

October 12, 2025 · 3 min · Jun

Making N100 mini-PC into a pfSense Box

Since I was a teenager, I have started voluntarily helping people around me with my skill of technology. This time, I’m helping someone to build up a robust, secure and cost-effective firewall/gateway/soft router at home. It ends up on a $100 worth N100 mini-pc with dual Ethernet port, which can be a great pfSense box for home or even business use. Hardware Tweaks This model (T8PLUS) secured with 4 screws at outside, after removing them the outer case can be easily pried open (just a little bit more effort than Intel NUCs), and removing 4 more screws inside to get the access of the motherboard (way more simpler design of the power button comparing to NUCs). ...

August 27, 2025 · 3 min · Jun

Migrating VMs from ESXi to Proxmox VE

There are many reasons why I’m doing this. In the days when Virtual Machine was the thing, VMware Workstation was the go-to option for a Windows host to run VMs. We have to find cracked version for personal use, since there was no VirtualBox neither Hyper-V. Many years ago, when I first decided to have a proper homelab in my household, I went blindly into ESXi just because VMware Workstation has already installed on all of my computers. Although I was pretty like Proxmox during that time, it was considered for not so serious projects. ...

May 2, 2025 · 4 min · Jun