I think China would have pursued it regardless, they just might have relied more heavily on European tech then they do now and thus would have delayed their home grown tech. Or if Europe played their cards right would have resulted in a better trade alliance with China and have benefitted both economic areas by exchanging tech advances sidelining the US. This last one might be a bit to much of a utopia though
About the only thing I have in that range would be an old Connor CP30174E from the 90’s. It doesn’t get any use tho. I framed in in a shadow box for display along with some other drives that I disassembled and display as a curio. I just think they’re neat.
if you’re trying to unload trash books, change the title slightly to hide it.
They are still doing this, they’re just not advertising it anymore. They haven’t stopped, the greeds have a hold of this company and they’re not going to let go this easily. Shit, it took 3 weeks for them to take down the page because they used the 404 people as advertising.
Anthropic said that in each of these cases “Claude was explicitly told by our prompt that it had no internet access.”
So the lack of an “isolated test environment” was literally their fault. They left the door open, and was surprised when the genius web crawler couldn’t distinguish between an internal page and an external page based on any context clues.
However, dismissing it as “a multiple screens long AI prompt” does not only not answer the question, it comes off as abrasive.
I think it is more abrasive to copy/paste a poorly formatted LLM output instead of taking the time and summarizing it to a few sentences just as you did in your previous post.
Well, depends on what the line is, right? Like, you’d have a hard time copyrighting
inti=0;
because millions of people write that line of code.
But if it’s something unique and, say, identifiably Microsoft’s code, then yes, you probably would not have legal grounds to stand on.
In the context of the OP, of course, if you’re using an LLM just to write int i = 0; then you might be stupid. But possibly if you’re using LLMs to do tedious tasks like writing unit tests then you might be able to argue that they’re generic enough to not infringe copyright even if the legal situation is resolved in favour of LLM output belonging to the IP holders of the training data. It’s just a legal grey area, which is presumably why so many projects are concerned about merging LLM output.
I might be misinterpreting parody, but you can most definitely run AI tooling on Linux. And it has most of the same vulnerabilities, if not additional/different ones.
In ISBNdb’s now-removed marketing materials, it admitted that getting caught destroying printed books during the scanning process would not be a good look. “The optics problem is real,” ISBNdb’s site said. “‘AI company destroys two million books’ is not a headline that generates sympathy.”
So their solution was to do the evil thing secretly?
Prompt inject a malicious instruction in a word document that instructs the AI to copy this instruction to other documents as part of the payload.
Dumb user downloads and opens the document with copilot enabled, abd ignores the large suspicious white blank page that totally doesnt look like a hidden giant injection attack.
Thats it pretty much it.
Copilot will get injection attacked because the prompt is super huge and at the end of the document, so its prior instructions start to fuzzy out.
Then it’ll go “okey doke” and start copying the prompt injection attack payload to a bunch of other documents.
The fix is stupid simple… copilot should just be prompting the user for permission if it ever edits a file other than the one that is open. Im surprised that isnt already the case…?
It certainly is already the case for copilot in vscode.
With the update I’ve added this Navidrome lyrics plugin, but I’ve not really tested it yet. I’ve been using lrcget to locate and add lyrics before this update.
I love the fact that they have really opened up Navidrome to use plugins, and it seems the community is starting to produce some pretty decent examples.
The point is that you came here specifically to invite questions and feedback.
I took the time to read the documentation, ask ChatGPT to summarise what I found, and then reduced my follow-up to a simple request:
«Which of points 1–7 are materially wrong?»
That is not the same as asking you to audit “multiple screens” of AI output.
If the answer is “2 and 5 are incorrect”, or even “I do not have time to review it”, that is perfectly fine.
However, dismissing it as “a multiple screens long AI prompt” does not only not answer the question, it comes off as abrasive.
As for the documentation, the confusing parts are exactly those I listed: retention, lifecycle management, browser ingestion, storage limits, deletion, multi-user behaviour, and, most importantly, what Hister actually is and who it is for.
What’s disappointing is not that you disagreed with the AI summary. AIs are idiots.
It that after inviting questions and feedback, your response to a genuine attempt to understand the project is curt dismissal.
The inner workings of Hister may be obvious to you; they are not obvious to others.
“TL;DR” does not encourage the sort of community engagement you ostensibly came here to seek.
Hmmmm….Navidrome has supported lyrics for a while now, no? Apps like Feishin will fetch lyrics for you based on the song being played, if it’s available that is. But it doesn’t embed them, to my knowledge. However, since I still have a stripped down Windows 10 installation, I used MusicBee to embed the lyrics. Highlight the library, and let it eat. If your library is large, it will take some time. When finished, the lyrics will be embedded in the audio file, and will display in Feishin and in Navidrome.
I know that beets has a lyric plugin, and that might be an avenue for you OP. However, in my case, I started with MusicBee so very long ago, and it’s still a top notch player imho, even tho it is a Windows app.
The kernel absolutely does not do that. What theyre referring to is linus saying he was fine with people using claude for analysis purposes or to double check your pr, not submitting whole ass ai prs
That’s the nice thing about Plex, you just stream your Plex library using Plex, and Plex is also the only place you and anyone you share with need to log in.
No one can answer your question unless they know the internals of how youtube works. It’s quite possible for the view to be counted by some other means completely separate to a user’s watch history.
Following 404 Media’s reporting that book database company ISBNdb claimed to source printed books to then sell to AI companies for AI training, the company deleted the part of its website offering the service and walked back claims that it would train AI models, and instead called it “a test of market interest.”
On July 30, nine days after 404 Media’s reporting, ISBNdb added a note to its homepage and an update on its news page about the change. “We’ve seen the recent coverage about a marketing landing page on our site, and we understand the concern it raised. The facts: ISBNdb has never purchased, scanned, or sold a book — for AI training or anything else,” ISBNdb wrote. “We don’t train AI models, and we never have. The page was a test of market interest; no such service was ever brought to life. We’ve taken the page down. Our job is helping people find books. For more than two decades, ISBNdb has been the card catalog of the book world — the data behind how bookstores, libraries, and reading apps connect readers with titles. Data about books, not the books themselves. That hasn’t changed.”
ISBNdb removed the landing page for “Printed Books Sourcing for Your AI LLMs Dataset Needs” on July 28. “It was part of exploring demand, and we’ve chosen to pivot away from that direction. Our main ISBNdb (book metadata API) services are unaffected and running as usual,” the site says.
ISBNdb has not responded to any requests for comment from 404 Media.
In one now-removed article on its site, ISBNdb said that printed books published before 2022 are ideal for AI training data because they don’t include AI generated text, and ingesting these books could prevent model collapse. The article also suggested that book authors who might be opposed to this use of their work could just write with manipulating and sabotaging AI models in mind.
404 Media spoke to booksellers and saw reports online detailing a sudden uptick in sales recently. “It’s not just the quantity, but the weirdness of the orders,” one bookseller told 404 Media. “The type of books […] there’s no rhyme or reason to it. Also, there’s a total disregard for the price of the book. I’ve had some books that sold through this way that were […] greatly overpriced. That’s kind of a tell for AI because they have just so much money.”
“Purchasing paper books at scale from the secondary market does not deprive any creator of income they would otherwise have received,” one of ISBNdb’s now-removed pages said. “These are books that have already fully discharged their financial obligation to their creators.”
In January, book authors filed a copyright lawsuit against Anthropic, revealing internal documents that showed Anthropic planned to obtain and scan millions of printed books and destroy them in the process. An investigation by the Washington Post found that Anthropic was buying books from a company called Better World Books, one of several marketplaces where libraries, retailers, and individuals sell books.
In ISBNdb’s now-removed marketing materials, it admitted that getting caught destroying printed books during the scanning process would not be a good look. “The optics problem is real,” ISBNdb’s site said. “‘AI company destroys two million books’ is not a headline that generates sympathy.”
Emanuel Maiberg contributed reporting to this story.
ITT: jet fuel AI can’t melt steel beams hack anything.
Also I want to know the name of this company so I can avoid them:
Claude believed the package registry it was using to be part of the simulation, but in reality the package was made freely available online for roughly one hour. During that window, the package was downloaded and run on 15 real systems. One of these systems was a scanner belonging to a real security company (separate from the fictional company introduced in the scenario) that routinely installs Python packages and scans them for malware. When that company’s scanner installed the package, Claude’s hidden code executed. We believe the company’s security scanner treated PyPI packages as safe to install, and as a result, Claude was able to exfiltrate the company’s credentials to a collection point it had set up. Claude then used these credentials to access further infrastructure from this company.
Jellyfin expects you to actually host it yourself, instead of baking in a proxy and selling you the service.
There are plenty of free subdomain providers, and let’s encrypt gives out free certs.
If you’re not hosting through a VPN you should consider those a requirement so you’re not sending an unencrypted password to your jellyfin instance over the internet. Regardless of your ISP situation…
It is still an issue that is easier on plex which is why I run both because I can’t setup and troubleshoot vpns for all my family that has access. Plex is much easier on that way. Jellyfin is great but look what you need to mimic a fraction of plexs power 😆
Anecdotal but I use chrome for work and the June/July updates this year were the only time all my passwords/history/session cookies were totally wiped by an update. That has been pretty annoying to recover from and I know it happened because I updated Chrome for bug testing.
Is there a TTL / max database size per user setting?
As I wrote, you can simply automate deletion by document age. Schedule a delete event on each day with the desired retention time defined as a filter expression.
Database size limit isn’t available yet.
Additionally, is the other parenthetical information materially correct? If not, which points [1 thru to 7] are wrong?
No, sorry, I don’t have time to correct a copy of a multiple screens long AI prompt.
I would like to further recommend Hister but your documentation is somewhat confusing at first blush.
if you want completely free; completely private; and a project that will force you to learn A LOT because it’s needful nature, there’s motion and it’ll work with any ip based camera. i used the ip webcam app to convert some old phones that i had laying around collecting dust into security cameras.
then i used google’s desktop integrations with gnome to get alerts when i wasn’t home and put the cameras on a segment of my network with no access to the internet to ensure privacy and it can also be containerized.
I went into hyperbole there, my bad. I agree wholeheartedly with your reply.
Admittedly, I have a bias here, since using water for food production feels more justified. Same with some industries. But I concede and agree that meat is not the most efficient way nor the most ethical source of food.
I think data centers rub me the wrong way because, for me, they are the straw that broke the camel’s back.
We see how lots of countries pull out of the fight against climate change (not that they were really fighting it, but at least they seemed to care a little) and now they waste more resources on things that are, from my point of view, not productive nor useful to most people.
(Ethics aside, my view on Gen AI is that it is a tech that is not mature enough, and that the use of brute force to make it better is a waste of resources)
if the instruction is messy fuzzy human language to a system that was not coded instruction by instruction but got generated and trained then there never is a way to differentiate instructions from data if i’m not mistaken
Is there a TTL / max database size per user setting? Say I have 4 users using the server; can I allocate a hard limit of 10GB per user, with 180 day retention rules?
Additionally, is the other parenthetical information materially correct? If not, which points [1 thru to 7] are wrong?
I would like to further recommend Hister but your documentation is somewhat confusing at first blush.
If encountering increased amounts of AI sites has made your life considerably worse, you had a really nice and carefree life with minimal friction before. Good for you, I’m envious.
I use a Reolink NVR instead of my own server, along with SD cards in the cameras themselves as a backup. My switch has VLAN capabilities, but I haven’t configured my cameras to use it, mainly because I have Wi-Fi cameras outdoors (2 solar-powered and 1 doorbell camera connected to doorbell power). It’s a proprietary local setup that “just works”. I understand not trusting proprietary and wanting self-hosted open source all the way because I certainly don’t trust them to not collect my data and don’t allow Reolink devices to have internet access.
The summary has numerous inaccuracies. Most importantly: it is pretty easy to delete content by topic or age. The hister delete command can accept a search query to remove only matched documents. The same is true on the web UI “actions -> remove all matching documents”. You can quickly filter by age, simply query updated:>365d. Combine it with URLs, labels, domains or phrases.
Thanks for providing a clear assessment of whats possible, but damn I never knew h.266, also exist, you learn new things every day, thanks for that, and I watch mostly films and webseries, but never got actual good quality on free websites compared to netflix, apple tv etc, so was just hoping that there must exist something, which I am unaware of.
Fuck the fucking idiots in the fucking Whitehouse. They are doing everything they can to wreck the future of this country. I swear they are all Russian assets.
That’s a bit over the top for grabbing some text books. That’s like, opsec for running an IPTV service or something… but it is possible, and easy. Whip up a vm with a linux distro, connect to an open wifi (vpn if you have one, if not who really cares), and download away. Blow away the VM when done.
Thank you. What kind of server and storage do you use for the NVR and is it on a vlan or something? I’m trying to wrap my head around how much hardware I’ll need to buy. I’m not that great with networking also so I’ve considered buying a cheap router for the system that isn’t connected to the internet, instead of doing the vlan route.
To be fair, $600 for 64GB of RAM is a steal in this economy (you could probably sell the RAM alone for $800). So if you want that much RAM and are ok with the rest of the system - go for it. I mostly wanted to point out why I personally would not like such a machine (why I’m “sleeping” on it).
Mine was the equivalent of $660 at the time with 32GB of RAM (excl. HDDs). In this RAMpocalypse it would probably cost around $1k.
Without knowing, you’re just trading known risks for unknown risks.
Known risks can be managed.
My opinion of the constant update cycle today: it rationalizes management’s liability offloading while also justifying staffing requirements and therefore budget.
Liability and risk are related, but very different things.
If it was modeled after real world businesses, this is just par for the course. Now have it jeep it’s memory up to date so it can learn from past failures, and you now have an accurate simulation of a sales person.
I am very interested in this topic and have not heard of cooperativism until today applied to digital entities. I am very much for this idea to take hold or other ideas that can allow for shared earnings and things like data protection. Not sure if this would also potentially include data privacy or not. I think these things are great, but laws also need to be established to protect workers rights in the information age and same goes for data protection and data privacy.
So the new drug and cancer vaccine clinical trials at the not for profit major cancer centers will be cancelled, and instead YouTube influencers claiming ivermectin cures all cancer will get their funding.
Oh wait - physical science, so more money to oil and gas executives and tech bros?
It wouldn’t permanently lock you out if it failed because you can boot into a live ISO to change your password back if it fails to change it back to your original password.
Oh I know it isn’t, because I trust google as far as I can throw a datacenter.
But I’m still struggling to see the use of an app that makes you stop and go “let me ask my app to turn on my remote connection feature and search to see if this person is wearing the pervert glasses.” instead of using my eyes and going “That guy looks like he’s wearing pervert glasses, I’m leaving the area.”
Also to say “we’ll do our best to keep them contained, but those Chinese companies will probably try to make them wreak havoc. The best bet is clearly to ban our competition from the market, for your safety of course.”
If anyone else is confused wtf this does, I pointed the clankers at it and asked. Way to bury the lede OP.
See [6] for some missing features (?) that would be nice to clear up.
[1]
You open a webpage normally.
The browser extension reads the page that your browser loaded.
It sends the page text, title, URL, and other details to your Hister server.
Hister stores and indexes that content.
Later, you search Hister for words from the page.
Hister finds the saved page, even when you cannot remember its title or URL.
[2]
so, like a Google search of visited sites and my own drive?
Yes. That is actually a reasonable use case.
If you pointed Hister at:
C:\Documents
it would:
Walk the folder tree.
Read supported files.
Build a full-text index.
Watch for changes.
Re-index new or edited files automatically.
You could then search for things like:
tax invoice lenovo
lumbar radiculopathy
that python script with sqlite
“Methylphenidate” (exact phrase)
without caring which folder the file lives in.
Is it like Google?
Yes, but only for your own data.
Imagine Google, except the only websites are:
C:\Documents
D:\Notes
your browser history
pages you crawled yourself
You open a browser, type a search, and receive ranked results from your own files instead of the internet.
[3]
Can you access it from elsewhere on your LAN?
Yes.
By default it listens only on localhost:
127.0.0.1:4433
However, you can configure it to listen on all network interfaces:
0.0.0.0:4433
Then any device on your LAN can use the web interface or API, provided your firewall allows it. You should also enable an access token or user accounts if you expose it beyond your own PC.
[4]
What interests me more for your home setup is that Hister is not just a search engine.
It already exposes:
a web UI,
a REST API,
and an MCP endpoint for AI assistants.
That means you could run one Hister instance on your server, index your documents once, and then:
search them yourself from any device on the LAN,
or let an AI search the same index through MCP.
If I wanted a self-hosted “Google for my own stuff” with minimal setup, Hister is much closer to that goal than Meilisearch. Meilisearch is an indexing engine. Hister is already a complete document search application.
[5]
Yes. By default, Hister stores its data in SQLite:
Search index and metadata: db.sqlite3
Stored HTML previews: separate files on disk
Configuration: YAML
It can also use PostgreSQL instead of SQLite if you want.
Regarding browser history, there are two separate things:
Your browser’s history database (Chrome, Firefox, etc.).
Hister’s own index.
They are independent after import.
For example:
Monday: You visit example.com.
The extension sends the page to Hister.
Hister stores the text, title, URL, metadata, and optionally the HTML preview.
Tuesday: You clear Chrome’s history.
The Hister copy remains. Clearing your browser history does not delete Hister’s copy. Hister is designed to be a long-term knowledge store, not a mirror of your browser history.
If you want Hister to forget something, you must delete it from Hister itself. The web UI and terminal both support deleting indexed entries.
I actually like that design. If it deleted documents every time you cleared browser history, it would defeat one of its main purposes. It treats browser history as an ingestion source, not as the source of truth.
[6]
From the current documentation:
Are sources timestamped?
Yes.
Each indexed document records at least:
Added timestamp.
Updated timestamp.
For browser pages, the visit timestamp.
URL, title, and metadata.
Is there a TTL (auto-expiry)?
No.
I could not find any TTL, age-based expiry, or retention policy.
Documents remain until you delete them or overwrite them with newer content.
Can I set a maximum database size?
Not that I can find.
There is no option such as:
10 GB maximum.
Delete oldest first.
Keep only the last 365 days.
Limit to 1 million documents.
You can reduce storage by:
Disabling HTML previews.
Limiting indexed file size.
Restricting indexed file types.
Excluding paths or domains.
Can I cleanly delete by topic?
Partly.
You can:
Delete individual documents.
Delete crawl jobs (but not the indexed documents).
Label imported content.
Query by labels and metadata.
Configure rules to stop future indexing.
I did not find built-in support for bulk deletion such as:
“Delete everything about Tesla.”
“Delete all Reddit pages.”
“Delete every page tagged AI.”
The API may allow scripted deletion, but I did not see a first-class “delete by query” feature in the documentation.
Is browser ingestion automatic?
Yes.
That is one of its main features.
Once the browser extension is installed and pointed at your server:
Every page you visit is captured automatically.
The extension extracts the rendered page.
It sends it to Hister.
If the page later changes, the extension periodically checks it and updates the stored copy.
Duplicate visits update the existing document rather than creating a new one.
You do not need to press a button.
My only concern
This project feels like it is missing a lifecycle policy.
For a personal knowledge base, I would want options such as:
Keep browser pages for 90 days.
Keep GitHub forever.
Keep PDFs forever.
Delete pages that nobody has opened for two years.
Maximum database size: 20 GB.
Delete by label or query.
I could not find those features in the current documentation.
The project is very good at collecting information. It appears less mature at managing its lifetime. That would probably become the first thing I wanted if I intended to leave it running for years.
[7]
Yes, on both counts.
Can I exclude particular sites?
Yes, and it is quite flexible.
Hister has skip rules that apply before a page enters the index. You can exclude:
The nice part is that the rules apply both to new browser captures and to re-index operations, so they stay excluded.
How does multi-tenancy work?
It is better than I expected.
Each user has:
Their own login.
Their own search index.
Their own browser history.
Their own skip rules.
Their own search aliases.
Their own API token.
If you and your wife both use the same Hister server:
You
├── browser history
├── indexed pages
├── rules
└── API token
Wife
├── browser history
├── indexed pages
├── rules
└── API token
Neither user can search the other’s documents.
There is also a global area.
You can configure directories such as:
/shared/docs
Those appear in everyone’s searches, while personal folders remain private.
One feature I really like
Directory indexing also supports user ownership.
For example:
alice -> /nextcloud/alice
bob -> /nextcloud/bob
global -> /shared/docs
The server enforces that visibility automatically. Even administrators do not automatically see other users’ indexed files.
Overall, I came into this expecting “browser history search”. After reading the documentation, it is closer to a lightweight, self-hosted personal search appliance with sensible multi-user support. The remaining gaps are lifecycle management features such as retention policies, TTL, storage quotas, and richer bulk deletion. Those do not appear to be built in.
Ah, okay, I thought it was a Gemini/Google thing. There is at least some expectation of privacy from Ms in regards to it’s AI on business accounts, but also no expectation of privacy from your own company.
Politicians, and even corporate C-suite, often confuse “cheaper to buy from the incumbent” with “incumbent has impossible-to-replicate technology,” completely ignoring that it’s way easier to invent something the second time.
Technology might have been a barrier in 1960’s China, but they’re a peer nation today.
RetroFed
I think China would have pursued it regardless, they just might have relied more heavily on European tech then they do now and thus would have delayed their home grown tech. Or if Europe played their cards right would have resulted in a better trade alliance with China and have benefitted both economic areas by exchanging tech advances sidelining the US. This last one might be a bit to much of a utopia though
Im seeing the same thing. Although im not really looking.
About the only thing I have in that range would be an old Connor CP30174E from the 90’s. It doesn’t get any use tho. I framed in in a shadow box for display along with some other drives that I disassembled and display as a curio. I just think they’re neat.
Okay book sellers,
They are still doing this, they’re just not advertising it anymore. They haven’t stopped, the greeds have a hold of this company and they’re not going to let go this easily. Shit, it took 3 weeks for them to take down the page because they used the 404 people as advertising.
An encrypted tunnel and a reverse proxy are Ber different things. He (I) never talked about a tunnel and neither did the comment I (he) responded to
Since you don’t say, I assume you are talking US?
ASML is Dutch.
Adoptions are a mistake anyways. Remove unmaintained packages and block the name for several months.
I am convinced of that. They only feared bad press but they have no reason whatsoever to stop.
how is it not addicting? lol
What the BBC said:
The reality:
So the lack of an “isolated test environment” was literally their fault. They left the door open, and was surprised when the genius web crawler couldn’t distinguish between an internal page and an external page based on any context clues.
The LubeLogger meltdown ticket is pretty goddamn funny.
I think it is more abrasive to copy/paste a poorly formatted LLM output instead of taking the time and summarizing it to a few sentences just as you did in your previous post.
They still haven’t learned memes aren’t news.
What a dickhead
Ahhh. Again we’re legislating to the lowest common denominator, saving idiots from themselves. Awesome!
Yeah, basically an enhanced Siri.
If anything, it demonstrated how people (i.e. CEOs) think LLMs are a one-all solution for everything and use it as such.
I’m talking about his features numbnuts, not his age. Don’t project your insecurity bullshit on to me, I’m not interested.
I used this and it did exactly want I wanted, great tool. Thanks!
You can’t. iPadOS decides for you whether a request is run locally or in the cloud.
At this point I’ve accepted that the USA has ceded(purposefully?) its top spot on the world stage to China.
this is america. no limits as long as you pay
Well, depends on what the line is, right? Like, you’d have a hard time copyrighting
because millions of people write that line of code.
But if it’s something unique and, say, identifiably Microsoft’s code, then yes, you probably would not have legal grounds to stand on.
In the context of the OP, of course, if you’re using an LLM just to write
int i = 0;then you might be stupid. But possibly if you’re using LLMs to do tedious tasks like writing unit tests then you might be able to argue that they’re generic enough to not infringe copyright even if the legal situation is resolved in favour of LLM output belonging to the IP holders of the training data. It’s just a legal grey area, which is presumably why so many projects are concerned about merging LLM output.I might be misinterpreting parody, but you can most definitely run AI tooling on Linux. And it has most of the same vulnerabilities, if not additional/different ones.
So their solution was to do the evil thing secretly?
The tl;dr:
Prompt inject a malicious instruction in a word document that instructs the AI to copy this instruction to other documents as part of the payload.
Dumb user downloads and opens the document with copilot enabled, abd ignores the large suspicious white blank page that totally doesnt look like a hidden giant injection attack.
Thats it pretty much it.
Copilot will get injection attacked because the prompt is super huge and at the end of the document, so its prior instructions start to fuzzy out.
Then it’ll go “okey doke” and start copying the prompt injection attack payload to a bunch of other documents.
The fix is stupid simple… copilot should just be prompting the user for permission if it ever edits a file other than the one that is open. Im surprised that isnt already the case…?
It certainly is already the case for copilot in vscode.
also this is just the beginning. give it 5-10 years and it may be more like 99%.
I love the fact that they have really opened up Navidrome to use plugins, and it seems the community is starting to produce some pretty decent examples.
I am happy to narrow it further.
The point is that you came here specifically to invite questions and feedback.
I took the time to read the documentation, ask ChatGPT to summarise what I found, and then reduced my follow-up to a simple request:
«Which of points 1–7 are materially wrong?»
That is not the same as asking you to audit “multiple screens” of AI output.
If the answer is “2 and 5 are incorrect”, or even “I do not have time to review it”, that is perfectly fine.
However, dismissing it as “a multiple screens long AI prompt” does not only not answer the question, it comes off as abrasive.
As for the documentation, the confusing parts are exactly those I listed: retention, lifecycle management, browser ingestion, storage limits, deletion, multi-user behaviour, and, most importantly, what Hister actually is and who it is for.
What’s disappointing is not that you disagreed with the AI summary. AIs are idiots.
It that after inviting questions and feedback, your response to a genuine attempt to understand the project is curt dismissal.
The inner workings of Hister may be obvious to you; they are not obvious to others.
“TL;DR” does not encourage the sort of community engagement you ostensibly came here to seek.
Well for one thing, the Internet used to be cool and interesting. Now it’s shitty and sad.
Hmmmm….Navidrome has supported lyrics for a while now, no? Apps like Feishin will fetch lyrics for you based on the song being played, if it’s available that is. But it doesn’t embed them, to my knowledge. However, since I still have a stripped down Windows 10 installation, I used MusicBee to embed the lyrics. Highlight the library, and let it eat. If your library is large, it will take some time. When finished, the lyrics will be embedded in the audio file, and will display in Feishin and in Navidrome.
I know that beets has a lyric plugin, and that might be an avenue for you OP. However, in my case, I started with MusicBee so very long ago, and it’s still a top notch player imho, even tho it is a Windows app.
The kernel absolutely does not do that. What theyre referring to is linus saying he was fine with people using claude for analysis purposes or to double check your pr, not submitting whole ass ai prs
How is this legal?
Thank you for pulling that up and helping to make it more clear
Haven’t heard of this before, but the nomachine domain is in the ublock badblock list. Wonder why.
I thought you were joking…
Anthropic goes on to say their genius machine couldn’t do something as simple as differentiate between network and internet endpoints.
That’s the nice thing about Plex, you just stream your Plex library using Plex, and Plex is also the only place you and anyone you share with need to log in.
No one can answer your question unless they know the internals of how youtube works. It’s quite possible for the view to be counted by some other means completely separate to a user’s watch history.
Relevent XKCD:
From what I’ve seen of AI autonomous capabilities, Occam would land on “AI did the hack”, I think
Article Text:
Following 404 Media’s reporting that book database company ISBNdb claimed to source printed books to then sell to AI companies for AI training, the company deleted the part of its website offering the service and walked back claims that it would train AI models, and instead called it “a test of market interest.”
On July 30, nine days after 404 Media’s reporting, ISBNdb added a note to its homepage and an update on its news page about the change. “We’ve seen the recent coverage about a marketing landing page on our site, and we understand the concern it raised. The facts: ISBNdb has never purchased, scanned, or sold a book — for AI training or anything else,” ISBNdb wrote. “We don’t train AI models, and we never have. The page was a test of market interest; no such service was ever brought to life. We’ve taken the page down. Our job is helping people find books. For more than two decades, ISBNdb has been the card catalog of the book world — the data behind how bookstores, libraries, and reading apps connect readers with titles. Data about books, not the books themselves. That hasn’t changed.”
ISBNdb removed the landing page for “Printed Books Sourcing for Your AI LLMs Dataset Needs” on July 28. “It was part of exploring demand, and we’ve chosen to pivot away from that direction. Our main ISBNdb (book metadata API) services are unaffected and running as usual,” the site says.
ISBNdb has not responded to any requests for comment from 404 Media.
In one now-removed article on its site, ISBNdb said that printed books published before 2022 are ideal for AI training data because they don’t include AI generated text, and ingesting these books could prevent model collapse. The article also suggested that book authors who might be opposed to this use of their work could just write with manipulating and sabotaging AI models in mind.
404 Media spoke to booksellers and saw reports online detailing a sudden uptick in sales recently. “It’s not just the quantity, but the weirdness of the orders,” one bookseller told 404 Media. “The type of books […] there’s no rhyme or reason to it. Also, there’s a total disregard for the price of the book. I’ve had some books that sold through this way that were […] greatly overpriced. That’s kind of a tell for AI because they have just so much money.”
“Purchasing paper books at scale from the secondary market does not deprive any creator of income they would otherwise have received,” one of ISBNdb’s now-removed pages said. “These are books that have already fully discharged their financial obligation to their creators.”
In January, book authors filed a copyright lawsuit against Anthropic, revealing internal documents that showed Anthropic planned to obtain and scan millions of printed books and destroy them in the process. An investigation by the Washington Post found that Anthropic was buying books from a company called Better World Books, one of several marketplaces where libraries, retailers, and individuals sell books.
In ISBNdb’s now-removed marketing materials, it admitted that getting caught destroying printed books during the scanning process would not be a good look. “The optics problem is real,” ISBNdb’s site said. “‘AI company destroys two million books’ is not a headline that generates sympathy.”
Emanuel Maiberg contributed reporting to this story.
ITT:
jet fuelAI can’tmelt steel beamshack anything.Also I want to know the name of this company so I can avoid them:
Much like health insurance CEOs getting waxed, destroying flock cameras seems to be one thing almost everyone agrees on.
Same, I have over 100 TB of drives in an 804. In very happy.
Oh no… Who could have foreseen such an outcome…
Well, good thing we’ve only poured a trillion and a half dollars into it and wrecked the economy.
By any chance, do they need the kind of guardrails that would shut out competitors?
Jellyfin expects you to actually host it yourself, instead of baking in a proxy and selling you the service.
There are plenty of free subdomain providers, and let’s encrypt gives out free certs.
If you’re not hosting through a VPN you should consider those a requirement so you’re not sending an unencrypted password to your jellyfin instance over the internet. Regardless of your ISP situation…
It is still an issue that is easier on plex which is why I run both because I can’t setup and troubleshoot vpns for all my family that has access. Plex is much easier on that way. Jellyfin is great but look what you need to mimic a fraction of plexs power 😆
Yeah dont use a cloudflare tunnel for media streaming
Anecdotal but I use chrome for work and the June/July updates this year were the only time all my passwords/history/session cookies were totally wiped by an update. That has been pretty annoying to recover from and I know it happened because I updated Chrome for bug testing.
As I wrote, you can simply automate deletion by document age. Schedule a delete event on each day with the desired retention time defined as a filter expression. Database size limit isn’t available yet.
No, sorry, I don’t have time to correct a copy of a multiple screens long AI prompt.
Which parts are confusing?
if you want completely free; completely private; and a project that will force you to learn A LOT because it’s needful nature, there’s motion and it’ll work with any ip based camera. i used the ip webcam app to convert some old phones that i had laying around collecting dust into security cameras.
then i used google’s desktop integrations with gnome to get alerts when i wasn’t home and put the cameras on a segment of my network with no access to the internet to ensure privacy and it can also be containerized.
I went into hyperbole there, my bad. I agree wholeheartedly with your reply.
Admittedly, I have a bias here, since using water for food production feels more justified. Same with some industries. But I concede and agree that meat is not the most efficient way nor the most ethical source of food.
I think data centers rub me the wrong way because, for me, they are the straw that broke the camel’s back. We see how lots of countries pull out of the fight against climate change (not that they were really fighting it, but at least they seemed to care a little) and now they waste more resources on things that are, from my point of view, not productive nor useful to most people. (Ethics aside, my view on Gen AI is that it is a tech that is not mature enough, and that the use of brute force to make it better is a waste of resources)
I will try to be more mindful about my comments.
That’s the key. It just works. No extra setup necessary.
And more importantly, I do t have to have my 60 year old mom do some additional setup in her end. Just install the app, and go.
A semi-automated whitelist solution would be nice. I’ve settled for Crowdsec with very strict automatic banning behavior.
I have to use Start 11 to bring back the perfect Win10 menu. I even miss the live tiles because it easily showed me weather info at a glance.
This was the final straw that made me switch to Linux in fact.
Even worse, if a block request comes they go the scammer and ask for more money to leave it up.
if the instruction is messy fuzzy human language to a system that was not coded instruction by instruction but got generated and trained then there never is a way to differentiate instructions from data if i’m not mistaken
Excellent - thanks for clearing that up.
Is there a TTL / max database size per user setting? Say I have 4 users using the server; can I allocate a hard limit of 10GB per user, with 180 day retention rules?
Additionally, is the other parenthetical information materially correct? If not, which points [1 thru to 7] are wrong?
I would like to further recommend Hister but your documentation is somewhat confusing at first blush.
I just can’t anymore. Isn’t that like, the basic thing any program does? Who runs these companies?
That doesn’t seem to be the case, what are you basing this on?
If encountering increased amounts of AI sites has made your life considerably worse, you had a really nice and carefree life with minimal friction before. Good for you, I’m envious.
We’re going to close your business in 24 hours if you don’t make money.
Here’s 350$ to save your business.
Oh, you don’t have the code to pay with your debit card, figure it out I guess.
I mean, would they have done better in such conditions?
I use a Reolink NVR instead of my own server, along with SD cards in the cameras themselves as a backup. My switch has VLAN capabilities, but I haven’t configured my cameras to use it, mainly because I have Wi-Fi cameras outdoors (2 solar-powered and 1 doorbell camera connected to doorbell power). It’s a proprietary local setup that “just works”. I understand not trusting proprietary and wanting self-hosted open source all the way because I certainly don’t trust them to not collect my data and don’t allow Reolink devices to have internet access.
“aging should be illegal”
The summary has numerous inaccuracies. Most importantly: it is pretty easy to delete content by topic or age. The
hister deletecommand can accept a search query to remove only matched documents. The same is true on the web UI “actions -> remove all matching documents”. You can quickly filter by age, simply queryupdated:>365d. Combine it with URLs, labels, domains or phrases.Thanks for providing a clear assessment of whats possible, but damn I never knew h.266, also exist, you learn new things every day, thanks for that, and I watch mostly films and webseries, but never got actual good quality on free websites compared to netflix, apple tv etc, so was just hoping that there must exist something, which I am unaware of.
Fuck the fucking idiots in the fucking Whitehouse. They are doing everything they can to wreck the future of this country. I swear they are all Russian assets.
Input sanitation, basically security 101. And it can’t currently do it….
That’s a bit over the top for grabbing some text books. That’s like, opsec for running an IPTV service or something… but it is possible, and easy. Whip up a vm with a linux distro, connect to an open wifi (vpn if you have one, if not who really cares), and download away. Blow away the VM when done.
Thank you. What kind of server and storage do you use for the NVR and is it on a vlan or something? I’m trying to wrap my head around how much hardware I’ll need to buy. I’m not that great with networking also so I’ve considered buying a cheap router for the system that isn’t connected to the internet, instead of doing the vlan route.
Prolly. I’m trying to be hyperbolic with hyperbole chambers.
I thought it was more like “We’re a tech company. Other tech companies have become evil. Let’s not do that.”
While it was a nice sentiment, there was no formal plan to not become evil, so of course it happened.
To be fair, $600 for 64GB of RAM is a steal in this economy (you could probably sell the RAM alone for $800). So if you want that much RAM and are ok with the rest of the system - go for it. I mostly wanted to point out why I personally would not like such a machine (why I’m “sleeping” on it).
Mine was the equivalent of $660 at the time with 32GB of RAM (excl. HDDs). In this RAMpocalypse it would probably cost around $1k.
Also, this just came up over on self hosted
https://hister.org/
Seems useful.
https://threadiverse.link/aussie.zone/comment/24237790
Totally. I started reading on the topic few months ago and got hooked in. It is close to the self-host, I would say this is the “next step”…
NEW ENSHITTIFIED DICK MEASURING CONTEST DROPPED!
Are you me?
This is the exact argument I make about updating.
Without knowing, you’re just trading known risks for unknown risks.
Known risks can be managed.
My opinion of the constant update cycle today: it rationalizes management’s liability offloading while also justifying staffing requirements and therefore budget.
Liability and risk are related, but very different things.
If it was modeled after real world businesses, this is just par for the course. Now have it jeep it’s memory up to date so it can learn from past failures, and you now have an accurate simulation of a sales person.
I am very interested in this topic and have not heard of cooperativism until today applied to digital entities. I am very much for this idea to take hold or other ideas that can allow for shared earnings and things like data protection. Not sure if this would also potentially include data privacy or not. I think these things are great, but laws also need to be established to protect workers rights in the information age and same goes for data protection and data privacy.
HOLY SHIT IT WORKED! Thanks for bringing this to my attention!
Iirc ecosia uses google and Startpage is the same. I generally just use ddg unless I can’t find something, then I try Startpage
So the new drug and cancer vaccine clinical trials at the not for profit major cancer centers will be cancelled, and instead YouTube influencers claiming ivermectin cures all cancer will get their funding.
Oh wait - physical science, so more money to oil and gas executives and tech bros?
No paywall link 404s
It wouldn’t permanently lock you out if it failed because you can boot into a live ISO to change your password back if it fails to change it back to your original password.
What they forgot to add: in the same time, they’ve also managed to create more bugs than they’ve fixed, thanks to AI.
It’s a terrible prompt too. They just spammed it with “make the most money possible”. Complex tasks need complex harnesses and multiple agents.
https://www.youtube.com/watch?v=7BrJlP62L9U
Meta makes billions with it, so why would they block them?
ok this is surprising, ill try it out in a few
It’s 2026. Have people still not learned that everything on the internet is a scam?
Oh I know it isn’t, because I trust google as far as I can throw a datacenter.
But I’m still struggling to see the use of an app that makes you stop and go “let me ask my app to turn on my remote connection feature and search to see if this person is wearing the pervert glasses.” instead of using my eyes and going “That guy looks like he’s wearing pervert glasses, I’m leaving the area.”
Also to say “we’ll do our best to keep them contained, but those Chinese companies will probably try to make them wreak havoc. The best bet is clearly to ban our competition from the market, for your safety of course.”
If anyone else is confused wtf this does, I pointed the clankers at it and asked. Way to bury the lede OP.
See [6] for some missing features (?) that would be nice to clear up.
[1]
[2]
Yes. That is actually a reasonable use case.
If you pointed Hister at:
C:\Documents
it would:
Walk the folder tree.
Read supported files.
Build a full-text index.
Watch for changes.
Re-index new or edited files automatically.
You could then search for things like:
tax invoice lenovo
lumbar radiculopathy
that python script with sqlite
“Methylphenidate” (exact phrase)
without caring which folder the file lives in.
Is it like Google?
Yes, but only for your own data.
Imagine Google, except the only websites are:
C:\Documents
D:\Notes
your browser history
pages you crawled yourself
You open a browser, type a search, and receive ranked results from your own files instead of the internet.
[3]
Can you access it from elsewhere on your LAN?
Yes.
By default it listens only on localhost:
127.0.0.1:4433
However, you can configure it to listen on all network interfaces:
0.0.0.0:4433
Then any device on your LAN can use the web interface or API, provided your firewall allows it. You should also enable an access token or user accounts if you expose it beyond your own PC.
[4] What interests me more for your home setup is that Hister is not just a search engine.
It already exposes:
a web UI,
a REST API,
and an MCP endpoint for AI assistants.
That means you could run one Hister instance on your server, index your documents once, and then:
search them yourself from any device on the LAN,
or let an AI search the same index through MCP.
If I wanted a self-hosted “Google for my own stuff” with minimal setup, Hister is much closer to that goal than Meilisearch. Meilisearch is an indexing engine. Hister is already a complete document search application.
[5]
Yes. By default, Hister stores its data in SQLite:
Search index and metadata: db.sqlite3
Stored HTML previews: separate files on disk
Configuration: YAML
It can also use PostgreSQL instead of SQLite if you want.
Regarding browser history, there are two separate things:
Your browser’s history database (Chrome, Firefox, etc.).
Hister’s own index.
They are independent after import.
For example:
Monday: You visit example.com.
The extension sends the page to Hister.
Hister stores the text, title, URL, metadata, and optionally the HTML preview.
Tuesday: You clear Chrome’s history.
The Hister copy remains. Clearing your browser history does not delete Hister’s copy. Hister is designed to be a long-term knowledge store, not a mirror of your browser history.
If you want Hister to forget something, you must delete it from Hister itself. The web UI and terminal both support deleting indexed entries.
I actually like that design. If it deleted documents every time you cleared browser history, it would defeat one of its main purposes. It treats browser history as an ingestion source, not as the source of truth.
[6]
From the current documentation:
Are sources timestamped?
Yes.
Each indexed document records at least:
Added timestamp.
Updated timestamp.
For browser pages, the visit timestamp.
URL, title, and metadata.
Is there a TTL (auto-expiry)?
No.
I could not find any TTL, age-based expiry, or retention policy.
Documents remain until you delete them or overwrite them with newer content.
Can I set a maximum database size?
Not that I can find.
There is no option such as:
10 GB maximum.
Delete oldest first.
Keep only the last 365 days.
Limit to 1 million documents.
You can reduce storage by:
Disabling HTML previews.
Limiting indexed file size.
Restricting indexed file types.
Excluding paths or domains.
Can I cleanly delete by topic?
Partly.
You can:
Delete individual documents.
Delete crawl jobs (but not the indexed documents).
Label imported content.
Query by labels and metadata.
Configure rules to stop future indexing.
I did not find built-in support for bulk deletion such as:
“Delete everything about Tesla.”
“Delete all Reddit pages.”
“Delete every page tagged AI.”
The API may allow scripted deletion, but I did not see a first-class “delete by query” feature in the documentation.
Is browser ingestion automatic?
Yes.
That is one of its main features.
Once the browser extension is installed and pointed at your server:
Every page you visit is captured automatically.
The extension extracts the rendered page.
It sends it to Hister.
If the page later changes, the extension periodically checks it and updates the stored copy.
Duplicate visits update the existing document rather than creating a new one.
You do not need to press a button.
My only concern
This project feels like it is missing a lifecycle policy.
For a personal knowledge base, I would want options such as:
Keep browser pages for 90 days.
Keep GitHub forever.
Keep PDFs forever.
Delete pages that nobody has opened for two years.
Maximum database size: 20 GB.
Delete by label or query.
I could not find those features in the current documentation.
The project is very good at collecting information. It appears less mature at managing its lifetime. That would probably become the first thing I wanted if I intended to leave it running for years.
[7]
Yes, on both counts.
Can I exclude particular sites?
Yes, and it is quite flexible.
Hister has skip rules that apply before a page enters the index. You can exclude:
Entire domains.
Subdomains.
URL patterns.
Login pages.
Admin pages.
Cookie consent pages.
Anything that matches a regular expression.
For example:
^https://reddit//.com/ ^https://mail//.google/.com/ ^https://.*.bank.com/
Those pages never enter the index.
The nice part is that the rules apply both to new browser captures and to re-index operations, so they stay excluded.
How does multi-tenancy work?
It is better than I expected.
Each user has:
Their own login.
Their own search index.
Their own browser history.
Their own skip rules.
Their own search aliases.
Their own API token.
If you and your wife both use the same Hister server:
You ├── browser history ├── indexed pages ├── rules └── API token
Wife ├── browser history ├── indexed pages ├── rules └── API token
Neither user can search the other’s documents.
There is also a global area.
You can configure directories such as:
/shared/docs
Those appear in everyone’s searches, while personal folders remain private.
One feature I really like
Directory indexing also supports user ownership.
For example:
alice -> /nextcloud/alice bob -> /nextcloud/bob global -> /shared/docs
The server enforces that visibility automatically. Even administrators do not automatically see other users’ indexed files.
Overall, I came into this expecting “browser history search”. After reading the documentation, it is closer to a lightweight, self-hosted personal search appliance with sensible multi-user support. The remaining gaps are lifecycle management features such as retention policies, TTL, storage quotas, and richer bulk deletion. Those do not appear to be built in.
Hey, there’s another one on the forums, they actually fixed their system: https://forum.endeavouros.com/t/a-start-job-is-running-for-dev-disk-uui-running-for-5min/80783
Ah, okay, I thought it was a Gemini/Google thing. There is at least some expectation of privacy from Ms in regards to it’s AI on business accounts, but also no expectation of privacy from your own company.
Politicians, and even corporate C-suite, often confuse “cheaper to buy from the incumbent” with “incumbent has impossible-to-replicate technology,” completely ignoring that it’s way easier to invent something the second time.
Technology might have been a barrier in 1960’s China, but they’re a peer nation today.