How to Harden AI Instances for Privacy and Security

Background Last month, Cisco researchers detected over 1,000 Ollama instances within the first 10 minutes using Shodan scanning on 11434 port. Other services such as vLLM/llama.cpp/LangChain on 8000, LM Studio on 1234, GPT4All on 4891, are also identified. Later, Censys found 10.6K Ollama instances publicly available online, and 1.5K of these instances respond to prompts. That poses not only a great security risk of RCE, injection and poisoning, but also possible to expose private chat memory via unauthorized prompting. ...

October 18, 2025 · 6 min · Jun

Bypassing YouTube IP block with FreeTube and optimized Tor

Recently, YouTube is messing with user disobedience again. For the sake of that, FreeTube has been updating with fix multiple times. Although FreeTube has fixed the API block done by YouTube, I have to deal with a new IP block from my end as its aftermath. “YouTube has blocked your IP address from watching videos. Please try switching to a different VPN or proxy.” There are many ways to get around this IP block. Because I think switching VPN server is too heavy just for this, I would like to use a proxy. ...

August 26, 2025 · 3 min · Jun

Operational Security with Documents

Recently, I started sending/receiving documents to/from untrusted sources. In my threat model, this requires extra operational security to prevent privacy exposure and security risk. Since the offical guide is not so detailed for Windows, I decided to write one while installing on a Windows 11 LTSC. First, in Windows Terminal/PowerShell, run wsl --install to setup WSL2. Read my previous post for more detail. Because the latest verisons of Dangerzone 0.9.1 and docker desktop 4.44.3 have unsolvable bug (reports unknown error '2'), I have to choose the ealier version which works properly. ...

August 25, 2025 · 2 min · Jun

How to Scan, OCR and Share a Book Anonymously

Recently, I have encountered a very rare out-of-print book that I decided to save it for the world with modern technology. Because I don’t have a real scanner, I tested all sorts of scanner android apps that are open source. OpenNoteScanner not working on every phone, auto cropping not working properly, capture fast with postprocessing, high quality result. OpenScan no auto cropping PDF-Doc-Scan auto cropping not working with book at all docus not so good auto cropping, no retouch CleanSCAN no auto cropping OSS-DocumentScanner with functional auto cropping most of the times, has filter and postprocessing but at cost of slow capture, very high quality result It ends up OSS-DocumentScanner is the best of all. To make things easier, I customized the best gamma, contrast and filter as default, based on my lighting and book condition. ...

July 26, 2025 · 2 min · Jun

Migrating Harbor instance from Linux to WSL2

In the past, I have covered how to set up Ubuntu in WSL2 and hosting local LLMs with Harbor, now I want to migrate my Harbor instance from baremetal Linux into WSL2 so that I don’t have to set it up from scratch. First thing to do is to open firewall port netsh interface portproxy add v4tov4 listenport=33811 listenaddress=0.0.0.0 connectport=33801 connectaddress=172.xx.xxx.xxx On Linux hardware: copy Harbor files from /home/username/Harbor /home/username/.ollama On Windows hardware: connect the USB drive containing Harbor files and run ...

May 26, 2025 · 1 min · Jun