How to Harden AI Instances for Privacy and Security

Background Last month, Cisco researchers detected over 1,000 Ollama instances within the first 10 minutes using Shodan scanning on 11434 port. Other services such as vLLM/llama.cpp/LangChain on 8000, LM Studio on 1234, GPT4All on 4891, are also identified. Later, Censys found 10.6K Ollama instances publicly available online, and 1.5K of these instances respond to prompts. That poses not only a great security risk of RCE, injection and poisoning, but also possible to expose private chat memory via unauthorized prompting. ...

October 18, 2025 · 6 min · Jun

Fixing Missing Scrollbar for ChatGPT with ChatGPT

Recently, I encountered a scrolling problem on ChatGPT web like this. I don’t use any userscript or extensions for OpenAI’s products and this problem occors in my unhardened Chrome based browser which I do not want to switch from. Based on the workaround in the threads, I made an userscript out of it which solves the problem by running in tampermonkey. (function () { document.querySelectorAll('html *').forEach(function(node) { var s = getComputedStyle(node); if (s['overflow'] === 'hidden') { node.style['overflow'] = 'visible'; } }); })(); However, this script stopped working just a few days after, and I couldn’t fix it since something in the server-end must have changed. ...

October 13, 2024 · 3 min · Jun